64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x7a, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:25:37 executing program 4: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x5}, 0x8) 15:25:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x9, 0x6, 0x9, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 15:25:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) r1 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r1, 0x8208200) (async) write$tun(r1, &(0x7f00000000c0)={@void, @void, @mpls={[{0x9}, {0x7336, 0x0, 0x1}, {0x9f}, {0x7, 0x0, 0x1}], @generic="777f2e15c398e9b5d1acfd03562fc1e21de9443432fec09022c5b1dcd648553540209ec7ba2f2075316f"}}, 0x3a) [ 817.486068][ T8118] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 15:25:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c"], 0x70}, 0x0) [ 817.536234][ T8128] syzkaller1: entered promiscuous mode [ 817.541750][ T8128] syzkaller1: entered allmulticast mode 15:25:37 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@id, 0x10, 0x0}, 0x0) 15:25:37 executing program 4: syz_clone(0xc0200000, &(0x7f00000000c0)="20450c4570fab0bd3f461e519a624f665d166da82c5c4727b2bdae3413c7a6791ca00b0eeef0a748d9f930fba7d1a34cc29636a581e1a4eba74d8472b38bf574de692942194370398fc1a9d4f0d8d4f7b3e3463e87ad", 0x56, &(0x7f0000000140), &(0x7f0000000180), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) [ 817.578117][ T8118] 8021q: adding VLAN 0 to HW filter on device batadv214 [ 817.607591][ T8118] bond69: (slave batadv214): Enslaving as a backup interface with an up link [ 817.649780][ T8139] bond69 (unregistering): (slave batadv214): Releasing backup interface [ 817.677972][ T8139] bond69 (unregistering): Released all slaves [ 818.545848][ T3187] usb usb6-port1: attempt power cycle 15:25:40 executing program 2: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x8}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) (async) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x8}) (async) 15:25:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) 15:25:40 executing program 0: syz_clone(0xc0200000, &(0x7f00000000c0)="20450c4570fab0bd3f461e519a624f665d166da82c5c4727b2bdae3413c7a6791ca00b0eeef0a748d9f930fba7", 0x2d, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="3dce93fc3a09ff21c1646a456183d73679daaa4ceb6e9142a88b06a65987146bb90d586b346716684afc23dd74aea0d226bd2e6d4683aa77247e88b53fbe1f10d981be55bc7f07734feda901c7a3693e56001d58c857fb611120a2d3cf68ce2b2b6dfdca3978ac7764b0a5eea6b6") bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) 15:25:40 executing program 4: syz_clone(0xc0200000, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) 15:25:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x7c, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:25:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x1d4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) [ 820.505870][ T3187] usb usb6-port1: unable to enumerate USB device 15:25:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) (async) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) 15:25:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) [ 820.600628][ T8154] syzkaller1: entered promiscuous mode [ 820.606378][ T8154] syzkaller1: entered allmulticast mode [ 820.630429][ T8156] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 820.680385][ T8156] 8021q: adding VLAN 0 to HW filter on device batadv215 [ 820.692990][ T8156] bond69: (slave batadv215): Enslaving as a backup interface with an up link [ 820.710513][ T8173] bond69 (unregistering): (slave batadv215): Releasing backup interface 15:25:40 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x181ec2, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00'}) write$binfmt_elf64(r1, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0xe3, 0x0, 0x5, 0x46, 0xaba9, 0x3, 0x6, 0x2, 0x99, 0x40, 0x26f, 0x0, 0x1000, 0x38, 0x1, 0x64dc, 0x1, 0xf547}, [{0x6474e551, 0x4, 0x4, 0x5, 0xffffffffffffa839, 0x1, 0x3, 0x3}, {0x6, 0xa63c, 0x2, 0x800, 0x5, 0x1d4, 0x1, 0x4}], "581d4d61fdbd06dec77ded901a67dd3aa2c8bf793aad26451e9586644662c02ecb10d95d5ee25b70785a138ddef9299419ca31f45e86d026295394449ed3ca68215bcc40", ['\x00', '\x00', '\x00']}, 0x3f4) sendfile(r1, r1, &(0x7f0000000640)=0x2, 0x5) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@const={0x3, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x2e, 0x2e]}}, &(0x7f0000000100)=""/99, 0x29, 0x63, 0x1}, 0x20) fcntl$notify(r2, 0x402, 0x80000024) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'xfrm0\x00', 0x8000}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000040)=0x5) [ 820.733001][ T8173] bond69 (unregistering): Released all slaves 15:25:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x300, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:25:40 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x181ec2, 0x0) (async, rerun: 32) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00'}) (async) write$binfmt_elf64(r1, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0xe3, 0x0, 0x5, 0x46, 0xaba9, 0x3, 0x6, 0x2, 0x99, 0x40, 0x26f, 0x0, 0x1000, 0x38, 0x1, 0x64dc, 0x1, 0xf547}, [{0x6474e551, 0x4, 0x4, 0x5, 0xffffffffffffa839, 0x1, 0x3, 0x3}, {0x6, 0xa63c, 0x2, 0x800, 0x5, 0x1d4, 0x1, 0x4}], "581d4d61fdbd06dec77ded901a67dd3aa2c8bf793aad26451e9586644662c02ecb10d95d5ee25b70785a138ddef9299419ca31f45e86d026295394449ed3ca68215bcc40", ['\x00', '\x00', '\x00']}, 0x3f4) sendfile(r1, r1, &(0x7f0000000640)=0x2, 0x5) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@const={0x3, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x2e, 0x2e]}}, &(0x7f0000000100)=""/99, 0x29, 0x63, 0x1}, 0x20) fcntl$notify(r2, 0x402, 0x80000024) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'xfrm0\x00', 0x8000}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000040)=0x5) 15:25:40 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) [ 820.819639][ T8181] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 820.877964][ T8181] 8021q: adding VLAN 0 to HW filter on device batadv216 [ 820.907575][ T8181] bond69: (slave batadv216): Enslaving as a backup interface with an up link [ 820.955241][ T8181] bond69 (unregistering): (slave batadv216): Releasing backup interface [ 820.999462][ T8181] bond69 (unregistering): Released all slaves [ 822.475936][ T3187] usb usb6-port1: attempt power cycle 15:25:44 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, '.\x00'}) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000080)=ANY=[@ANYBLOB="c1ef00001d358400008d0c0d8c8f00808b87028f020f028583028200000000003acad131fd00"/47]) 15:25:44 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x16, 0x0, 0x0, 0x0}, 0x20) 15:25:44 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x181ec2, 0x0) (async) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) (async, rerun: 32) r1 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00'}) write$binfmt_elf64(r1, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0xe3, 0x0, 0x5, 0x46, 0xaba9, 0x3, 0x6, 0x2, 0x99, 0x40, 0x26f, 0x0, 0x1000, 0x38, 0x1, 0x64dc, 0x1, 0xf547}, [{0x6474e551, 0x4, 0x4, 0x5, 0xffffffffffffa839, 0x1, 0x3, 0x3}, {0x6, 0xa63c, 0x2, 0x800, 0x5, 0x1d4, 0x1, 0x4}], "581d4d61fdbd06dec77ded901a67dd3aa2c8bf793aad26451e9586644662c02ecb10d95d5ee25b70785a138ddef9299419ca31f45e86d026295394449ed3ca68215bcc40", ['\x00', '\x00', '\x00']}, 0x3f4) (async) sendfile(r1, r1, &(0x7f0000000640)=0x2, 0x5) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@const={0x3, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x2e, 0x2e]}}, &(0x7f0000000100)=""/99, 0x29, 0x63, 0x1}, 0x20) fcntl$notify(r2, 0x402, 0x80000024) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'xfrm0\x00', 0x8000}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000040)=0x5) 15:25:44 executing program 4: socketpair(0x1d, 0x0, 0x5, &(0x7f0000000000)) 15:25:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x500, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:25:44 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x20e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) 15:25:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) 15:25:44 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@enum={0x7, 0x2, 0x0, 0x6, 0x4, [{0x2}, {0xc}]}]}, {0x0, [0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x3d, 0x0, 0x1}, 0x20) [ 824.435741][ T3187] usb usb6-port1: unable to enumerate USB device [ 824.468600][ T8194] syzkaller1: entered promiscuous mode [ 824.474214][ T8194] syzkaller1: entered allmulticast mode 15:25:44 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x7, &(0x7f0000000440)=@framed={{}, [@cb_func, @func, @func]}, &(0x7f0000000740)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:25:44 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, '.\x00'}) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000080)=ANY=[@ANYBLOB="c1ef00001d358400008d0c0d8c8f00808b87028f020f028583028200000000003acad131fd00"/47]) 15:25:44 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001f80)={0x11, 0x1, &(0x7f0000001d00)=@raw=[@ldst={0x0, 0x0, 0x1}], &(0x7f0000001d80)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:25:44 executing program 0: perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1c88}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 824.504390][ T8199] can: request_module (can-proto-5) failed. [ 824.517508][ T8197] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 15:25:44 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func={0x4, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x2a}, 0x20) 15:25:44 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, '.\x00'}) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000080)=ANY=[@ANYBLOB="c1ef00001d358400008d0c0d8c8f00808b87028f020f028583028200000000003acad131fd00"/47]) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, '.\x00'}) (async) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000080)=ANY=[@ANYBLOB="c1ef00001d358400008d0c0d8c8f00808b87028f020f028583028200000000003acad131fd00"/47]) (async) 15:25:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) 15:25:44 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x19, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 824.563326][ T8207] 8021q: adding VLAN 0 to HW filter on device batadv217 [ 824.575277][ T8207] bond69: (slave batadv217): Enslaving as a backup interface with an up link [ 824.594027][ T8218] bond69 (unregistering): (slave batadv217): Releasing backup interface 15:25:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x600, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 824.671689][ T8218] bond69 (unregistering): Released all slaves [ 824.739175][ T8234] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 824.763203][ T8234] 8021q: adding VLAN 0 to HW filter on device batadv218 [ 824.773966][ T8234] bond69: (slave batadv218): Enslaving as a backup interface with an up link [ 824.786588][ T8234] bond69 (unregistering): (slave batadv218): Releasing backup interface [ 824.807485][ T8234] bond69 (unregistering): Released all slaves 15:25:45 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x20e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) 15:25:45 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1}, 0x48) 15:25:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) 15:25:45 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x5}]}]}, {0x0, [0x0, 0x5f, 0x2e]}}, 0x0, 0x35}, 0x20) 15:25:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x700, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:25:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x0, 0x0, 0x0, 0x1010}, 0x48) 15:25:45 executing program 4: openat$tun(0xffffffffffffff9c, 0x0, 0x478340, 0x0) 15:25:45 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) [ 825.401405][ T8241] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 825.436063][ T8248] syzkaller1: entered promiscuous mode [ 825.441696][ T8248] syzkaller1: entered allmulticast mode [ 825.459603][ T8241] 8021q: adding VLAN 0 to HW filter on device batadv219 [ 825.468214][ T8241] bond69: (slave batadv219): Enslaving as a backup interface with an up link [ 825.480697][ T8241] bond69 (unregistering): (slave batadv219): Releasing backup interface [ 825.502524][ T8241] bond69 (unregistering): Released all slaves [ 826.505819][ T3068] usb usb6-port1: attempt power cycle 15:25:48 executing program 4: bpf$BPF_GET_MAP_INFO(0x1b, 0x0, 0x0) 15:25:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 15:25:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'bond_slave_0\x00', 0x2}) r1 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r1, 0x8208200) write$tun(r1, &(0x7f0000000240)={@val={0x0, 0x884c}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="c62fc8015855", @val={@val={0x9100, 0x1, 0x0, 0x4}, {0x8100, 0x3, 0x0, 0x1}}, {@mpls_mc={0x8848, {[{0x4}, {}, {0x1}], @ipv4=@gre={{0x40, 0x4, 0x1, 0x4, 0x128f, 0x65, 0x0, 0x5, 0x2f, 0x0, @multicast1, @broadcast, {[@generic={0x83, 0x10, "595cb91d9344fb24e1e51cc486d4"}, @timestamp_addr={0x44, 0x14, 0x64, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@broadcast, 0xf5}]}, @ssrr={0x89, 0x1b, 0xc0, [@dev={0xac, 0x14, 0x14, 0x43}, @rand_addr=0x64010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010101]}, @ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x3c, 0x29, 0x3, 0x8, [{@loopback, 0x3f}, {@multicast1, 0x1}, {@local, 0x3}, {@loopback, 0x7}, {@local, 0x3}, {@multicast2}, {@loopback, 0x16}]}, @timestamp_prespec={0x44, 0x3c, 0x98, 0x3, 0x1, [{@broadcast, 0x2}, {@local, 0x400}, {@multicast1, 0x4cf}, {@private=0xa010100, 0x2}, {@multicast2, 0x400}, {@rand_addr=0x64010100, 0x8}, {@loopback, 0x5}]}, @timestamp={0x44, 0x18, 0xc1, 0x0, 0xe, [0x1, 0xfffffff7, 0x61d1, 0x8001, 0x683c554d]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x9e, 0x3, 0x4, [{@broadcast, 0x3}, {@broadcast, 0x6}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xd6, 0x1, [], "ddb1ad051a561c3be91eb63ed0ad2e7d262364202e718a8da87d9cb094ac1793d8e5bfc9ee4a50f361360278b6c5b406ad2da1c4f83c8e53494c8ac85632082eb91760a228843e79395c3a8756748f7f89500d51ea2f1918c0ac520719ed74f165c6e687bf7dfa57e747c36a333c2670964c7d07ae7cdcdbc8467b6d1fa6576e639e2de93635b11181d0c60297f0f4210b588c0178ffbdd4d2e1b445d9ff21bd22ed2a1ab5ea647a2da07fe8d27c95e0970d165d7e8b198fd92f3f6c0dc5b8d8b651f637fc868075f846367372307c8ccc4c7c793f5b"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x80], "04acc548d86f762e7711f0231fde06654706c5d11f9da1da583056721e1c37de38953b6474f07beaaf79f407b1fa3af58f149aeaaa380a3a6ea28f9ef82e508e9e"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x400, 0x9, 0x9], "225d7e34873f295da1bf4201de14e593f1970c965a9bcfba44ee8598043d69797f5376e6125d378f36c94d51"}, {0x8, 0x88be, 0x2, {{0x3, 0x1, 0xf7, 0x2, 0x0, 0x2, 0x7, 0x65}, 0x1, {0xff}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0x3, 0x3, 0x0, 0x1, 0x5, 0xfd}, 0x2, {0x4, 0xd1c5, 0x2, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "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"}}}}}}}}, 0x12b5) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) [ 828.505723][ T3068] usb usb6-port1: unable to enumerate USB device 15:25:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x900, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:25:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x20e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) 15:25:48 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@union={0x2}]}, {0x0, [0x0, 0x5f, 0x2e]}}, 0x0, 0x29}, 0x20) 15:25:48 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@typedef={0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1}, 0x20) 15:25:48 executing program 2: clock_gettime(0x0, &(0x7f0000000bc0)={0x0, 0x0}) clock_settime(0x4, &(0x7f0000000300)={0x0, 0x3938700}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/1, 0x1}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f0000000180)=""/13, 0xd}, {&(0x7f00000001c0)=""/34, 0x22}, {&(0x7f0000000200)=""/29, 0x1d}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000400)=""/147, 0x93}], 0x9, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000680)=""/111, 0x6f}, {&(0x7f0000000700)=""/81, 0x51}, {&(0x7f0000000c40)=""/150, 0x96}, {&(0x7f0000000840)=""/58, 0x3a}, {&(0x7f0000000880)=""/117, 0x75}, {&(0x7f0000000900)=""/19, 0x13}], 0x6, &(0x7f0000000d00)=ANY=[@ANYBLOB="ef5900000000000015fb852ee6b9cdcc", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000ec798e4900000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x158}}], 0x2, 0x40000102, &(0x7f0000000c00)={r0, r1+60000000}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) ppoll(&(0x7f0000000340)=[{r2, 0x8208}], 0x1, &(0x7f0000000380), &(0x7f00000003c0)={[0x2]}, 0x8) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r3, 0x10, 0x0, 0x1000f4) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000b00)=@urb_type_bulk={0x3, {0xf}, 0x8001, 0x163, &(0x7f0000000780)="4a7d6024b7b98eb7908dd09e95d29eca4315f5f68c58dcadaee315ddf7ba885e695b0c3ca9e39138ccb42db2c05db248715acba5e2b29d5aab281db6e67a408342b6e44dbcbbbf8af888e2646eabc43bf5cfa77f301f2544177a7d31ecc1cea016bdd87464fcea0d0d71d118bf685efe61e073bae33939066e60e1403cabbbdf0c5fee6a91bd4d630fb2899df7ac000de29228ce9211738b8a4d0860b67d2303cdf9276b8eb2a4b512cd009e2ae1335fe03e5baf5aeeb43eee0e0f026f", 0xbd, 0x7, 0x8001, 0x5, 0x4ef9, 0xffffffff, &(0x7f0000000ac0)="c79e972e1a4ab90872f15336eca88169f84259d768b1d58c970070d42ab28825e35f1f39f4ad53b536c869dc75aa892b55ceed88bdebc32372117a407e4f14"}) 15:25:48 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002b00)={&(0x7f0000000480)=@rc, 0x80, 0x0}, 0x40010001) 15:25:48 executing program 4: bpf$BPF_GET_MAP_INFO(0x19, 0x0, 0x0) [ 828.573031][ T8259] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 15:25:48 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x9, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @func, @cb_func, @cb_func]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:25:48 executing program 4: mknodat$null(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4182, 0x103) [ 828.635221][ T8266] syzkaller1: entered promiscuous mode [ 828.640798][ T8266] syzkaller1: entered allmulticast mode [ 828.671601][ T8275] 8021q: adding VLAN 0 to HW filter on device batadv220 15:25:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'bond_slave_0\x00', 0x2}) r1 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r1, 0x8208200) write$tun(r1, &(0x7f0000000240)={@val={0x0, 0x884c}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="c62fc8015855", @val={@val={0x9100, 0x1, 0x0, 0x4}, {0x8100, 0x3, 0x0, 0x1}}, {@mpls_mc={0x8848, {[{0x4}, {}, {0x1}], @ipv4=@gre={{0x40, 0x4, 0x1, 0x4, 0x128f, 0x65, 0x0, 0x5, 0x2f, 0x0, @multicast1, @broadcast, {[@generic={0x83, 0x10, "595cb91d9344fb24e1e51cc486d4"}, @timestamp_addr={0x44, 0x14, 0x64, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@broadcast, 0xf5}]}, @ssrr={0x89, 0x1b, 0xc0, [@dev={0xac, 0x14, 0x14, 0x43}, @rand_addr=0x64010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010101]}, @ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x3c, 0x29, 0x3, 0x8, [{@loopback, 0x3f}, {@multicast1, 0x1}, {@local, 0x3}, {@loopback, 0x7}, {@local, 0x3}, {@multicast2}, {@loopback, 0x16}]}, @timestamp_prespec={0x44, 0x3c, 0x98, 0x3, 0x1, [{@broadcast, 0x2}, {@local, 0x400}, {@multicast1, 0x4cf}, {@private=0xa010100, 0x2}, {@multicast2, 0x400}, {@rand_addr=0x64010100, 0x8}, {@loopback, 0x5}]}, @timestamp={0x44, 0x18, 0xc1, 0x0, 0xe, [0x1, 0xfffffff7, 0x61d1, 0x8001, 0x683c554d]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x9e, 0x3, 0x4, [{@broadcast, 0x3}, {@broadcast, 0x6}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xd6, 0x1, [], "ddb1ad051a561c3be91eb63ed0ad2e7d262364202e718a8da87d9cb094ac1793d8e5bfc9ee4a50f361360278b6c5b406ad2da1c4f83c8e53494c8ac85632082eb91760a228843e79395c3a8756748f7f89500d51ea2f1918c0ac520719ed74f165c6e687bf7dfa57e747c36a333c2670964c7d07ae7cdcdbc8467b6d1fa6576e639e2de93635b11181d0c60297f0f4210b588c0178ffbdd4d2e1b445d9ff21bd22ed2a1ab5ea647a2da07fe8d27c95e0970d165d7e8b198fd92f3f6c0dc5b8d8b651f637fc868075f846367372307c8ccc4c7c793f5b"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x80], "04acc548d86f762e7711f0231fde06654706c5d11f9da1da583056721e1c37de38953b6474f07beaaf79f407b1fa3af58f149aeaaa380a3a6ea28f9ef82e508e9e"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x400, 0x9, 0x9], "225d7e34873f295da1bf4201de14e593f1970c965a9bcfba44ee8598043d69797f5376e6125d378f36c94d51"}, {0x8, 0x88be, 0x2, {{0x3, 0x1, 0xf7, 0x2, 0x0, 0x2, 0x7, 0x65}, 0x1, {0xff}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0x3, 0x3, 0x0, 0x1, 0x5, 0xfd}, 0x2, {0x4, 0xd1c5, 0x2, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "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"}}}}}}}}, 0x12b5) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'bond_slave_0\x00', 0x2}) (async) creat(&(0x7f0000000440)='./bus\x00', 0x0) (async) ftruncate(r1, 0x8208200) (async) write$tun(r1, &(0x7f0000000240)={@val={0x0, 0x884c}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="c62fc8015855", @val={@val={0x9100, 0x1, 0x0, 0x4}, {0x8100, 0x3, 0x0, 0x1}}, {@mpls_mc={0x8848, {[{0x4}, {}, {0x1}], @ipv4=@gre={{0x40, 0x4, 0x1, 0x4, 0x128f, 0x65, 0x0, 0x5, 0x2f, 0x0, @multicast1, @broadcast, {[@generic={0x83, 0x10, "595cb91d9344fb24e1e51cc486d4"}, @timestamp_addr={0x44, 0x14, 0x64, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@broadcast, 0xf5}]}, @ssrr={0x89, 0x1b, 0xc0, [@dev={0xac, 0x14, 0x14, 0x43}, @rand_addr=0x64010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010101]}, @ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x3c, 0x29, 0x3, 0x8, [{@loopback, 0x3f}, {@multicast1, 0x1}, {@local, 0x3}, {@loopback, 0x7}, {@local, 0x3}, {@multicast2}, {@loopback, 0x16}]}, @timestamp_prespec={0x44, 0x3c, 0x98, 0x3, 0x1, [{@broadcast, 0x2}, {@local, 0x400}, {@multicast1, 0x4cf}, {@private=0xa010100, 0x2}, {@multicast2, 0x400}, {@rand_addr=0x64010100, 0x8}, {@loopback, 0x5}]}, @timestamp={0x44, 0x18, 0xc1, 0x0, 0xe, [0x1, 0xfffffff7, 0x61d1, 0x8001, 0x683c554d]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x9e, 0x3, 0x4, [{@broadcast, 0x3}, {@broadcast, 0x6}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xd6, 0x1, [], "ddb1ad051a561c3be91eb63ed0ad2e7d262364202e718a8da87d9cb094ac1793d8e5bfc9ee4a50f361360278b6c5b406ad2da1c4f83c8e53494c8ac85632082eb91760a228843e79395c3a8756748f7f89500d51ea2f1918c0ac520719ed74f165c6e687bf7dfa57e747c36a333c2670964c7d07ae7cdcdbc8467b6d1fa6576e639e2de93635b11181d0c60297f0f4210b588c0178ffbdd4d2e1b445d9ff21bd22ed2a1ab5ea647a2da07fe8d27c95e0970d165d7e8b198fd92f3f6c0dc5b8d8b651f637fc868075f846367372307c8ccc4c7c793f5b"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x80], "04acc548d86f762e7711f0231fde06654706c5d11f9da1da583056721e1c37de38953b6474f07beaaf79f407b1fa3af58f149aeaaa380a3a6ea28f9ef82e508e9e"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x400, 0x9, 0x9], "225d7e34873f295da1bf4201de14e593f1970c965a9bcfba44ee8598043d69797f5376e6125d378f36c94d51"}, {0x8, 0x88be, 0x2, {{0x3, 0x1, 0xf7, 0x2, 0x0, 0x2, 0x7, 0x65}, 0x1, {0xff}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0x3, 0x3, 0x0, 0x1, 0x5, 0xfd}, 0x2, {0x4, 0xd1c5, 0x2, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "3fa63d2874c9f8d6b98f4abe560ea3c2d877853ba291bea4fbc01e7b323a1394714cf3408e0b92b57e9ff7e485a349a6d543fdf1b5d944140c00abe994e31b6f4078fb6006c35d2590a8dbf2f20ebef93a30e28c597f79dca860b71de493c26fbe30fa7ac94145d1960334b4d11690122b5ca6dc4c81e0292b8454e1c3e809f6a842c2be34ac7faa12ba28dfa9a9bc5b233e22239b4cd33415b965e6a988b51f982cbf3a9ebf7de1b884c261e7166b19ab8df6518f753079d03ed97bf1c2b70eca7ac6cf685a96135c01db63f573a7f4d312f79613170f23de0a9c0d0e271654b80635e857634895bc26a177ef5fdb1b5a5c666fd6d9d59f998610d7642e23f74b2dfb1ab167a8585c8cffbd859e7bd2d5909d7524fa4a6dcfffc6bd30878b2f8e24f4fe7afdd57764b4e9e6e448147a73a34e2dccc01dce457ce79db0c7a8f66c1e1c6c67e45056042f208af0fa2b223511989901e01c8d7b02c6f729d14654359ea4d208442ff2d0af12b157d922d609a8db328504afe76135fb620560b498f57ba11ed2e07dcd34fa75efb043b45ba6997b0920c6229b1b79f0db0bcc063a90ab7e4c803c0b1535f3cd4b7a9b20c2b5f2c78ff4e3ae037abcc22bda6769e100beeb2de1c63f7dcb384bfcd0e1bccc2ec5b636c0bf2304b17353521723decdb55485bf2acef36c4f3d5cb033ae37f206a0b9c64c215a200416f4ca6e17a6a22b232c5ea5f8c1ccb6aa4596680362514112e6d9d4e8fb62b85361cc0d0a0ef09d826d7fd337578443d976fedf633439d8750358893be71a6596ca4a9f438084b6c9c43d9ef12c035f340f9a2bc87bc8db2850f8fb3068ad1555a7f94eea186ac9733a0c62fab7d51dc5c11d06cc931ecbbad94764c7e82ab3ef2a44eb6b6d9423fce9693e17b92e86591a81064f078adcf26d57f817f489cee0e30ad2ccb3f5d4a1fa82cd7eebb244f76be3e9cac5416a7338d8cbfa18b476ec11b2df3c0adef2af6d91d039b44406af7193416b79953da69a38afc1ef6a011f190ee5d9d7640ef183ebe23f6a35bfda52fcfcd37e010cd877200cfd020925b5240638e8cdcf1fc6da5786c90313a5c678dce0da31512f2274bcd3d672910a8f26375820112dcb08e14f336bfb576394b6573fb4fee20395198197e25b358edfe78426f6b8ec3f0e5e5bbcd1d0a340070ebaaa7a5fdae01c389b167491c589700b74c94fc0c6f5d7420160a389c53914122d97c9bdeefb66e85f07ad6886d5e383f1a491fc2243c0b95444393f4cdf9cd50f8d00e5e138722ab5295be5feaa6ef7ca49af4573a8f85ed53b486df8b9ee6bd304feeee8076c3bfc63e90c67b50aef95b4301efbdf0f45401cfaece964889e698c02131487cee2f2968021167a011276f4f6046f11dfc56d182c8f2464770ec9519a357dfe8afaa4b105db86aeafb55dc8020e0fad8a24f85c181337fcf3009ea159ab83c2e756cf3a34cd7dcf67f153434abc320f1b4f558212533eca558cf61815ec40f2823ea10f566fadcab7e7ce7a1d82b4378855434f8b4eaa72ea8f1a335de8be8df8d4aa7c17f2d4ba35d17dd2501d8afe0d7ade93d8404770cf0674772ca001d8dcb116ea5c0542189be01f38a6ba5a7069e5bb965e31ac604be26255d8cad598461942902c53a4e3a9e775530d849baafdafc8a7565f4533b9082393c477209bf9f15906a3f6834d61e8b9bd1c68b75c42799ef61abf292d7628f661474eeab6b957aa080525a0d88fcd8ad4f99637117037210a4faea770948319c5fb81e0617f36bd840cb65e044881e196048f0a1ff80cc7229db71f7e1a929f288e437983e562eff274cd89240ea5e0dbac389e3330792609ef79d32d40fb33bebddffad9aa53ff17727d555ee36371d0ef7afb31766e21e1798c2e871cb4e3a1f91f8e8caea861415194746096f1c803002c088568505a747f2a979a3211b15704a14cad73ca4eb4066a4ad797065f9589596c09ba2be582e6b369d7cef320d43788bdef8aea7d9ef194bf8b47d008580dc50ae3f6a2d51460cf93abf26491f0b2e865b8e398c63c381be9b63e2dd172538b6df8defb52fd90683098608e7f827a0a641e44a1804b5fa0950db068cc875e6a92aa6f0d9be34752043dae9f5b8bbadbcfa93b26617df04e5916675fccc80b6f2ad9c0557206f2056f4d6f1b85df84ed97775af46fb12e056c2a6daf47cf468a2389c9257feadf5d3112c27731e2efc0bf6c16220fa72a06f3d53fb6ef2ac22df1d99e186b2ba696e2cc6cadb40c066d78852c1a2026bc003ade3d7a7de6b009cc18b0a7047a5589906761359222af84efefdb388b8e41fdf9fe8c8555fc1336b167fdc84c600845349f638e1e7482ca4cef485c3a3bf1937e20be9c6e3e56ebbf4544ce3a08ed9c07aa1b62036541cc5303b8a01fed06358ac87c6f36e10d3de67332c12c9e7d7f8cb8bdb2a5fd13556449a9f5e5ae02d281cb7880c6253dd57bce040037df7d0b00e1ef12bda5523302d9c4b19ec836eb35ae2424f268105686cc5804cdb7dc3581121e8bf2913f2c0a23cb1a5b16fd7653d03528d9a2483c49d9f1f8ea8a715832e35263118e1e3140dde0732e840f8036c1e04d4c2b7826d230a4372c5f55d2768758587cebaba38e70105c9c78e1049b2a4e4e44b99c118d7091f43cbededc7e5470dca20b2a298cb17ba09a7847dead9f0d41103f5a4db71f6802417b08142a39f9c04413db0d0f5cbbfce0bede5ea31803d55e0eee7dfcc25e693db4c8201b9bd5a13e675ee4786eeda50f8c9c61fc9e9be46604924952bb5312149f179dd0bcda2ec63a825aea593d81763208c75723be1c482e57805e1e758f77cb626ca94fbf9954feaefac406b9819f29733c9648b1f86bcb6a5c17f87b99c6fe97ca962712b514a551750e69641e4106d3c5ecc040f0fd461cac24e91f1d17ec7f2d0eb35fb5ab54adad5a8e7a71444a2a0665e24b1feb6ff9b0dcafeb7c5675d614bde4613bd8060748cf0d5606b51caeaee8dee62520885ad67c4fc583638f7e51520b46d32ec8a73388e86401a66bc34b07ec04b7ace9954db255d7fa8b79d579f170163f23000019b9ce4278a96c81fbe96af0e9ea0740cde6ae7427278655c02b0fc6b8e1657c660228dc7f90fab502fe58165288ee712afd2915f12065152dc95dd32e06158982392df4dfa1559c119c5d42302ad97134c2e7228ae17e773c67bab2dd91caf9a370a77ab0cb695fe08d68ec2dd7abe96d3f08d4f3898cc57be7b2aab55ead97be5fcf999a87cc3422931397499622e237e9412b91bcbe86607da973e6ed119b80f6cede05cb1abe00f9873326dbe829297b5e8fb251c1552be755f508c43da3fb89a06189448c600cc2e10953a3e85d8d14281224bd915230c10769d9b660b465fa486a21996005d122873420767705f00c79e14f8b18c3f52e5a4f1546cb1ad62a92c8057e9bf90c3ad1bd626b9c26d2495e056fd7ff3ff88341c36dd596aacf3df70b119f098bf0ea795e0a717e7609d7931d193d6fd734576f35b85eb218fddc78caaf6a6743c3ccd79ee46d606241a1a130365ba96ac74b961d874306e681907de30249bfdd1b556a9011eb7f47f565ce11b865938a7a7b620a2b95358f62dc2caee47f25eec119839610baf1f7e97ab3e1ad399e6a05df6e425d83197ccd9127c3a1c3c586dd843cc6bb144491fa9f6b5d55d02d876850b820882489e3ee2f34e02edbc5feeb73994d60d42f9abaf4053a2788dc57f734d4971df9f45e6cf77946532b91573ff102f7671fd30dd94e1965810d188e1485813ce07423245f7f87eb2599b61e29d879793a843f7bf685150e1e7b55afb6f19c0c956973e4f6dfa064ba8c86ae27d66a66e3f5306c271e037a6fa01e5bddfb304d8dd319b1fff13b95c38501bade205b27e1a2f4ffca53b472552940e13533e317c1e56d7a1c0fe41ad9a3dca553323b80088e83d3cd3004a40b899f80082b1b23727667e6491d424da1b31a9689d292b4921a06608c8bf21ece499553b81fecb19d26437330176e928303d6b00762229e6d37f54d3eb4b3b2a4203b02ed98361957850de801a11a1b28be2f0e14d13de6f8330ef722f603276abba040e59e1d4fab0e6bedf9898da0c1f4bcfeea0bcb1d2d40db2c47ae220a0312b1f1d4e864e8e478bb5403a72d1e309ccc19879bb9a817c99e4ca0be0e3a3ce6eee2067ecd823e78273b0597e79f53abdc617198faefb07ec701f81ef2c4214cdfb6702f3f431d44aa96666f892514cfa6f07d653050c304d809be78d38b21db48f7e8386f706eadbcca2a5d1bbaf1f1234c1c06f146825e0b3fc47a1453f1d9e2d52895f5a9559f395311c53b154414158f6a81892695f0ed71bddd3b5c8b108a4eeef8084a124432043d0455a288368d581f8fbdd11ffe888415d247a4ed2d6d9efb9d7fa9e1741e76ddbc97b6fb64fd575758284704d7cd034dd0b2d280bc48a98a77dc687b2ec370d34fa5e7a78fa9625969342e0a9d055567ac6b3bd9605ec1dd594e29a147bca8bd6e71c4cec9988f7511af20fd290ab5f36e0582ef5e23356940bb41cca1ac8d7bd49f3d1501e5da55a0cc2e566e12e22f0bd10e272f03d395462f18e9a5dc33f8716546efb3a31ea77226a663f15183e580d50a332c5eba75ffa110c5e62938884664f824d8fa71cf62b1aaf5ae28b350406c3a3546a0d93db81287aff642021f64dfcfdf78870aab93fcd89f850b6172153fabb6636ff38b9bce17f9aea1ec63f973fee18dcb686e4920eaec0744fc57f177abcbc918c28b02a67fb68c78a594f9ec2147cad2c1d0371e88386548eba7e261a3409ae40582737b9bbe6cbd16208f1e54859b52d17c1c2b6e82828e4ffbc66d74313ce36281461ad1544e10356dd63fef3eb0106624fff7bb609694fb5d712016e50acb8527ac2a06a60b110b570d8a2e411f6c3707a626b375db98ce847efc09f8b641cb7873f0773cc25c0c6bbdab9303e42deedf61635d58c5d123e21b7c6858a1a478070c5b0a1f1e45542b129e05a70046e6552ea7b9d96432c9f69780a1df13ba01f09de4f0231ce92e4b37e0bfe611a7127237a8c30577f73b201129011cbe2ff839ebd6191d491c72d1fb3b537a5d53ed58bbec911bd1b76065368494da2a84b3a0deba8e97a9d16f5973ac689cee1534c87d4829ddc2cc3d20a94cdefa29a0fb56c5e0732771b95ab1e3f8a6b7552a4f870b99108babde7bf45ceba96510e940ca84663eb3b486cc545168f6abbe9402f13f1739cfddd32507b47a2d1cac4e0b03a4a9d9307e0d72b7f5271c7be26123de50f32fdd730e5fdc0ae00bea8ac9f6afe30fa2e1384b6c1e2966a499a2199b34ada2fa144118c3b9d7f885f462a60b472d8a05a4156e8f9254e04a31f0301a89b62c593429d438c330948d63ca35b0261170745a85f1ad9e96d495a2c4ed0fa1bccb3b5e36ff183a1d4607eee9e53d58a24f9168e1abf0ad855718b4bfdcd66a5f92390a6ecd01f3a6056e80d918c8ecfaccb178450940a6c92fa96cd59c53155289b03cc05d21b0c5aee2ae3dc853eddb04f81f1fc4eca1ff782c5682344c8e529e80f933d32b6ff08eae092749b6ea562293be2d984174675acd373078588aeb6e5345f8b1debecbfc34bfc380200598becec64883671ff4d6c2f8ef6d1e43222ce13f786ab554199867b760e8e39659ebb29c9b8a2feefa5e66a63d5c4512db529224708847328b9e97e07c049ae14e7ff7482577859af9c7373604c8ca0a3ee9ea9c3910cb00b3"}}}}}}}}, 0x12b5) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) 15:25:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0xa00, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:25:48 executing program 0: r0 = syz_io_uring_setup(0x1cd, &(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) [ 828.680877][ T8275] bond69: (slave batadv220): Enslaving as a backup interface with an up link [ 828.693342][ T8259] bond69 (unregistering): (slave batadv220): Releasing backup interface [ 828.709762][ T8259] bond69 (unregistering): Released all slaves 15:25:48 executing program 4: fchownat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 828.811763][ T8298] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 828.840746][ T8298] 8021q: adding VLAN 0 to HW filter on device batadv221 [ 828.849228][ T8298] bond69: (slave batadv221): Enslaving as a backup interface with an up link [ 828.861475][ T8298] bond69 (unregistering): (slave batadv221): Releasing backup interface [ 828.881712][ T8298] bond69 (unregistering): Released all slaves 15:25:49 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x22b) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) [ 829.517758][ T8301] syzkaller1: entered promiscuous mode [ 829.523335][ T8301] syzkaller1: entered allmulticast mode [ 830.545780][ T3068] usb usb6-port1: attempt power cycle 15:25:52 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001c40), 0x0, 0x0) lseek(r0, 0x0, 0x0) 15:25:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'bond_slave_0\x00', 0x2}) r1 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r1, 0x8208200) (async) write$tun(r1, &(0x7f0000000240)={@val={0x0, 0x884c}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="c62fc8015855", @val={@val={0x9100, 0x1, 0x0, 0x4}, {0x8100, 0x3, 0x0, 0x1}}, {@mpls_mc={0x8848, {[{0x4}, {}, {0x1}], @ipv4=@gre={{0x40, 0x4, 0x1, 0x4, 0x128f, 0x65, 0x0, 0x5, 0x2f, 0x0, @multicast1, @broadcast, {[@generic={0x83, 0x10, "595cb91d9344fb24e1e51cc486d4"}, @timestamp_addr={0x44, 0x14, 0x64, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@broadcast, 0xf5}]}, @ssrr={0x89, 0x1b, 0xc0, [@dev={0xac, 0x14, 0x14, 0x43}, @rand_addr=0x64010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010101]}, @ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x3c, 0x29, 0x3, 0x8, [{@loopback, 0x3f}, {@multicast1, 0x1}, {@local, 0x3}, {@loopback, 0x7}, {@local, 0x3}, {@multicast2}, {@loopback, 0x16}]}, @timestamp_prespec={0x44, 0x3c, 0x98, 0x3, 0x1, [{@broadcast, 0x2}, {@local, 0x400}, {@multicast1, 0x4cf}, {@private=0xa010100, 0x2}, {@multicast2, 0x400}, {@rand_addr=0x64010100, 0x8}, {@loopback, 0x5}]}, @timestamp={0x44, 0x18, 0xc1, 0x0, 0xe, [0x1, 0xfffffff7, 0x61d1, 0x8001, 0x683c554d]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x9e, 0x3, 0x4, [{@broadcast, 0x3}, {@broadcast, 0x6}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xd6, 0x1, [], "ddb1ad051a561c3be91eb63ed0ad2e7d262364202e718a8da87d9cb094ac1793d8e5bfc9ee4a50f361360278b6c5b406ad2da1c4f83c8e53494c8ac85632082eb91760a228843e79395c3a8756748f7f89500d51ea2f1918c0ac520719ed74f165c6e687bf7dfa57e747c36a333c2670964c7d07ae7cdcdbc8467b6d1fa6576e639e2de93635b11181d0c60297f0f4210b588c0178ffbdd4d2e1b445d9ff21bd22ed2a1ab5ea647a2da07fe8d27c95e0970d165d7e8b198fd92f3f6c0dc5b8d8b651f637fc868075f846367372307c8ccc4c7c793f5b"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x80], "04acc548d86f762e7711f0231fde06654706c5d11f9da1da583056721e1c37de38953b6474f07beaaf79f407b1fa3af58f149aeaaa380a3a6ea28f9ef82e508e9e"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x400, 0x9, 0x9], "225d7e34873f295da1bf4201de14e593f1970c965a9bcfba44ee8598043d69797f5376e6125d378f36c94d51"}, {0x8, 0x88be, 0x2, {{0x3, 0x1, 0xf7, 0x2, 0x0, 0x2, 0x7, 0x65}, 0x1, {0xff}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0x3, 0x3, 0x0, 0x1, 0x5, 0xfd}, 0x2, {0x4, 0xd1c5, 0x2, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "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"}}}}}}}}, 0x12b5) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) 15:25:52 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0x401c5820, 0x0) 15:25:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0xac0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 832.545722][ T3068] usb usb6-port1: unable to enumerate USB device 15:25:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x22b) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) 15:25:52 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0xffffffffffffff5b) 15:25:52 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x300, 0x0) read$qrtrtun(r0, &(0x7f0000000080)=""/173, 0xad) 15:25:52 executing program 2: clock_gettime(0x0, &(0x7f0000000bc0)={0x0, 0x0}) clock_settime(0x4, &(0x7f0000000300)={0x0, 0x3938700}) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/1, 0x1}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f0000000180)=""/13, 0xd}, {&(0x7f00000001c0)=""/34, 0x22}, {&(0x7f0000000200)=""/29, 0x1d}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000400)=""/147, 0x93}], 0x9, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000680)=""/111, 0x6f}, {&(0x7f0000000700)=""/81, 0x51}, {&(0x7f0000000c40)=""/150, 0x96}, {&(0x7f0000000840)=""/58, 0x3a}, {&(0x7f0000000880)=""/117, 0x75}, {&(0x7f0000000900)=""/19, 0x13}], 0x6, &(0x7f0000000d00)=ANY=[@ANYBLOB="ef5900000000000015fb852ee6b9cdcc", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000ec798e4900000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x158}}], 0x2, 0x40000102, &(0x7f0000000c00)={r0, r1+60000000}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) ppoll(&(0x7f0000000340)=[{r2, 0x8208}], 0x1, &(0x7f0000000380), &(0x7f00000003c0)={[0x2]}, 0x8) (async) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r3, 0x10, 0x0, 0x1000f4) (async) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000b00)=@urb_type_bulk={0x3, {0xf}, 0x8001, 0x163, &(0x7f0000000780)="4a7d6024b7b98eb7908dd09e95d29eca4315f5f68c58dcadaee315ddf7ba885e695b0c3ca9e39138ccb42db2c05db248715acba5e2b29d5aab281db6e67a408342b6e44dbcbbbf8af888e2646eabc43bf5cfa77f301f2544177a7d31ecc1cea016bdd87464fcea0d0d71d118bf685efe61e073bae33939066e60e1403cabbbdf0c5fee6a91bd4d630fb2899df7ac000de29228ce9211738b8a4d0860b67d2303cdf9276b8eb2a4b512cd009e2ae1335fe03e5baf5aeeb43eee0e0f026f", 0xbd, 0x7, 0x8001, 0x5, 0x4ef9, 0xffffffff, &(0x7f0000000ac0)="c79e972e1a4ab90872f15336eca88169f84259d768b1d58c970070d42ab28825e35f1f39f4ad53b536c869dc75aa892b55ceed88bdebc32372117a407e4f14"}) 15:25:52 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) fcntl$getown(r0, 0x8) [ 832.615220][ T8311] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 15:25:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') fcntl$notify(r0, 0x402, 0x12) [ 832.656527][ T8310] syzkaller1: entered promiscuous mode [ 832.662085][ T8310] syzkaller1: entered allmulticast mode 15:25:52 executing program 0: r0 = io_uring_setup(0x1764, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0x15, &(0x7f0000000080)=[@ioring_restriction_sqe_flags_allowed, @ioring_restriction_sqe_flags_allowed={0x4f}], 0x2) 15:25:52 executing program 4: r0 = io_uring_setup(0x1764, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0x16, &(0x7f0000000080)=[@ioring_restriction_sqe_flags_allowed={0x4f}], 0x1) 15:25:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000100)={0x0, 0x8, [@multicast, @broadcast, @empty, @remote, @multicast, @local, @empty, @local]}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'vlan0\x00', @remote}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x20001) 15:25:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[]}, 0x78) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) [ 832.692645][ T26] audit: type=1400 audit(1692804352.643:664): avc: denied { watch } for pid=8327 comm="syz-executor.0" path="/proc/8327/ns" dev="proc" ino=107338 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 832.717091][ T8311] 8021q: adding VLAN 0 to HW filter on device batadv222 [ 832.726563][ T8311] bond69: (slave batadv222): Enslaving as a backup interface with an up link 15:25:52 executing program 4: ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000140)=0xff) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r1 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r1, 0x8208200) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000400)={'batadv_slave_0\x00', 0x99}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000300)=@urb_type_interrupt={0x1, {0xa, 0x1}, 0x8, 0x20, &(0x7f0000000180)="244e2784f36efe256ff7d7258f3a3c9c02c43bf94991f2ca3449941498dc82aaa47b7317bc3a628693261c73bdb6ffa18a8082bccea397d1ddce84663cfae922d78ae225f558ff38d795bb76b51e153fe3c1c334e03b7ed06d2e3e84a3f148bcb5f548e9bbc9c3f02625aecca869d8f877669f13743b7c5a22a8cc9986c358cf6c0eced10652fc2317ba6d7d2e86c6a15eed21789bd549b95812c76f243cf8e04550b45022fae47a4e6cbfb818c45382ca3f796e51a8e53af0ea979443e258ee3f4b8229130be12696c26c0f3148f33f46b8f037a695deb61b9e82f887d5f3c0", 0xe0, 0x7fffffff, 0xc, 0x0, 0x8, 0x1, &(0x7f0000000280)="6332d2e9535d6f281bc634bc6e12899bbddf86dbe9ff7a6aa4f91db27509fbf7a202ec12ee692836bd4de01f391a969a0e6f453e6db62172baa85ff977a68d55dbb0f8e3fd4daa9d676ec67c06c438189a9364d3646eba4170a60c73d939"}) r2 = socket(0x10, 0x803, 0x0) sendto$inet(r2, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000340)="4f93a1f19a4160db69067ed57b5d1c053f9f2f239be81fe73ca45705f5ee315431f81af3df95fb3c55fa86316e33944f3f1a056e9fbef36dcfd03b78ad67f40fe149951aef8cbbb957fe224a6630bf8304d575fc4138087bc78132595de3a7c1341ac29fd83459c4480c5e74c8b804df7cbd52d911f27883e81b9eaa13f3b42f99fa87d211dcd4611e9cf7bc7bead3a0bfb00a7ddf96abab312d32e73ddee2e1c1c8fd495fa2654516be062c0cccb1b4415a561d871aa0f416055212", 0xbc}, {&(0x7f0000000480)="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", 0xfb}, {&(0x7f0000000580)="7f0af3bd0afb0a31cc9fb13f17c4abbbaa20e11ddb30d0885ea0dcad37d2fce2769247ce61ae6bd8ddd6781c9a0455d138bc2a5b8f4a15533746f80bb4c6bf9e60b8056f0f889ca6f4e6ba93c89ba4fa78f942389f33b52d9252e076d749ef15ab581c9df77d8546e8bd0518170a658ffa8928bfb74b15565d78a23e1b08c9b85a57e6bcbdf7dc911097ff5b1eceda60e11ad70e28c4c985698dd6963b53155732a404eb18aedf94f8b297c4fb8d1d9291ccf073a71d2e", 0xb7}, {&(0x7f0000000640)="4c00eac3c8ff7489f182f7f584e99af943a279035d8002396a04550fcd2d5df36ae26c2b9af088b942a83e188a544ead32f3d908d9b27d08c93371d03253ab05a5a4f8dfdd8298700e8f7350027be3d924bda5c9d962bc5f87b010e30cfda95088cdde", 0x63}, {&(0x7f00000007c0)="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", 0x1000}], 0x5) fallocate(r0, 0x10, 0x0, 0x1000f4) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000100)=@usbdevfs_driver={0xfffffd04, 0x8, &(0x7f0000000000)="e019bcaefde2cb97e1720267b1f2e8a0856853ee04c6566f40df85b04c329f5e1038fe29fb0dcd96f1c1f847ec7f2c79942307e69809605e598ce1432723d2b5f0230a024e67962d17ce7aa880b8748bb2acc37056cca14d566ee761b530881aef585a30be8e5b7526d86650e0b76f84c48e4c2a4d597c06219e425ad839fc45abca428c42300c2f8eab0b73"}) [ 832.760383][ T8331] bond69 (unregistering): (slave batadv222): Releasing backup interface 15:25:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0xace, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 832.804474][ T8331] bond69 (unregistering): Released all slaves [ 832.819207][ T8340] syzkaller1: entered promiscuous mode [ 832.824743][ T8340] syzkaller1: entered allmulticast mode [ 832.893688][ T8345] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 832.920716][ T8345] 8021q: adding VLAN 0 to HW filter on device batadv223 [ 832.929530][ T8345] bond69: (slave batadv223): Enslaving as a backup interface with an up link [ 832.942133][ T8345] bond69 (unregistering): (slave batadv223): Releasing backup interface [ 832.962805][ T8345] bond69 (unregistering): Released all slaves 15:25:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x22b) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) 15:25:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000100)={0x0, 0x8, [@multicast, @broadcast, @empty, @remote, @multicast, @local, @empty, @local]}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'vlan0\x00', @remote}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x20001) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) (async) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000100)={0x0, 0x8, [@multicast, @broadcast, @empty, @remote, @multicast, @local, @empty, @local]}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'vlan0\x00', @remote}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x20001) (async) 15:25:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0xaf4, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 833.524451][ T8355] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 833.551044][ T8357] syzkaller1: entered promiscuous mode [ 833.556643][ T8357] syzkaller1: entered allmulticast mode [ 833.571853][ T8355] 8021q: adding VLAN 0 to HW filter on device batadv224 [ 833.580126][ T8355] bond69: (slave batadv224): Enslaving as a backup interface with an up link [ 833.592778][ T8355] bond69 (unregistering): (slave batadv224): Releasing backup interface [ 833.608421][ T8355] bond69 (unregistering): Released all slaves [ 834.595756][ T3068] usb usb6-port1: attempt power cycle 15:25:56 executing program 2: clock_gettime(0x0, &(0x7f0000000bc0)={0x0, 0x0}) clock_settime(0x4, &(0x7f0000000300)={0x0, 0x3938700}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/1, 0x1}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f0000000180)=""/13, 0xd}, {&(0x7f00000001c0)=""/34, 0x22}, {&(0x7f0000000200)=""/29, 0x1d}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000400)=""/147, 0x93}], 0x9, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000680)=""/111, 0x6f}, {&(0x7f0000000700)=""/81, 0x51}, {&(0x7f0000000c40)=""/150, 0x96}, {&(0x7f0000000840)=""/58, 0x3a}, {&(0x7f0000000880)=""/117, 0x75}, {&(0x7f0000000900)=""/19, 0x13}], 0x6, &(0x7f0000000d00)=ANY=[@ANYBLOB="ef5900000000000015fb852ee6b9cdcc", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000ec798e4900000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x158}}], 0x2, 0x40000102, &(0x7f0000000c00)={r0, r1+60000000}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) ppoll(&(0x7f0000000340)=[{r2, 0x8208}], 0x1, &(0x7f0000000380), &(0x7f00000003c0)={[0x2]}, 0x8) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r3, 0x10, 0x0, 0x1000f4) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000b00)=@urb_type_bulk={0x3, {0xf}, 0x8001, 0x163, &(0x7f0000000780)="4a7d6024b7b98eb7908dd09e95d29eca4315f5f68c58dcadaee315ddf7ba885e695b0c3ca9e39138ccb42db2c05db248715acba5e2b29d5aab281db6e67a408342b6e44dbcbbbf8af888e2646eabc43bf5cfa77f301f2544177a7d31ecc1cea016bdd87464fcea0d0d71d118bf685efe61e073bae33939066e60e1403cabbbdf0c5fee6a91bd4d630fb2899df7ac000de29228ce9211738b8a4d0860b67d2303cdf9276b8eb2a4b512cd009e2ae1335fe03e5baf5aeeb43eee0e0f026f", 0xbd, 0x7, 0x8001, 0x5, 0x4ef9, 0xffffffff, &(0x7f0000000ac0)="c79e972e1a4ab90872f15336eca88169f84259d768b1d58c970070d42ab28825e35f1f39f4ad53b536c869dc75aa892b55ceed88bdebc32372117a407e4f14"}) clock_gettime(0x0, &(0x7f0000000bc0)) (async) clock_settime(0x4, &(0x7f0000000300)={0x0, 0x3938700}) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/1, 0x1}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f0000000180)=""/13, 0xd}, {&(0x7f00000001c0)=""/34, 0x22}, {&(0x7f0000000200)=""/29, 0x1d}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000400)=""/147, 0x93}], 0x9, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000680)=""/111, 0x6f}, {&(0x7f0000000700)=""/81, 0x51}, {&(0x7f0000000c40)=""/150, 0x96}, {&(0x7f0000000840)=""/58, 0x3a}, {&(0x7f0000000880)=""/117, 0x75}, {&(0x7f0000000900)=""/19, 0x13}], 0x6, &(0x7f0000000d00)=ANY=[@ANYBLOB="ef5900000000000015fb852ee6b9cdcc", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000ec798e4900000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x158}}], 0x2, 0x40000102, &(0x7f0000000c00)={r0, r1+60000000}) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) (async) ppoll(&(0x7f0000000340)=[{r2, 0x8208}], 0x1, &(0x7f0000000380), &(0x7f00000003c0)={[0x2]}, 0x8) (async) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) (async) fallocate(r3, 0x10, 0x0, 0x1000f4) (async) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000b00)=@urb_type_bulk={0x3, {0xf}, 0x8001, 0x163, &(0x7f0000000780)="4a7d6024b7b98eb7908dd09e95d29eca4315f5f68c58dcadaee315ddf7ba885e695b0c3ca9e39138ccb42db2c05db248715acba5e2b29d5aab281db6e67a408342b6e44dbcbbbf8af888e2646eabc43bf5cfa77f301f2544177a7d31ecc1cea016bdd87464fcea0d0d71d118bf685efe61e073bae33939066e60e1403cabbbdf0c5fee6a91bd4d630fb2899df7ac000de29228ce9211738b8a4d0860b67d2303cdf9276b8eb2a4b512cd009e2ae1335fe03e5baf5aeeb43eee0e0f026f", 0xbd, 0x7, 0x8001, 0x5, 0x4ef9, 0xffffffff, &(0x7f0000000ac0)="c79e972e1a4ab90872f15336eca88169f84259d768b1d58c970070d42ab28825e35f1f39f4ad53b536c869dc75aa892b55ceed88bdebc32372117a407e4f14"}) (async) 15:25:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000100)={0x0, 0x8, [@multicast, @broadcast, @empty, @remote, @multicast, @local, @empty, @local]}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'vlan0\x00', @remote}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x20001) 15:25:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0xaf5, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 836.605966][ T3068] usb usb6-port1: unable to enumerate USB device 15:25:56 executing program 0: ftruncate(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x158, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x60ee, 0x72}}}}, [@NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x0, 0x5}, {0x8, 0x5}, {0x83, 0x3}, {0x5c, 0x7}, {0x1, 0x2}, {0x51, 0x2}, {0x1, 0x6}, {0x80, 0x1}, {0x10, 0x4}, {0x20, 0x6}, {0x1, 0x1}, {0x8e, 0x3}, {0x3, 0x5}, {0xdc, 0xa9}, {0xca, 0x1}, {0x0, 0x4}, {0x4, 0x4}, {0x3, 0x7}, {0x3, 0x7}, {0x7}], "53b1beb940f30fe9"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x7, 0x3}, {0x7, 0x2}, {0xf9, 0x1}, {0x81, 0x5}, {0x20, 0x7}, {0x1}, {0x6, 0x5}, {0x0, 0x2}, {0x3, 0x6}, {0x40, 0x1}, {0x1, 0x3}], "c435419d9e29351e"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "2924204bffa4dc51"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x47, 0x2}, {0x81, 0x2}, {0x1f, 0x2}], "9bb7a7182d76bd95"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x1, 0x6}, {0x2, 0x2}, {0x3f, 0x4}, {0x63, 0x3}, {0x1}, {0x1, 0x5}, {0xbd, 0x6}, {0x7, 0x3}, {0x2, 0x7}, {0x1, 0x4}, {0x25, 0x4}, {0x4d, 0x6}, {0xff, 0x2}, {0x15, 0x4}, {0x0, 0x7}, {0x66, 0x5}, {0x20, 0x1}, {0xfc}], "c7ae2d24999b252d"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x88, 0x1}, {0x8, 0x1}, {0x6, 0x5}, {0x80}, {0xfd, 0x6}, {0x5f, 0x5}, {0x7f, 0x7}, {0x86, 0x3}, {0x2, 0x4}, {0x6}, {0x3, 0x3}], "ae3224c4c8d477f5"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x9, 0x5}, {0x6, 0x3}, {0x40, 0x3}, {0x9c, 0x3}, {0x5}, {0xd3, 0x1}, {0x9, 0x4}, {0x6, 0x1}, {0x6, 0x1}, {0x4, 0x7}, {0x2, 0x3}, {0x7}, {0x7, 0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x93, 0x5}, {0x4}, {0x63, 0x2}, {0x80, 0x1}, {}], "5002e5d4b79a9832"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x76, 0x7}, {0x5, 0x2}, {0x2, 0x3}, {0x6}, {0x0, 0x1}, {0x1, 0x4}, {0x2, 0x5}, {0x6, 0x4}, {0x1, 0x2}, {0x20, 0x6}, {0x3f, 0x4}, {0xf7, 0x6}, {0xf4, 0x3}, {0x1, 0x2}, {0x81, 0x2}, {0x8, 0x6}, {0x2, 0x3f}, {0x8, 0x1}], "a5c9a83047c92489"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x40008000}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xdd4e}}, './file0\x00'}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000300)={{0x0, 0x1, 0x100000000, 0x2, 0xfd5, 0xfffffffffffffffa, 0x8000000000000000, 0x1, 0x8000, 0x1ff, 0x9, 0x7c, 0xdbc7, 0x2ce, 0x5}}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x280000) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendto$inet(r6, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r7, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000104fd0008000fa1bb7400000000", @ANYRES32=r3, @ANYBLOB="001d82000000000008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000380), 0x7, 0x400400) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f00000003c0)={{r8}, {@val, @max}}) 15:25:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/450]}, 0x23a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) 15:25:56 executing program 4: ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000140)=0xff) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r1 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r1, 0x8208200) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000400)={'batadv_slave_0\x00', 0x99}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000300)=@urb_type_interrupt={0x1, {0xa, 0x1}, 0x8, 0x20, &(0x7f0000000180)="244e2784f36efe256ff7d7258f3a3c9c02c43bf94991f2ca3449941498dc82aaa47b7317bc3a628693261c73bdb6ffa18a8082bccea397d1ddce84663cfae922d78ae225f558ff38d795bb76b51e153fe3c1c334e03b7ed06d2e3e84a3f148bcb5f548e9bbc9c3f02625aecca869d8f877669f13743b7c5a22a8cc9986c358cf6c0eced10652fc2317ba6d7d2e86c6a15eed21789bd549b95812c76f243cf8e04550b45022fae47a4e6cbfb818c45382ca3f796e51a8e53af0ea979443e258ee3f4b8229130be12696c26c0f3148f33f46b8f037a695deb61b9e82f887d5f3c0", 0xe0, 0x7fffffff, 0xc, 0x0, 0x8, 0x1, &(0x7f0000000280)="6332d2e9535d6f281bc634bc6e12899bbddf86dbe9ff7a6aa4f91db27509fbf7a202ec12ee692836bd4de01f391a969a0e6f453e6db62172baa85ff977a68d55dbb0f8e3fd4daa9d676ec67c06c438189a9364d3646eba4170a60c73d939"}) r2 = socket(0x10, 0x803, 0x0) sendto$inet(r2, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000340)="4f93a1f19a4160db69067ed57b5d1c053f9f2f239be81fe73ca45705f5ee315431f81af3df95fb3c55fa86316e33944f3f1a056e9fbef36dcfd03b78ad67f40fe149951aef8cbbb957fe224a6630bf8304d575fc4138087bc78132595de3a7c1341ac29fd83459c4480c5e74c8b804df7cbd52d911f27883e81b9eaa13f3b42f99fa87d211dcd4611e9cf7bc7bead3a0bfb00a7ddf96abab312d32e73ddee2e1c1c8fd495fa2654516be062c0cccb1b4415a561d871aa0f416055212", 0xbc}, {&(0x7f0000000480)="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", 0xfb}, {&(0x7f0000000580)="7f0af3bd0afb0a31cc9fb13f17c4abbbaa20e11ddb30d0885ea0dcad37d2fce2769247ce61ae6bd8ddd6781c9a0455d138bc2a5b8f4a15533746f80bb4c6bf9e60b8056f0f889ca6f4e6ba93c89ba4fa78f942389f33b52d9252e076d749ef15ab581c9df77d8546e8bd0518170a658ffa8928bfb74b15565d78a23e1b08c9b85a57e6bcbdf7dc911097ff5b1eceda60e11ad70e28c4c985698dd6963b53155732a404eb18aedf94f8b297c4fb8d1d9291ccf073a71d2e", 0xb7}, {&(0x7f0000000640)="4c00eac3c8ff7489f182f7f584e99af943a279035d8002396a04550fcd2d5df36ae26c2b9af088b942a83e188a544ead32f3d908d9b27d08c93371d03253ab05a5a4f8dfdd8298700e8f7350027be3d924bda5c9d962bc5f87b010e30cfda95088cdde", 0x63}, {&(0x7f00000007c0)="70dab9dca5ae42ad5dc0bf78a4f34de6b51652f8d9df8e01838908a54f814234b41a7df258d9aab8b87c5cb612e1d28c5014f95fc52d10b746e9fdbfe6db356df52144bc623ddc6a9656dd5c1cfc07e7333a7b725f28db90d00c4b981c43b8e6ad65dae4723e710f9b61a230cb4dfaa0614e916640bc20c9b27866cace971eefa8a94f1428f414b37b63a0f3b9edaa4cc950a4d4d8c02d2c530252e7e8f917881e526f445f4270ca987a7d30b83109b8122248f3730be3fcc6eefc496e5a324f67efc2dd928267590c19549684d7f882a5e13000ee91b161820d29ea950f7da0635180c3c5d708ae620697627708221242224d1034c8efbf698acbf6acf236c38ca6af29de7f4e9298bb803bba66568100cf83b7776c41358852777deb26b1d2ab131226eaf48117dea64f8e24ed72f00e29cb2e1da063be9369c3b0c8bc98529743d2045acf5edd57f82914849297df8dd73f1fed32c53b0b7204142e19de7d7a7b09dc20cb00b8674828e59d7215f0a3d8c0692f8891a955946d56f78aeb5a5866bda1efdd6215b06d0c2e65739196e8ebe1ee47de21a7065bda773ca80356a4e6ee9b515e0716ea591a6af24d881211471227907599ce433bb8993982ea6410f9df06ea4f9cf493c6491a1749ba136a3efeeba15b08d1e7e3af8fe99a2f2b26aacc49aece26aa131ad12577b2a10f6c53c528e1f4256011af0681263f07979b34a44406b9b28ab8ad2d44fa0a7239fcf7aa0538acadab86039eec665557df3b4278c1d002c08fe2ba465085c4d92edb744783f61c472c1c834a476e016f0b611cb93e7e201c4697b8276979a21e54b21ff3e3e867cd072ddfc507d75b3107b947b4e4ce2fe023fbcbeaa8087cff9494cc73e2bcaecc84416fee7766dfa6ca0b21cb1943d9404a25b24b7f37c9173c6f52c683ceff94a9ffae2df30a9be087b82da8442b2448b7fee3b8f7734490369120584ec42defd72235f137aeaa343677eb2b846601853430e56b83e633224bb2a25f1fc30b194f6df99018b1363863bcb95327dfb60f833587d6697d94e6f97ccb7ea50adcfa7aac6602ba1e8f3ac062dc97246b51bfbdda8edfbfb32ff81ab9e4281850e9b57878b4f69c9f2c5ada28bfd53c87a005b9c4da9922c45ed7fdc06c4366538163439c0ca5db5f03643c7f5b380d5affcaaa33b4e6c2509114b22eae2cee076ddf86d163afd35bb065abfb6148d26236fa65c3ae1b7f6e2ddd31d63cff2c500f6468757348d5cfb94faaa7a6f35dd63dc6ab2b91fe1365d9d0b4f4d74fe9baa698d4b4e962133ccf1baf7f415621532cddeca128c3b185a17a6e5ff74c9577f160542902f7e71052c10ab19afc7919c5e556204b1a8fa9c49bd70f38555a0df8aadbc89d3c620ed28e7ab270434efd2621cabc7928f68c43cd214f9ea89a05005d15df0fff131280ea8bdf6a67d00411f3e4d3c7d0f407a7a14b077404279a042002f8932718419d93081399ea1267eddd493fc2cf0ee55a3fc41827aa77988f72ed9c746a83bcf38afea78db6f2347a2b775e6e311c8e0112d19044831901805fdb593a360d025828afe7d3f232a7b9f89833fea7a9ddcee962a3a566817e10e28068619b81d4c50c18744efecf2e119f4622bcc3ce9aa8e82a1fee29ea7a1e6ae22f76d96c15d5e531d0ad16ce09d6ed308ddb52dcb55b24cecf73243e8820340acc67309a0cb6a834b513db1bc457145c2014ab00630fe655d6247cb928e64a27c50fc3816e4f8ea7f9da5298344d42d08d141d732c260efdcc79f3114e92cf2078ea6d32916ccb854ef7e3d3bf4eb85bf897077358a2b67bab38b92bfdf3e9161ac5fe7f9f3cde193732f96a291f3850e864160e4c63e946ab73b8ad1e813c4a43d0da80451ebdfc7e6b4e892da813a77573dde818a3ec06c92633c0ce2ff4d8dd602850acc8c175ae2869ee6bc03d3a6a39f9e93cfa73e2930feb431c5d32704d2a9a46d538a8122278e2ee2184caa75a02845fe0acc2cd84b8b5525192553c53c79823d1ffe5688657fb84e944c89d96153829fe298713dffd9b1d3be95cbe933cafae8c1b071f30184587748285f7b9e7e69ec8e9e87f71b5402c2a29c08acf69ea7abab3ba8efcca8253f6ee9175b8c322285b3e04827e49c40c3fcd22f7b9f0275a4348d58d3f229a463d2b7e71493c9bf2d40cdb2a7c9b8c5bc51fa2e15ef07e17c519ac6816a8b2d2f1e3490a613454a8433a14ed528c8d0662d4fb01ee24c725e0dade9bb6eec2b6d33f4bf9c46bc666c4123f0d9a2606538a8bbef2b77487f068022ecb7130f637d2c214c8a0ae5430f74e14c9e9b24f03f28cc336cd91523b86d003877b7e225330f9a771321d3980a014fdc139ccef7b7e9471671bc58641526aaa6a5a3aaae9cc7d09b3aa84e42625e4d175ad0971fd04492022d7cd223b8227d86fe7d23043d6338290bd3be58c7c757eaac59799c4975602ee595468bb63d5025dce70846e3eca70e24693378423a2deda7c25b4fc7160d1c0ec913037fe416fd4309417cde22cfeafd20cccddb56816a5016361226671364ad879d6a7a87c41913e58b651b2da7bc2f509f0e226ab6f838d9361dab83b0b0f1925b6c2f7d2e10dc8a425c253a5a488150c97f34befd8aa14aaff1048a25fc4e3319e58d38f988e047efac5a142e7b78abee8df921f7eda042a5cf42bbcd82e8e9e2ef36cd5684cfbe31c79232bddab9be3a09e9e7017aefa342b40d46c44ea410d9d7f9e5e117b2d87551d23913be7daf9ad9ee43f7174908dfb7818c155e713d3d591efe75a7f9d16f8ddbd42838a5bd0b65f36f5096c7fd2154ca108a4d0ba5882bac52588a022a885bb4862fe5df0ddb4496826a2861583c2d6019306c3aadeb60984080a643278aa9e413afe68d625bb2f6186544fd2ccb152b73eea92eb81ba58f9bc8846bd46ebd5a5ec69ef31bf179e9191fcb2467e84e17a73644a2cdf84aa96e1396b4e0fe758c94ab1c3d33c4d1101fb555f568cb0648f769c5e783d66db3c217d17cdaff13d3bc613a8007e247265afb9152990d9c0e4442446a709d6adf93f879582b6fd4dd774c63962e247722e80c3bad889e97f4d1e2dcbcf620880797d0bce9dbceaff802066095508736292de6baca233dbe0a8e284f35c62e915a1130be2a486c5ce3b2c89f5966803cddf04b04331ed1aeb698178501cad0b3d303a7c85eaa1264646487ad6edf4d822cfc2e7c16d1223044fbac91922771e06b41291fdc1bf6d8e530a47b1488f05dcee557eb76ea376afe7615cd535f9603e563af53b22020f87863acea8cdd00e37ce77674ddd570a832ca8dac2449a7a7b7493efca23cbedc2abeb55abdd6364a84d74bbb691020c58b99b0b9d5504734c5271d085f36d5993908d256f6a441b1b4352c67e7a2ed157ae7211ec21d726ccefa640f86de0e28c9a5f07194f98ebfc5968c31528e491b689e284e05e18a53e440f8d8b5efd4b3d24f2a743d76756546f512720789dcd33a2dfe54a3bf46147f12a6c6f2a9df87d2290990eb244417c3520ed0f0d017af08a135a1794c45c70a34750ab274e663e16462c1334bc4caaad47e977b916e2fab38b32bce38b737781e13d1449c22f47968ba1a412cf1503462587218bbd38864fa9f25a851d20f4c348d41cce668134f16becb8a6eb58963360a6740e384eb0902b0a89004f8bd45c56188af6631353e52b05cba0f8e3e3a2161a044de5a1ee56b2ae0089946de8b158d9ed2f3ca14e93b703e1c31133d4d2a7c1a252a5c011d27b1f10f1249d14d8cb9984c466047644186242ab3876b85eeb598676f1c15dfffeaa33f9d44382de93d411240f3c5b003aa6571cac2aa73a9a6fe4170f61dbb3c1501f803d429275ec68f5d06ada08f9b688e5c95f66c7f6ab409500035dddc146d6401788f13abbbdb570c60a4e5265514cbdfadb368af06602293510cdb45d4312fc763d3dc527b9168634a415621b199488c457ed0555ed8de04725a3d8291a7ffd06fce5b71651082ba8508b73b3d99f88c389ea00f9738c0509e951eab56abb0965b22889d0b0e59116347e95f90a01f77dd9725b964318859c1a68630dae442842bfff97f53313dcc4ba74f5f99d64f7908f715c3d2f104791a5eb88b0f08c39da234f890ec7e3e3a5612d474ba023ede1005b6c8b3f1977dccfe9311e1edba6dd26b4ea4b4db57c5164b46d4855a988975e7c91f79a4966143168f5f60cd8fc5b90f87c180a20635271a3f268d831ba649b5985e53c6be324a1c2897b0ba2aabdef2c556e37a3ad75e38ff73dc86026d903854ba37ed2dd5558c1d734e931abd6a01a7b9a7ef16026814ef2a60487e963cd91ad164fda8f2301d7b7420064d07c269fdf30c15db77d40a2c568c329324248781bd70461152c234116860df1334d1ff98e48491fb35370276831e17ef0c6b15dd6d0b9279fa8f92f31202bc6e583f150f43cd4586248cc62feeeaf5357f858c245bc7c549f99fc40c49eecf8ea15b18434a4124cdeae12d9ddf49ca8322533ba83e9b53cf11cf412bd72552a243d6dd4b8c3a4c90fdbef23ce5c24ea7b9ec009560065520362f3530a20f756331d04472ee9d08779a2b57ffbacfaed9b0d8f64ca23d9ad72081382756d88e923df01b031507fc13049291806a1dd4e4de333a78b40c7be1a9f37408ff6e8fc5afb1d8664de7890f7ed91b3c212db414e570047541509630970885c01b4f6230727a65f079a7f45aaf9fd0ad16dcbe62d2fe2ed968a70575ebadb1e630c3f0441ba348334d88d7528207b75a668d3cbeb0f83aae9f44a7254c4212484ac43ddf52d0376858fe7405b43be5c4b4bb5b48b3c70f7a5e1c9b4a088eba48c196ead5a53dd0fd997c5a8fcef2570f39d3d74bb73ffb17da7311756c700fd8e48afa50de54ebc8b33cf4753269a890bc8744da8fdafc86bfcdb2966294353317da14d2c3a9d58ff89144216bed6e94da885eee6c38e61845ef918191e8e3e2fec3933c8bf5d18739207bd53d3365ace169175ca243b6d3c706af79eff325a37257c832b73971df3d8f644107e53a589e4a07093b877ae7dfe28dfa4285587aaceebd79dde507c605f356db57a137bc4dae6b188a3802b45440562694bbb8685dc1075a31c5c385ccd2d1dcd414ad25b2c6d65dd45407f27b2aa6aca80e253aa909a7ea18b2afe4568e6ab99d51214cb88332c41c2bfb18dd46976635c1b759f4baf8530b2dc4f27673e8132e12ab10d4f43a0efa2cbf8e7def9dad520313cf7018e71c1db6c8dfac6c7e46bc6ef682e70c69f6bbf42248d455a6eef4d56cca9378f59d0994ea3053f543e71328c4141e0d0f84585fde3157cdeb4dc13ff9a8739a06f039747c20596aad8c62cf86b32cc946c59fb79e00229cff9d947e6f3cd2340b6b237f9f330e03a79d28d2301b75c0ff822ec7ded1e592bf9a603d25ec5813ad38d98ffa6984d86a2825aa85134a4bc86e52c421ba0390da776c8fd88e94dc309918953b17cc50635ac9264c128622b5d58d7c4e779238b48bd0481dac84328c760fbcba45e9f43a1575c33a46585d1e8d6a1d37f144fcbef1b223213c8c1ac3b53e722c64b0c1a136f6166ece36a32dcb513a072da98be9c3c0dff8ebd4c53845b2426ffd1745321fb5195d7a4cacd7a814586568244391ba88deb7415714dbbcd6f36c7b37485b6b2ada9a1185eeb1b964091f485cef3f5c65dd6185bb08e2b4c2395d67ada25dba30184f338c5ad5ce20349c46a36ae00a0c62987b4e272a251a7b80413d170221f", 0x1000}], 0x5) fallocate(r0, 0x10, 0x0, 0x1000f4) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000100)=@usbdevfs_driver={0xfffffd04, 0x8, &(0x7f0000000000)="e019bcaefde2cb97e1720267b1f2e8a0856853ee04c6566f40df85b04c329f5e1038fe29fb0dcd96f1c1f847ec7f2c79942307e69809605e598ce1432723d2b5f0230a024e67962d17ce7aa880b8748bb2acc37056cca14d566ee761b530881aef585a30be8e5b7526d86650e0b76f84c48e4c2a4d597c06219e425ad839fc45abca428c42300c2f8eab0b73"}) 15:25:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) write$tun(r0, &(0x7f0000000140)={@void, @val={0x1, 0x80, 0x9, 0x20, 0x5, 0x7}, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @multicast, @val={@val={0x9100, 0x7, 0x1}, {0x8100, 0x0, 0x1, 0x2}}, {@llc={0x4, {@llc={0xd4, 0x4, 'I', "7ef6d9f9884fd41b4b7f3a1426e3e38410cc6eb3181968aaabc8c027cfe6a8b52054a8bbe39a4573a5113627594a6075c6b12066f0a71e9b5f729f933f38706580c414258c494a167efb42ce6ba4ab91271ff328c1a4bdc4c997e1ec731fa1e974c19a0f1f9edb2d898629a81f0f78a477e67f6807"}}}}}}, 0x98) [ 836.683651][ T8370] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 836.722576][ T8369] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 836.738445][ T8365] syzkaller1: entered promiscuous mode [ 836.744029][ T8365] syzkaller1: entered allmulticast mode [ 836.762889][ T8370] 8021q: adding VLAN 0 to HW filter on device batadv225 [ 836.771666][ T8370] bond69: (slave batadv225): Enslaving as a backup interface with an up link 15:25:56 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) write$tun(r0, &(0x7f0000000140)={@void, @val={0x1, 0x80, 0x9, 0x20, 0x5, 0x7}, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @multicast, @val={@val={0x9100, 0x7, 0x1}, {0x8100, 0x0, 0x1, 0x2}}, {@llc={0x4, {@llc={0xd4, 0x4, 'I', "7ef6d9f9884fd41b4b7f3a1426e3e38410cc6eb3181968aaabc8c027cfe6a8b52054a8bbe39a4573a5113627594a6075c6b12066f0a71e9b5f729f933f38706580c414258c494a167efb42ce6ba4ab91271ff328c1a4bdc4c997e1ec731fa1e974c19a0f1f9edb2d898629a81f0f78a477e67f6807"}}}}}}, 0x98) [ 836.785171][ T8369] bond0: left allmulticast mode [ 836.790120][ T8369] bond_slave_0: left allmulticast mode [ 836.795768][ T8369] bond_slave_1: left allmulticast mode [ 836.801414][ T8369] bridge107: port 1(bond0) entered disabled state [ 836.819988][ T8369] bridge111: port 1(bond0) entered blocking state [ 836.826509][ T8369] bridge111: port 1(bond0) entered disabled state 15:25:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, r2, &(0x7f0000000100)) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r3, 0x10, 0x0, 0x1000f4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'wg2\x00', 0x1000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x4, 0x3f, 0x2, 0x8}, {0xfffa, 0x40, 0xbd, 0x1}, {0xff, 0x0, 0x8, 0x2}, {0x1, 0xdf, 0x1, 0xc193}, {0xc3, 0xfd, 0x1, 0x1}, {0x8, 0xcf, 0x9, 0x6}, {0x12, 0xfc, 0x6, 0x9}]}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) [ 836.837766][ T8369] bond0: entered allmulticast mode [ 836.842968][ T8369] bond_slave_0: entered allmulticast mode [ 836.848728][ T8369] bond_slave_1: entered allmulticast mode [ 836.861976][ T8370] bond69 (unregistering): (slave batadv225): Releasing backup interface 15:25:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454cd, &(0x7f0000000040)=0x1) 15:25:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) write$tun(r0, &(0x7f0000000140)={@void, @val={0x1, 0x80, 0x9, 0x20, 0x5, 0x7}, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @multicast, @val={@val={0x9100, 0x7, 0x1}, {0x8100, 0x0, 0x1, 0x2}}, {@llc={0x4, {@llc={0xd4, 0x4, 'I', "7ef6d9f9884fd41b4b7f3a1426e3e38410cc6eb3181968aaabc8c027cfe6a8b52054a8bbe39a4573a5113627594a6075c6b12066f0a71e9b5f729f933f38706580c414258c494a167efb42ce6ba4ab91271ff328c1a4bdc4c997e1ec731fa1e974c19a0f1f9edb2d898629a81f0f78a477e67f6807"}}}}}}, 0x98) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) (async) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) write$tun(r0, &(0x7f0000000140)={@void, @val={0x1, 0x80, 0x9, 0x20, 0x5, 0x7}, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @multicast, @val={@val={0x9100, 0x7, 0x1}, {0x8100, 0x0, 0x1, 0x2}}, {@llc={0x4, {@llc={0xd4, 0x4, 'I', "7ef6d9f9884fd41b4b7f3a1426e3e38410cc6eb3181968aaabc8c027cfe6a8b52054a8bbe39a4573a5113627594a6075c6b12066f0a71e9b5f729f933f38706580c414258c494a167efb42ce6ba4ab91271ff328c1a4bdc4c997e1ec731fa1e974c19a0f1f9edb2d898629a81f0f78a477e67f6807"}}}}}}, 0x98) (async) 15:25:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'batadv_slave_1\x00', 0x8000}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) [ 836.888568][ T8370] bond69 (unregistering): Released all slaves [ 838.625713][ T3068] usb usb6-port1: attempt power cycle 15:26:00 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x9, 0x129003) 15:26:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0xb00, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:26:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'batadv_slave_1\x00', 0x8000}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) 15:26:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 15:26:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/450]}, 0x23a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) [ 840.605868][ T3068] usb usb6-port1: unable to enumerate USB device [ 840.660140][ T8411] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 840.695177][ T8414] syzkaller1: entered promiscuous mode [ 840.700854][ T8414] syzkaller1: entered allmulticast mode [ 840.710780][ T8415] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 840.739513][ T8411] 8021q: adding VLAN 0 to HW filter on device batadv226 [ 840.747960][ T8411] bond69: (slave batadv226): Enslaving as a backup interface with an up link [ 840.765375][ T8421] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 840.773562][ T8421] bond9: (slave batadv3): Enslaving as a backup interface with an up link [ 840.784278][ T8411] bond69 (unregistering): (slave batadv226): Releasing backup interface [ 840.813893][ T8411] bond69 (unregistering): Released all slaves [ 842.576070][ T3181] usb usb6-port1: attempt power cycle 15:26:04 executing program 4: ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000140)=0xff) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r1 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r1, 0x8208200) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000400)={'batadv_slave_0\x00', 0x99}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000300)=@urb_type_interrupt={0x1, {0xa, 0x1}, 0x8, 0x20, &(0x7f0000000180)="244e2784f36efe256ff7d7258f3a3c9c02c43bf94991f2ca3449941498dc82aaa47b7317bc3a628693261c73bdb6ffa18a8082bccea397d1ddce84663cfae922d78ae225f558ff38d795bb76b51e153fe3c1c334e03b7ed06d2e3e84a3f148bcb5f548e9bbc9c3f02625aecca869d8f877669f13743b7c5a22a8cc9986c358cf6c0eced10652fc2317ba6d7d2e86c6a15eed21789bd549b95812c76f243cf8e04550b45022fae47a4e6cbfb818c45382ca3f796e51a8e53af0ea979443e258ee3f4b8229130be12696c26c0f3148f33f46b8f037a695deb61b9e82f887d5f3c0", 0xe0, 0x7fffffff, 0xc, 0x0, 0x8, 0x1, &(0x7f0000000280)="6332d2e9535d6f281bc634bc6e12899bbddf86dbe9ff7a6aa4f91db27509fbf7a202ec12ee692836bd4de01f391a969a0e6f453e6db62172baa85ff977a68d55dbb0f8e3fd4daa9d676ec67c06c438189a9364d3646eba4170a60c73d939"}) r2 = socket(0x10, 0x803, 0x0) sendto$inet(r2, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000340)="4f93a1f19a4160db69067ed57b5d1c053f9f2f239be81fe73ca45705f5ee315431f81af3df95fb3c55fa86316e33944f3f1a056e9fbef36dcfd03b78ad67f40fe149951aef8cbbb957fe224a6630bf8304d575fc4138087bc78132595de3a7c1341ac29fd83459c4480c5e74c8b804df7cbd52d911f27883e81b9eaa13f3b42f99fa87d211dcd4611e9cf7bc7bead3a0bfb00a7ddf96abab312d32e73ddee2e1c1c8fd495fa2654516be062c0cccb1b4415a561d871aa0f416055212", 0xbc}, {&(0x7f0000000480)="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", 0xfb}, {&(0x7f0000000580)="7f0af3bd0afb0a31cc9fb13f17c4abbbaa20e11ddb30d0885ea0dcad37d2fce2769247ce61ae6bd8ddd6781c9a0455d138bc2a5b8f4a15533746f80bb4c6bf9e60b8056f0f889ca6f4e6ba93c89ba4fa78f942389f33b52d9252e076d749ef15ab581c9df77d8546e8bd0518170a658ffa8928bfb74b15565d78a23e1b08c9b85a57e6bcbdf7dc911097ff5b1eceda60e11ad70e28c4c985698dd6963b53155732a404eb18aedf94f8b297c4fb8d1d9291ccf073a71d2e", 0xb7}, {&(0x7f0000000640)="4c00eac3c8ff7489f182f7f584e99af943a279035d8002396a04550fcd2d5df36ae26c2b9af088b942a83e188a544ead32f3d908d9b27d08c93371d03253ab05a5a4f8dfdd8298700e8f7350027be3d924bda5c9d962bc5f87b010e30cfda95088cdde", 0x63}, {&(0x7f00000007c0)="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", 0x1000}], 0x5) fallocate(r0, 0x10, 0x0, 0x1000f4) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000100)=@usbdevfs_driver={0xfffffd04, 0x8, &(0x7f0000000000)="e019bcaefde2cb97e1720267b1f2e8a0856853ee04c6566f40df85b04c329f5e1038fe29fb0dcd96f1c1f847ec7f2c79942307e69809605e598ce1432723d2b5f0230a024e67962d17ce7aa880b8748bb2acc37056cca14d566ee761b530881aef585a30be8e5b7526d86650e0b76f84c48e4c2a4d597c06219e425ad839fc45abca428c42300c2f8eab0b73"}) 15:26:04 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x9, 0x129003) 15:26:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'batadv_slave_1\x00', 0x8000}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'batadv_slave_1\x00', 0x8000}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) 15:26:04 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = inotify_init1(0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = memfd_create(0x0, 0x0) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) dup3(r2, r3, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 15:26:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0xc00, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:26:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/450]}, 0x23a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) [ 844.536002][ T3181] usb usb6-port1: unable to enumerate USB device [ 844.570189][ T8434] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN 15:26:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x292241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) 15:26:04 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x9, 0x129003) [ 844.578554][ T8436] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 844.591152][ T8434] FAULT_INJECTION: forcing a failure. [ 844.591152][ T8434] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 844.604503][ T8434] CPU: 1 PID: 8434 Comm: syz-executor.0 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 844.614886][ T8434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 844.624965][ T8434] Call Trace: [ 844.628324][ T8434] [ 844.631265][ T8434] dump_stack_lvl+0xda/0x130 [ 844.635924][ T8434] dump_stack+0x15/0x20 [ 844.640107][ T8434] should_fail_ex+0x21f/0x230 [ 844.644810][ T8434] __should_fail_alloc_page+0xfd/0x110 [ 844.650360][ T8434] __alloc_pages+0x108/0x340 [ 844.655075][ T8434] vma_alloc_folio+0x6a3/0x8c0 [ 844.659925][ T8434] ? pte_offset_map_nolock+0x11f/0x1c0 [ 844.665417][ T8434] handle_mm_fault+0xdc0/0x2c10 [ 844.670343][ T8434] exc_page_fault+0x391/0x650 [ 844.675137][ T8434] asm_exc_page_fault+0x26/0x30 [ 844.680070][ T8434] RIP: 0033:0x7f9ed4ef6d8b [ 844.684527][ T8434] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 844.704157][ T8434] RSP: 002b:00007f9ed42abea0 EFLAGS: 00010246 [ 844.710314][ T8434] RAX: 00007f9ed42adfc0 RBX: 00007f9ed5029fe0 RCX: 0000000000000000 [ 844.718321][ T8434] RDX: 00007f9ed42ae008 RSI: 00007f9ed4f88ce8 RDI: 00007f9ed42abec0 [ 844.726360][ T8434] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 15:26:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x8400) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)="fb5cf30922bc37cb836dbadeb5fe4bbccb3ce6727ba035e8c0007fbf31fad46810febe17725aaf7d91a1e401758beb2996984b2b4eaaaab3628acc4c13ceedcf16eb910ce9820ad0bcedd384306ec524bb39b945859e91befb593f9f48e121f0f331af66d507d46211a2ac37f4c04dba8f4f3fc634616d9e5c088dc227ee7713e015f88850c52a376c2a18fbc1b5cd6bef1507aee00075016859ffaa1af7b192bf2d33532d2da67fd390869aa74a4ccbbfd3b74fa5c7d1c9604ba9a7feef9549db", 0xc1}, {&(0x7f0000000000)="63467ff615f1b9430a1b73e8add15e750e92c7123091d003e6b88b48065b4ca7fab2ebc07d56bb21249fdb91dc8bf434e369b55762c156150bc8db10a6d70cc801cf4a69cc042361702078b435b63f2d42282b97acc4a96699940aabab36cea4c0deb0e8715ef72cbf3fdc6690de91cf8bfee5fc86f25861257859e4510126fecf04bc77b400b4ae7f73ae2b2bc64680c0277019e0bf5d94e3f23beda8477b19a821dc790d0c6b4052868557b47723ce94", 0xb1}, {&(0x7f0000000200)="b8506a4ace22da977497c1301a6a4e151fc500d01cff5628e96dadf9f925efdcc0920e771afaa97bbfa44ccf17bc76208b93afce97a2b59d56e39f45ce6dacf594a415adff433292b15acc74ac", 0x4d}, {&(0x7f0000000280)="92c9066fd0c912d52676cdbcd367b69d78da2f9c4327de6401dd701fae1417f42212f50a6afc1794c4a0fac2bdecb5dcb2455f3a2ada69b8bbd4540e57c8b423095037e840f897759774a81a7b43b78962b15cf662fe03a431f72777482d3c06823569dfaf2bb6193b9672f697f87aa235e7bd5b118175e92aa69cb66d68e37566d92f80267847bc8c1d18e83bc7ffa9dcac12d6c55435aa881fd0683df8f3f4869a9e12932faf072a8fbaf6bade0a9d798ccc9d3b26ef", 0xb7}, {&(0x7f0000000340)="8f9529432152ef9c52dfd6b94c702fc0c210dbc41eb19fec11149e09ce6d137b79967b04f6acca93163ee6e01e65b578ead26da97b717aca32f8afb892a8ce054a754ca2d0bd9840db096e4cfec1e1f12001d61920e3bf208b2d5d48ddf3eb1fff1e81fd9f23c790d5f0511192ce7a088b50", 0x72}, {&(0x7f0000000540)="f93121cec7ac30923359fb3abeec7f4e22bc0f021b8ed6c1f8f428f0666c886c38e00684", 0x24}, {&(0x7f0000000400)="8b7324fad62991146fb3f736d70000dadce2260b60fa39cd4e73559911d5e7b0758f6d36090f406d98", 0x29}, {&(0x7f0000000440)="983b74bd74883d6da983b9f7f9f009e1faec1352741fdb7f1f23c04637bdee3a480289ee9398e51ab78631cbad000d83f73d086a60c84c129168909fb82f0038a79ddb5b3df9337ad56bc77cfb71b88c", 0x50}], 0x8) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x500, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/drivers\x00', 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x10, 0x803, 0x0) sendto$inet(r8, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r10, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000a00)={'tunl0\x00', &(0x7f0000000940)={'erspan0\x00', r4, 0x7800, 0x7, 0x3ff, 0x7, {{0x19, 0x4, 0x0, 0x1f, 0x64, 0x67, 0x0, 0x1f, 0x4, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x1c, 0x9a, 0x0, 0x7, [0x400, 0x100, 0x9, 0x9, 0x7, 0x5]}, @cipso={0x86, 0x34, 0x1, [{0xa0b8df807a40fb6d, 0x7, "3d4df729cb"}, {0x5, 0x2}, {0x5, 0x10, "9bb137d64b67220fc1054884d4d1"}, {0x6, 0x8, "693812c05b13"}, {0x6, 0xd, "95711dae8e448ed736956a"}]}]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000cc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a40)={0x224, r10, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x17c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa213a81bf5dd7f99}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x224}, 0x1, 0x0, 0x0, 0x24040890}, 0x800) sendto$inet(r7, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$inet(r3, &(0x7f0000000d00)={0x2, 0x1, @remote}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r12, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000104fd0008000fa1bb7400000000", @ANYRES32=r4, @ANYBLOB="001d82000000000008000a00", @ANYRES32=r12], 0x28}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000640)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x808, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_any}, {@version_L}, {@version_9p2000}, {@version_L}, {@privport}, {@cache_mmap}, {@mmap}], [{@fowner_lt={'fowner<', r13}}, {@smackfshat={'smackfshat', 0x3d, '\''}}, {@uid_gt={'uid>', 0xee00}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@obj_role={'obj_role', 0x3d, '\\'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@permit_directio}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/bus/usb/00#/00#\x00'}}, {@measure}]}}) ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523) 15:26:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x292241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x292241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) [ 844.734356][ T8434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.742353][ T8434] R13: 000000000000000b R14: 00007f9ed504af80 R15: 00007ffc9f0f66d8 [ 844.750412][ T8434] [ 844.753555][ T8434] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 15:26:04 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = inotify_init1(0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = memfd_create(0x0, 0x0) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) dup3(r2, r3, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x0) 15:26:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x292241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) [ 844.803956][ T8436] 8021q: adding VLAN 0 to HW filter on device batadv227 [ 844.831433][ T8436] bond69: (slave batadv227): Enslaving as a backup interface with an up link [ 844.840575][ T8458] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 844.849205][ T8433] syzkaller1: entered promiscuous mode [ 844.854766][ T8433] syzkaller1: entered allmulticast mode [ 844.870733][ T8456] bond69 (unregistering): (slave batadv227): Releasing backup interface [ 844.891998][ T8456] bond69 (unregistering): Released all slaves [ 844.902643][ T8462] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 844.921878][ T8462] bond0: left allmulticast mode [ 844.926820][ T8462] batadv3: left allmulticast mode [ 844.931981][ T8462] bridge166: port 1(bond0) entered disabled state [ 846.565816][ T3181] usb usb6-port1: attempt power cycle 15:26:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 1) 15:26:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x110040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'pimreg\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 15:26:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0xd00, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:26:08 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = inotify_init1(0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = memfd_create(0x0, 0x0) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) dup3(r2, r3, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x2) 15:26:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/457]}, 0x241) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) 15:26:08 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x8400) (async) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x8400) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)="fb5cf30922bc37cb836dbadeb5fe4bbccb3ce6727ba035e8c0007fbf31fad46810febe17725aaf7d91a1e401758beb2996984b2b4eaaaab3628acc4c13ceedcf16eb910ce9820ad0bcedd384306ec524bb39b945859e91befb593f9f48e121f0f331af66d507d46211a2ac37f4c04dba8f4f3fc634616d9e5c088dc227ee7713e015f88850c52a376c2a18fbc1b5cd6bef1507aee00075016859ffaa1af7b192bf2d33532d2da67fd390869aa74a4ccbbfd3b74fa5c7d1c9604ba9a7feef9549db", 0xc1}, {&(0x7f0000000000)="63467ff615f1b9430a1b73e8add15e750e92c7123091d003e6b88b48065b4ca7fab2ebc07d56bb21249fdb91dc8bf434e369b55762c156150bc8db10a6d70cc801cf4a69cc042361702078b435b63f2d42282b97acc4a96699940aabab36cea4c0deb0e8715ef72cbf3fdc6690de91cf8bfee5fc86f25861257859e4510126fecf04bc77b400b4ae7f73ae2b2bc64680c0277019e0bf5d94e3f23beda8477b19a821dc790d0c6b4052868557b47723ce94", 0xb1}, {&(0x7f0000000200)="b8506a4ace22da977497c1301a6a4e151fc500d01cff5628e96dadf9f925efdcc0920e771afaa97bbfa44ccf17bc76208b93afce97a2b59d56e39f45ce6dacf594a415adff433292b15acc74ac", 0x4d}, {&(0x7f0000000280)="92c9066fd0c912d52676cdbcd367b69d78da2f9c4327de6401dd701fae1417f42212f50a6afc1794c4a0fac2bdecb5dcb2455f3a2ada69b8bbd4540e57c8b423095037e840f897759774a81a7b43b78962b15cf662fe03a431f72777482d3c06823569dfaf2bb6193b9672f697f87aa235e7bd5b118175e92aa69cb66d68e37566d92f80267847bc8c1d18e83bc7ffa9dcac12d6c55435aa881fd0683df8f3f4869a9e12932faf072a8fbaf6bade0a9d798ccc9d3b26ef", 0xb7}, {&(0x7f0000000340)="8f9529432152ef9c52dfd6b94c702fc0c210dbc41eb19fec11149e09ce6d137b79967b04f6acca93163ee6e01e65b578ead26da97b717aca32f8afb892a8ce054a754ca2d0bd9840db096e4cfec1e1f12001d61920e3bf208b2d5d48ddf3eb1fff1e81fd9f23c790d5f0511192ce7a088b50", 0x72}, {&(0x7f0000000540)="f93121cec7ac30923359fb3abeec7f4e22bc0f021b8ed6c1f8f428f0666c886c38e00684", 0x24}, {&(0x7f0000000400)="8b7324fad62991146fb3f736d70000dadce2260b60fa39cd4e73559911d5e7b0758f6d36090f406d98", 0x29}, {&(0x7f0000000440)="983b74bd74883d6da983b9f7f9f009e1faec1352741fdb7f1f23c04637bdee3a480289ee9398e51ab78631cbad000d83f73d086a60c84c129168909fb82f0038a79ddb5b3df9337ad56bc77cfb71b88c", 0x50}], 0x8) openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x500, 0x0) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x500, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/drivers\x00', 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x10, 0x803, 0x0) sendto$inet(r8, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) (async) sendto$inet(r8, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r10, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000a00)={'tunl0\x00', &(0x7f0000000940)={'erspan0\x00', r4, 0x7800, 0x7, 0x3ff, 0x7, {{0x19, 0x4, 0x0, 0x1f, 0x64, 0x67, 0x0, 0x1f, 0x4, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x1c, 0x9a, 0x0, 0x7, [0x400, 0x100, 0x9, 0x9, 0x7, 0x5]}, @cipso={0x86, 0x34, 0x1, [{0xa0b8df807a40fb6d, 0x7, "3d4df729cb"}, {0x5, 0x2}, {0x5, 0x10, "9bb137d64b67220fc1054884d4d1"}, {0x6, 0x8, "693812c05b13"}, {0x6, 0xd, "95711dae8e448ed736956a"}]}]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000cc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a40)={0x224, r10, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x17c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa213a81bf5dd7f99}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x224}, 0x1, 0x0, 0x0, 0x24040890}, 0x800) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000cc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a40)={0x224, r10, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x17c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa213a81bf5dd7f99}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x224}, 0x1, 0x0, 0x0, 0x24040890}, 0x800) sendto$inet(r7, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$inet(r3, &(0x7f0000000d00)={0x2, 0x1, @remote}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r12, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000104fd0008000fa1bb7400000000", @ANYRES32=r4, @ANYBLOB="001d82000000000008000a00", @ANYRES32=r12], 0x28}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000640)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x808, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_any}, {@version_L}, {@version_9p2000}, {@version_L}, {@privport}, {@cache_mmap}, {@mmap}], [{@fowner_lt={'fowner<', r13}}, {@smackfshat={'smackfshat', 0x3d, '\''}}, {@uid_gt={'uid>', 0xee00}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@obj_role={'obj_role', 0x3d, '\\'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@permit_directio}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/bus/usb/00#/00#\x00'}}, {@measure}]}}) ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523) 15:26:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x110040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'pimreg\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'pimreg\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) [ 848.525914][ T3181] usb usb6-port1: unable to enumerate USB device [ 848.555115][ T8467] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 848.563678][ T8466] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 848.588559][ T8474] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 848.608954][ T8471] syzkaller1: entered promiscuous mode [ 848.614520][ T8471] syzkaller1: entered allmulticast mode [ 848.630956][ T8467] 8021q: adding VLAN 0 to HW filter on device batadv228 [ 848.643666][ T8467] bond69: (slave batadv228): Enslaving as a backup interface with an up link [ 848.658383][ T8474] 8021q: adding VLAN 0 to HW filter on device batadv77 [ 848.666959][ T8474] bond52: (slave batadv77): Enslaving as a backup interface with an up link [ 848.676726][ T8477] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:26:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x110040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'pimreg\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) [ 848.694180][ T8483] bond69 (unregistering): (slave batadv228): Releasing backup interface [ 848.707801][ T8474] FAULT_INJECTION: forcing a failure. [ 848.707801][ T8474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 848.721050][ T8474] CPU: 1 PID: 8474 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 848.731548][ T8474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 848.741621][ T8474] Call Trace: [ 848.744915][ T8474] [ 848.747858][ T8474] dump_stack_lvl+0xda/0x130 [ 848.752474][ T8474] dump_stack+0x15/0x20 [ 848.756646][ T8474] should_fail_ex+0x21f/0x230 [ 848.761336][ T8474] should_fail+0xb/0x10 [ 848.765557][ T8474] should_fail_usercopy+0x1a/0x20 [ 848.770643][ T8474] _copy_from_user+0x1e/0xd0 [ 848.775265][ T8474] copy_msghdr_from_user+0x54/0x2a0 [ 848.780564][ T8474] __sys_sendmsg+0x17d/0x270 [ 848.785278][ T8474] __x64_sys_sendmsg+0x46/0x50 [ 848.790075][ T8474] do_syscall_64+0x41/0xc0 [ 848.794549][ T8474] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 848.800520][ T8474] RIP: 0033:0x7f6f42996ae9 [ 848.804995][ T8474] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 848.824625][ T8474] RSP: 002b:00007f6f41d190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 848.833068][ T8474] RAX: ffffffffffffffda RBX: 00007f6f42ab5f80 RCX: 00007f6f42996ae9 [ 848.841071][ T8474] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 848.849145][ T8474] RBP: 00007f6f41d19120 R08: 0000000000000000 R09: 0000000000000000 [ 848.857233][ T8474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 848.865264][ T8474] R13: 000000000000000b R14: 00007f6f42ab5f80 R15: 00007ffc381e1498 [ 848.873262][ T8474] 15:26:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 2) 15:26:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0xe00, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:26:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) write$tun(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000600701030800090001000800508b1e4d402aaaaaaaaaaabb8847000000000000000000000000000000000000000000000000660ccc56140e2ffffe880000000000000000000000000101fe8000000000000000000000000000bb290000000000000000010000000000000007000000000000072000000002067fcc206b00000000000000ff0700000000000006000000000000000502000407100000000002000000010400000000000088250000000000000401010738000000030cff00040600000000000000010000000000000039910000000000007f0000000000000009000000000000000300000040000000010300000000010000010080cec8a4bb9fef47a055686db8a685bebd740afbff002f189a038f42882ab4198d899bd6fdf148b95997554335cfc0d4ec18a2529596c80de3b38e088e618373b3f3931f80fa3c82132ac29f95f25c3a532c7bec9b788e29a5a3431f53d6621e6cc16a17e95566676b53089c37f74c7dd53b63e038ffd1c2629b48ddecb2641d4629ccd4681a0a025a502df7c92558737bbc1116ee35ed275812052f2190dd2e20b3a4d5af8a2ed38e3804d79926fe2f1a2471d5aa40a5690b892f6f42957d8f006dc568e31c98c8501c9e74f17d0636c910000000000000000000000000000000000000000000007312000000000000071800000001040804000200000000000000080000000000000004013f0001000401800170beff535b17174bb04f2d3a9fe4885b61e4b2f331684ac7d1f6582ad19bb3115371bb91fc2b486fa1ed760182753261801dcfeb7f9f4fa8dddfca09a223fb422bf268c0c36b20444bec2ba3033887db03a95ac356ceacdb1cf95fbd698cca5652f32d7076fd782b2c1f64cf5151b37cc30000000421880b00ea00010005973df9ccfbbf85c0bce37fade56406b6ec20855b4228680804a80afaacafa88f857982f30614afcad08b9061640000e00fccde15affea309e489c796dde51e8ac5b2a9d55ef8b1bb2e1822bd07ba3ed6689e9c868953c19cf28381bca1b79831b417f1f604c51163f92274ade4a430d8e57121fd5d3be8998747d2dd6b00c62f00a117b6998ea881c053ad62882e944882c7a2b8bac51978a0c3b88e01bac9ffec94df28cb74dc963b25d51ae660fa91fee8b089abf0d052b06cfc86d8eb8fa791b63dddcb06231ba7531dd30820897468f8b76460034040d0ce7abfb9db070f208102d974e8c8a4561c05000800e96c69c4090e78b42755efc5510f671aec892f63e984b1b00015856d307b951baf4e0ddeed0929470ec854b08cf4899fab714caee79321817337c7cad35386fd8e869bf449645d7f50f477e6b9271c991ad94c3bcb64b29388d98ad230cf925fb4bdebbea4a12b8056a2374f4799506dc2fdc291a1db0c78a989c93313581b92b2983955b13d94b074c3c42d7480cfc3ba6e7f7ff3cc1364791386dc06494f010086dd00007fffefe6b3247a473e94b6e0856f18504737f18949080088be0000000019008c3f0100000000000008080022eb000000032680ffff0200000000000009080067170800655800000003956d51ddb4f7666ba90c44ffe453e85fa6df594146ff1552833c13949bcf81ae5a55c375bd392a6cef0634c6ec92537da84df4e85eb5e244343128c92b0c1635429effc3500a9381b984808d73fddc8a900e8c27c3f1729f4cffe8a0d5eb1cbef8a753322a44a4fda41a7f0c50f8af03fa1dfcf47710d7fa6a0df39f9237d76196b83e7042d18c5508d79543071f24b61e683c249f25b55719052eb14e7f9a6d070ca71c4958d635b2398e191b971bd72054155d0c4ce225935157e9538490ca5c68e1fa7dbb582eb23414e1f4cc598d069754194fef98128eacd7e3ef9100893140b0fe3e575e129d78656a29ab7af800f7ff49ebece7b2ff6433770dc1a7ce2620f5566aabc402f454c2805ffc0512b6c5e9e6f96445744a97156d47f21b3d0f32d4e3e1f17162016bcf35160f0749782ea84a724cc0c560386a92463c87cb6362741082788e2f800096db5cb3e5a007726d922205c77f405d26ab0dc99f13dad7a8dd9586ef3530eedaf5187f75e6f10cff6ec5dddcde53565713bdc4bb74306e9eccb8317f577a5eda07030c4a5d3d9d028ec6ed21723a0fc13f5d394701307d29d0aa6e0b6f3d60857ddb8af5841f839fbb0b300cfbb0f97823cffb1c8bef709c4d4f9596f3bbf6fcf4396d496c9db8e5838631ad782b6793b246573d5f41fba2324cdf65e5867ae1dede99e17e2f93c00925e95ea8d064e3908a7af33dc2b67296ee34b432e6cd1065eb0415ef27ac3570decae33a5dfb417fb9ebffc3f2e74d3328f0308ee0e6eeab61e454d8bf3135c6e6acca01127fa4b50a154603526c7aabc5bb861beb609105e3259d55b052b1334c550af96d4fb092cbe9fc7b0e595022898971718b845c0afff62945f33419eeddabd87271448376c59a2dcf3bb581bda8ef49cbe4871d43a6114164c12557fc819a76b389a32806131a428dfb3d6052985a6fdaf6ba9c353c3ac4d830bca4edc21d0d586e25005a69f849ee2b72b5caffaf2db1162f06c91c7fff16a9ec65135d26900001af968f2b10cedf25db2828541287b54fc1aa9bd26a0e5cc77e20415701367eebb52c2f5d7806e98bd7af0a62fc1e10e25f7efe28a5521392d7137ee3d15947843db663ea7ccf715809a7b32c37f9956e71dd364b1378055b47019c22c103be3ab8cade3d626e85197030731d44bf687a78eacd61850d47fb52b56697ac6e86801fd79fc78bf4c375a6a81cde1058fe4e2fcf0f8ed0fcb241f7404a87cffdbb0978c717fae04e0dd9dd41799986cce3a6fee400f30968b5aa044f1a63802ddca5c63636d97510c9f6b41f7f84b9f9ba490069cf835860d9af371d66a9ffdb4e9fafd8993a74b1523e46491b19d9dfde3bfa2be17ba7db8e80076d43c38dd8f3308547b91e45dc7d0b5fdcb79a9c766e0c7d2769ef167584c1c4110008d4198b3ed9f14ecaaf627174df703307ba53fd266c2a92bb3b6ef7ce0a5a834efa443042842e24621479c5153e8132f0d033e86c293e8c2de5dab024fc0224238e8872ba01fd794d7c88a78a391b96a8771ee09d19da7a555c7ced8fcd5d09744754c2cffd6de8a39a4bdf54539085c3a4dc7a1b70ab1787e7c24bb5fa8faf89fb8e94ef9a8e2a693ab75ddea2f84c538851f3f36aad8dfea6ab50205981f684afccd03612788fc5af9084a10a9654fe891d838df7786a822f7f0a374564b24a6eb574c8a3518c590cc9d26533942865a0282041d3c8c776e64d23c382c9c0e0b307af1af07be9896af1a7720824b1e9d5cf3cb555dd443bb8bc9007af87e2cbb4de046a49dd7a024985507b7c61473c4299f1bbfb7ede10e7bdbadf8edfca9dff0341299822f5926b681f0dfd1023a0cdf95bd92fea428289a47ac6c5d4105e009e130e485266e03f6d8fffe5a69df68d9ce43a38213fd14fb206923f654bf4217d086c75c9e5dc517a8ccfef4b5c31199a6855a710eccc75f49263910af4703f734dd324175f43bee058b927d7c6fa9c7494f0379b2a4d2a3d7598966dd689b5f7d70d649a20ab426513ca99434e5709bc13cb88c8de26721d1704c0e2351c897ee1f933a0944893877e58671574401b6b68b6c0e39b13280a85db0725382580d4619809ebc3a8c5f3270005fc6346ad97aeadfff16ff3f2209babc122883217b17402ec8cb7b94b82b245262e0c9cc46e2804d31860d36323348898e30b46179038a19495b853c23afc0029b5f9a47cde3e3b55799d9c6ef9e9277b40d4b178c12ae121e808885e07b0daa37d6eadd46fab9036b2417c56c42e5411e5ae721018dbbe2b87ecef34c026e502736c05471fa374970884204b4848972a739956764adcec84cb7300453a0ad0e4c4fac4a328e07611b144441d6e0454bc4bfa54820f2e95edb1e8a6d5d1c7aeb32d154da89694f0e7deef7d2730f5e028a2b796abcc8c1039706c797251716a9446a6d9f8049a51a44a277b0bde3c78e8169e6fcfb05a0244eb4dd5cb86e828d45379c17774c8cb4697e96a5415148082fb8112127ecdc1258eb61f8476c1a641162112509a3e6b7a560fe63856b9f8a9d9787b523937cc5560716d9d3589681cc149ab6f38d20b6a5c0c9ea0e5fe7fcae996acac2bf92fb73e03088d156bf14b2c2aa980b4767fbe6523c144ef0e5f628548228cd9d9f46eb0b48b01a63fabb65821f10c02d3d63c0a98d4aceea0c0c5cd106c0889483c978c9aef886b5646a74e136650d2240bd6c74efda5c001cfa4f522fb63b73729c8779184b1ad6ee9fb5a4287f1674967b72d823859db630714fe2137cbb0020ab9ccbb40f8b4ffe52c85d4d03013213421263ce16d04b4037488b6e54d45d7bf68038ee65b6398644fae103be463a0919e6f387713401e7e95aadd2eb84e812c6567422cd067e0aec3d1528acf264a558904b5283c9b7a82897732aa903194720b0e9fa26db6ae200d1e1994e6baeff8aff1749a772211908e55e6ca7fd0d1dbf72d04d192c7e6037b2d3044445bd8f8202732f52829c12d14d35f415bf4b6620c751f6f43f734358d6e210d91b4dead0dce8417af362ed88fc19f398144a3676cf55d5a0ea9efc976be728d4b47c49db6342909e97192d1877cff8b287ab345f3df4fac04559aa44d13a3f76a0e486ddb0af4e748e00280cfaacd52a0cc2575eea41cb6f880c1667b800468566f2599133eed0789404b2a59c5dc4a1b0d00a6009526821b77d599c76e4d5a0e2ebce970ad48ac5560b855af4a03934a13f98e4287160d49dbefd2ababf785c44d3f690b54e46a5cc54809507a68fe565c3684c6f57d287aae050fc82f502baf2a8339bd338aaa81a92f9736ac8ee94441bd34e3fdc73f215f4be5e407175e3f479c1772e09858e6a74768fefd3f43c2111cfe86d746b66bead0034435e5afdc9a6031b81b5b57c5fdf0de0e06ea7347c980340d7e3b214d389e4b99d86c0e7154500ec47894fe400c28b9b30c6b1eb844767cdcb93db71e5563ddfeb12680409efa72ab17a0939c12b5fc2995352fd04303b61e8f95f68e888cb8d9f19bd95573a3617f8779c9a5994186338bed0df19fabbc26ae2e7572e087f3786c2c2c1c3f18d76d4e92cc421d477a8fea6ab111455785610132f95ac44ab3aff2d1f4fa947ab1bbc5bf6fe9ade303d1cde3c336c758f836c695dc1f5cab758e244b9812789058aa03d7eb2c2fb27a987f159e7087e9ec3c4b1a660e190e7e4547e7724ce52800000000000000dee18fc135d0adc174017eb50d68c0c6550b3951870f690d67a6023c008351e66c5a7a76e076e1710c6c3f58bdc90e741efdfd289bd02d36c130258219b3445ec92da180a2ecdf422f473cc84926c52610a3e7e451af7a913c97a30eae66e0e08377b15ef38174f70107e7ca87e48bd148436b4aa3c6e3aef11084a2a7442cbc601b7a782a1d1df9db0f56dde188729463b745a5183854b63c62f14fb717e705b20e6f78f854a7d0850cb6bcfb9622dcc1948d32e1d4bf59b2328f55e97bda5d44195e7c4571c01f096956d77bb8efab135e84d5353a325b616b3623ce1f1d6a86043a6a6f67a6121e90edd185f26202c87ae9e6d923cc2d70599985f87046c66fbec848da3285467315e2b929beb670128a8d8747fa1eec2a7f56621f692e09cfa686a150de6ba0912d9c7f647a3257f6358acba18fa064aaca9fca023f733d0b55aa8b11df12eb6aa42decc13b138f43ad34b9dee1347b59a228d4212fce0d8f0ea0262714c0968fc36ee9c51a50b1e4c7ad960dd01cd528ba2243224ce27bb0564955beea8f64e2ff8fc0c3f47dcb08faf3e7869b726d07a087ebdb22959a4e17c4b0c4d17dcb32191b2e06d66d4ae2b0c096f839f3a2423124575098a9d7d8eb2ac361b218c210d0c2244b770366161d0afa569ae5638188f0cfa12051303247ea72e327d9dd17871a659940ffa45eff7167978ca7beea8cdf809dc80faa7d58645397eb6923b2d15bcc7f533490791eb09a3cd4c600f72edba129136b9a74e457704a7ed276e56046ec3e3ec6d97e5ecbd13a6257fbf83b31736a91a9e4d28eb49f6a12168a50e716bab0105881bc519c91fe5dc5e5460ec0a2c7427bf170d36f69898ba3a97cd857353ce2f62318c96028369021283d91ff6e6c1700bd0c5f3e8d0def4129416812e00c31c00079ad7ee426ec2151950881a974075246f8a97a96d465dea1b54368d012a149a53e35fb155f3e62b962d528ca95e7b6f0c2940fb3186d30f4aa2afcab3cdb69f11b4335cd89456009d39573696978346481909634177394c173d865d25813b5b4e877ed03ab37de164009d7d17c8045b1b3ce7769bc3f5c2dcba148da16bfa5d13e0a8a462757441b554127444759b079aad89bf60cfdf4cf694d06565919be7ff8f9b98daa7dd923e21c84140b5ca94cddb9c83a39e075768ce60cb665cd94725fbc748dc3363f87e4ea6c0e2af7d6c83f859a76c383a338fa28c7ea607eb28e7cfe5bb764a878cd28d33a779f6aebc6ca9e6bb007a130b255d91164e89e6ff6f2962bdf1cad53ebf3e032141f806fcc5523398fc438d78cf5c3f443e4879696f42c63597808e03744dd188a00e0aed8b4df5c222920d5f17cd0bfede5e6999bb7702b1d84344258aecc6d1ff71e571a476499f4b719aa43096255365ee7443d5e75781cd089e19b61fac341f4edad04cbac27b1d42802112f5c38dda7e9cb2862736470a3afe19e5eeff89972c0977ebc69cdecf8401a55ec186673bc4bbfc797b5d2f290f26175575a1da777ab49f0c6e36b9cb5835af1abfc811d550a00074b4e215fc6e09f5f026b66a97f757711cac40f0c782c59f2583fb6eb625f8850e6ef1fd74b8a849b67d6caf0fdcc182672d46ea635261e5d2e6fbf79b565436a249570a6125e9c29ed864c7cf592834185a73595f23338a4d2099be32578012b1ef2b537ed891d1d9ab666bc855f79076a6496ece51bb25d109b13546df704c7a2140892b34a4813837b3f2c04e6a3a5faf5fd380cc55e84c0c0ad7a50b81ed0c7c649bfe0d86a404b8a0bc93eb12e3ce7d80b4c82ae2b96dfcacbd5e23d92ec3ac6c287f037e165e65726cdc55ed98ebd71277cddd3a48bc85b9b3574dcb2b2c2f2365731594aedea5f82d0ebf1af41582ee9ea6524b4d44dbd2c75bb2d5f3267b3e617d4939a9bfa82cefd9e9bbbb4d5c3b8dd9e230d6b014b467d692447b61b540a3763bd47af348084fe4412d9322882e52bd43f59ede86e2c2409bb4b111f2c6219230f4a0179b283cad55fb22123edd0a98788d42910f9ca4b729cbdc0611ac7c6db1ce8"], 0x146a) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="0172c2000003bbbbbbbbbbbb000d020000c0060200002730d090b4033f2b29ee11539e93535e60ca746c5122b3ba1749f0c4c81803c3e263d7b4d66dd10dea243911d5ba4fb5623d71bac74d1e04835b00d7fa45fceb"], &(0x7f0000000140)={0x0, 0x1, [0x76a, 0x424, 0x1f8, 0x5bb]}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'bridge0\x00', @local}) [ 848.894441][ T8483] bond69 (unregistering): Released all slaves 15:26:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) write$tun(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x146a) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="0172c2000003bbbbbbbbbbbb000d020000c0060200002730d090b4033f2b29ee11539e93535e60ca746c5122b3ba1749f0c4c81803c3e263d7b4d66dd10dea243911d5ba4fb5623d71bac74d1e04835b00d7fa45fceb"], &(0x7f0000000140)={0x0, 0x1, [0x76a, 0x424, 0x1f8, 0x5bb]}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'bridge0\x00', @local}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) (async) write$tun(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x146a) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="0172c2000003bbbbbbbbbbbb000d020000c0060200002730d090b4033f2b29ee11539e93535e60ca746c5122b3ba1749f0c4c81803c3e263d7b4d66dd10dea243911d5ba4fb5623d71bac74d1e04835b00d7fa45fceb"], &(0x7f0000000140)={0x0, 0x1, [0x76a, 0x424, 0x1f8, 0x5bb]}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'bridge0\x00', @local}) (async) [ 848.974842][ T8496] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 848.992902][ T8497] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:26:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) write$tun(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000600701030800090001000800508b1e4d402aaaaaaaaaaabb8847000000000000000000000000000000000000000000000000660ccc56140e2ffffe880000000000000000000000000101fe8000000000000000000000000000bb290000000000000000010000000000000007000000000000072000000002067fcc206b00000000000000ff0700000000000006000000000000000502000407100000000002000000010400000000000088250000000000000401010738000000030cff00040600000000000000010000000000000039910000000000007f0000000000000009000000000000000300000040000000010300000000010000010080cec8a4bb9fef47a055686db8a685bebd740afbff002f189a038f42882ab4198d899bd6fdf148b95997554335cfc0d4ec18a2529596c80de3b38e088e618373b3f3931f80fa3c82132ac29f95f25c3a532c7bec9b788e29a5a3431f53d6621e6cc16a17e95566676b53089c37f74c7dd53b63e038ffd1c2629b48ddecb2641d4629ccd4681a0a025a502df7c92558737bbc1116ee35ed275812052f2190dd2e20b3a4d5af8a2ed38e3804d79926fe2f1a2471d5aa40a5690b892f6f42957d8f006dc568e31c98c8501c9e74f17d0636c910000000000000000000000000000000000000000000007312000000000000071800000001040804000200000000000000080000000000000004013f0001000401800170beff535b17174bb04f2d3a9fe4885b61e4b2f331684ac7d1f6582ad19bb3115371bb91fc2b486fa1ed760182753261801dcfeb7f9f4fa8dddfca09a223fb422bf268c0c36b20444bec2ba3033887db03a95ac356ceacdb1cf95fbd698cca5652f32d7076fd782b2c1f64cf5151b37cc30000000421880b00ea00010005973df9ccfbbf85c0bce37fade56406b6ec20855b4228680804a80afaacafa88f857982f30614afcad08b9061640000e00fccde15affea309e489c796dde51e8ac5b2a9d55ef8b1bb2e1822bd07ba3ed6689e9c868953c19cf28381bca1b79831b417f1f604c51163f92274ade4a430d8e57121fd5d3be8998747d2dd6b00c62f00a117b6998ea881c053ad62882e944882c7a2b8bac51978a0c3b88e01bac9ffec94df28cb74dc963b25d51ae660fa91fee8b089abf0d052b06cfc86d8eb8fa791b63dddcb06231ba7531dd30820897468f8b76460034040d0ce7abfb9db070f208102d974e8c8a4561c05000800e96c69c4090e78b42755efc5510f671aec892f63e984b1b00015856d307b951baf4e0ddeed0929470ec854b08cf4899fab714caee79321817337c7cad35386fd8e869bf449645d7f50f477e6b9271c991ad94c3bcb64b29388d98ad230cf925fb4bdebbea4a12b8056a2374f4799506dc2fdc291a1db0c78a989c93313581b92b2983955b13d94b074c3c42d7480cfc3ba6e7f7ff3cc1364791386dc06494f010086dd00007fffefe6b3247a473e94b6e0856f18504737f18949080088be0000000019008c3f0100000000000008080022eb000000032680ffff0200000000000009080067170800655800000003956d51ddb4f7666ba90c44ffe453e85fa6df594146ff1552833c13949bcf81ae5a55c375bd392a6cef0634c6ec92537da84df4e85eb5e244343128c92b0c1635429effc3500a9381b984808d73fddc8a900e8c27c3f1729f4cffe8a0d5eb1cbef8a753322a44a4fda41a7f0c50f8af03fa1dfcf47710d7fa6a0df39f9237d76196b83e7042d18c5508d79543071f24b61e683c249f25b55719052eb14e7f9a6d070ca71c4958d635b2398e191b971bd72054155d0c4ce225935157e9538490ca5c68e1fa7dbb582eb23414e1f4cc598d069754194fef98128eacd7e3ef9100893140b0fe3e575e129d78656a29ab7af800f7ff49ebece7b2ff6433770dc1a7ce2620f5566aabc402f454c2805ffc0512b6c5e9e6f96445744a97156d47f21b3d0f32d4e3e1f17162016bcf35160f0749782ea84a724cc0c560386a92463c87cb6362741082788e2f800096db5cb3e5a007726d922205c77f405d26ab0dc99f13dad7a8dd9586ef3530eedaf5187f75e6f10cff6ec5dddcde53565713bdc4bb74306e9eccb8317f577a5eda07030c4a5d3d9d028ec6ed21723a0fc13f5d394701307d29d0aa6e0b6f3d60857ddb8af5841f839fbb0b300cfbb0f97823cffb1c8bef709c4d4f9596f3bbf6fcf4396d496c9db8e5838631ad782b6793b246573d5f41fba2324cdf65e5867ae1dede99e17e2f93c00925e95ea8d064e3908a7af33dc2b67296ee34b432e6cd1065eb0415ef27ac3570decae33a5dfb417fb9ebffc3f2e74d3328f0308ee0e6eeab61e454d8bf3135c6e6acca01127fa4b50a154603526c7aabc5bb861beb609105e3259d55b052b1334c550af96d4fb092cbe9fc7b0e595022898971718b845c0afff62945f33419eeddabd87271448376c59a2dcf3bb581bda8ef49cbe4871d43a6114164c12557fc819a76b389a32806131a428dfb3d6052985a6fdaf6ba9c353c3ac4d830bca4edc21d0d586e25005a69f849ee2b72b5caffaf2db1162f06c91c7fff16a9ec65135d26900001af968f2b10cedf25db2828541287b54fc1aa9bd26a0e5cc77e20415701367eebb52c2f5d7806e98bd7af0a62fc1e10e25f7efe28a5521392d7137ee3d15947843db663ea7ccf715809a7b32c37f9956e71dd364b1378055b47019c22c103be3ab8cade3d626e85197030731d44bf687a78eacd61850d47fb52b56697ac6e86801fd79fc78bf4c375a6a81cde1058fe4e2fcf0f8ed0fcb241f7404a87cffdbb0978c717fae04e0dd9dd41799986cce3a6fee400f30968b5aa044f1a63802ddca5c63636d97510c9f6b41f7f84b9f9ba490069cf835860d9af371d66a9ffdb4e9fafd8993a74b1523e46491b19d9dfde3bfa2be17ba7db8e80076d43c38dd8f3308547b91e45dc7d0b5fdcb79a9c766e0c7d2769ef167584c1c4110008d4198b3ed9f14ecaaf627174df703307ba53fd266c2a92bb3b6ef7ce0a5a834efa443042842e24621479c5153e8132f0d033e86c293e8c2de5dab024fc0224238e8872ba01fd794d7c88a78a391b96a8771ee09d19da7a555c7ced8fcd5d09744754c2cffd6de8a39a4bdf54539085c3a4dc7a1b70ab1787e7c24bb5fa8faf89fb8e94ef9a8e2a693ab75ddea2f84c538851f3f36aad8dfea6ab50205981f684afccd03612788fc5af9084a10a9654fe891d838df7786a822f7f0a374564b24a6eb574c8a3518c590cc9d26533942865a0282041d3c8c776e64d23c382c9c0e0b307af1af07be9896af1a7720824b1e9d5cf3cb555dd443bb8bc9007af87e2cbb4de046a49dd7a024985507b7c61473c4299f1bbfb7ede10e7bdbadf8edfca9dff0341299822f5926b681f0dfd1023a0cdf95bd92fea428289a47ac6c5d4105e009e130e485266e03f6d8fffe5a69df68d9ce43a38213fd14fb206923f654bf4217d086c75c9e5dc517a8ccfef4b5c31199a6855a710eccc75f49263910af4703f734dd324175f43bee058b927d7c6fa9c7494f0379b2a4d2a3d7598966dd689b5f7d70d649a20ab426513ca99434e5709bc13cb88c8de26721d1704c0e2351c897ee1f933a0944893877e58671574401b6b68b6c0e39b13280a85db0725382580d4619809ebc3a8c5f3270005fc6346ad97aeadfff16ff3f2209babc122883217b17402ec8cb7b94b82b245262e0c9cc46e2804d31860d36323348898e30b46179038a19495b853c23afc0029b5f9a47cde3e3b55799d9c6ef9e9277b40d4b178c12ae121e808885e07b0daa37d6eadd46fab9036b2417c56c42e5411e5ae721018dbbe2b87ecef34c026e502736c05471fa374970884204b4848972a739956764adcec84cb7300453a0ad0e4c4fac4a328e07611b144441d6e0454bc4bfa54820f2e95edb1e8a6d5d1c7aeb32d154da89694f0e7deef7d2730f5e028a2b796abcc8c1039706c797251716a9446a6d9f8049a51a44a277b0bde3c78e8169e6fcfb05a0244eb4dd5cb86e828d45379c17774c8cb4697e96a5415148082fb8112127ecdc1258eb61f8476c1a641162112509a3e6b7a560fe63856b9f8a9d9787b523937cc5560716d9d3589681cc149ab6f38d20b6a5c0c9ea0e5fe7fcae996acac2bf92fb73e03088d156bf14b2c2aa980b4767fbe6523c144ef0e5f628548228cd9d9f46eb0b48b01a63fabb65821f10c02d3d63c0a98d4aceea0c0c5cd106c0889483c978c9aef886b5646a74e136650d2240bd6c74efda5c001cfa4f522fb63b73729c8779184b1ad6ee9fb5a4287f1674967b72d823859db630714fe2137cbb0020ab9ccbb40f8b4ffe52c85d4d03013213421263ce16d04b4037488b6e54d45d7bf68038ee65b6398644fae103be463a0919e6f387713401e7e95aadd2eb84e812c6567422cd067e0aec3d1528acf264a558904b5283c9b7a82897732aa903194720b0e9fa26db6ae200d1e1994e6baeff8aff1749a772211908e55e6ca7fd0d1dbf72d04d192c7e6037b2d3044445bd8f8202732f52829c12d14d35f415bf4b6620c751f6f43f734358d6e210d91b4dead0dce8417af362ed88fc19f398144a3676cf55d5a0ea9efc976be728d4b47c49db6342909e97192d1877cff8b287ab345f3df4fac04559aa44d13a3f76a0e486ddb0af4e748e00280cfaacd52a0cc2575eea41cb6f880c1667b800468566f2599133eed0789404b2a59c5dc4a1b0d00a6009526821b77d599c76e4d5a0e2ebce970ad48ac5560b855af4a03934a13f98e4287160d49dbefd2ababf785c44d3f690b54e46a5cc54809507a68fe565c3684c6f57d287aae050fc82f502baf2a8339bd338aaa81a92f9736ac8ee94441bd34e3fdc73f215f4be5e407175e3f479c1772e09858e6a74768fefd3f43c2111cfe86d746b66bead0034435e5afdc9a6031b81b5b57c5fdf0de0e06ea7347c980340d7e3b214d389e4b99d86c0e7154500ec47894fe400c28b9b30c6b1eb844767cdcb93db71e5563ddfeb12680409efa72ab17a0939c12b5fc2995352fd04303b61e8f95f68e888cb8d9f19bd95573a3617f8779c9a5994186338bed0df19fabbc26ae2e7572e087f3786c2c2c1c3f18d76d4e92cc421d477a8fea6ab111455785610132f95ac44ab3aff2d1f4fa947ab1bbc5bf6fe9ade303d1cde3c336c758f836c695dc1f5cab758e244b9812789058aa03d7eb2c2fb27a987f159e7087e9ec3c4b1a660e190e7e4547e7724ce52800000000000000dee18fc135d0adc174017eb50d68c0c6550b3951870f690d67a6023c008351e66c5a7a76e076e1710c6c3f58bdc90e741efdfd289bd02d36c130258219b3445ec92da180a2ecdf422f473cc84926c52610a3e7e451af7a913c97a30eae66e0e08377b15ef38174f70107e7ca87e48bd148436b4aa3c6e3aef11084a2a7442cbc601b7a782a1d1df9db0f56dde188729463b745a5183854b63c62f14fb717e705b20e6f78f854a7d0850cb6bcfb9622dcc1948d32e1d4bf59b2328f55e97bda5d44195e7c4571c01f096956d77bb8efab135e84d5353a325b616b3623ce1f1d6a86043a6a6f67a6121e90edd185f26202c87ae9e6d923cc2d70599985f87046c66fbec848da3285467315e2b929beb670128a8d8747fa1eec2a7f56621f692e09cfa686a150de6ba0912d9c7f647a3257f6358acba18fa064aaca9fca023f733d0b55aa8b11df12eb6aa42decc13b138f43ad34b9dee1347b59a228d4212fce0d8f0ea0262714c0968fc36ee9c51a50b1e4c7ad960dd01cd528ba2243224ce27bb0564955beea8f64e2ff8fc0c3f47dcb08faf3e7869b726d07a087ebdb22959a4e17c4b0c4d17dcb32191b2e06d66d4ae2b0c096f839f3a2423124575098a9d7d8eb2ac361b218c210d0c2244b770366161d0afa569ae5638188f0cfa12051303247ea72e327d9dd17871a659940ffa45eff7167978ca7beea8cdf809dc80faa7d58645397eb6923b2d15bcc7f533490791eb09a3cd4c600f72edba129136b9a74e457704a7ed276e56046ec3e3ec6d97e5ecbd13a6257fbf83b31736a91a9e4d28eb49f6a12168a50e716bab0105881bc519c91fe5dc5e5460ec0a2c7427bf170d36f69898ba3a97cd857353ce2f62318c96028369021283d91ff6e6c1700bd0c5f3e8d0def4129416812e00c31c00079ad7ee426ec2151950881a974075246f8a97a96d465dea1b54368d012a149a53e35fb155f3e62b962d528ca95e7b6f0c2940fb3186d30f4aa2afcab3cdb69f11b4335cd89456009d39573696978346481909634177394c173d865d25813b5b4e877ed03ab37de164009d7d17c8045b1b3ce7769bc3f5c2dcba148da16bfa5d13e0a8a462757441b554127444759b079aad89bf60cfdf4cf694d06565919be7ff8f9b98daa7dd923e21c84140b5ca94cddb9c83a39e075768ce60cb665cd94725fbc748dc3363f87e4ea6c0e2af7d6c83f859a76c383a338fa28c7ea607eb28e7cfe5bb764a878cd28d33a779f6aebc6ca9e6bb007a130b255d91164e89e6ff6f2962bdf1cad53ebf3e032141f806fcc5523398fc438d78cf5c3f443e4879696f42c63597808e03744dd188a00e0aed8b4df5c222920d5f17cd0bfede5e6999bb7702b1d84344258aecc6d1ff71e571a476499f4b719aa43096255365ee7443d5e75781cd089e19b61fac341f4edad04cbac27b1d42802112f5c38dda7e9cb2862736470a3afe19e5eeff89972c0977ebc69cdecf8401a55ec186673bc4bbfc797b5d2f290f26175575a1da777ab49f0c6e36b9cb5835af1abfc811d550a00074b4e215fc6e09f5f026b66a97f757711cac40f0c782c59f2583fb6eb625f8850e6ef1fd74b8a849b67d6caf0fdcc182672d46ea635261e5d2e6fbf79b565436a249570a6125e9c29ed864c7cf592834185a73595f23338a4d2099be32578012b1ef2b537ed891d1d9ab666bc855f79076a6496ece51bb25d109b13546df704c7a2140892b34a4813837b3f2c04e6a3a5faf5fd380cc55e84c0c0ad7a50b81ed0c7c649bfe0d86a404b8a0bc93eb12e3ce7d80b4c82ae2b96dfcacbd5e23d92ec3ac6c287f037e165e65726cdc55ed98ebd71277cddd3a48bc85b9b3574dcb2b2c2f2365731594aedea5f82d0ebf1af41582ee9ea6524b4d44dbd2c75bb2d5f3267b3e617d4939a9bfa82cefd9e9bbbb4d5c3b8dd9e230d6b014b467d692447b61b540a3763bd47af348084fe4412d9322882e52bd43f59ede86e2c2409bb4b111f2c6219230f4a0179b283cad55fb22123edd0a98788d42910f9ca4b729cbdc0611ac7c6db1ce8"], 0x146a) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="0172c2000003bbbbbbbbbbbb000d020000c0060200002730d090b4033f2b29ee11539e93535e60ca746c5122b3ba1749f0c4c81803c3e263d7b4d66dd10dea243911d5ba4fb5623d71bac74d1e04835b00d7fa45fceb"], &(0x7f0000000140)={0x0, 0x1, [0x76a, 0x424, 0x1f8, 0x5bb]}) (async) syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="0172c2000003bbbbbbbbbbbb000d020000c0060200002730d090b4033f2b29ee11539e93535e60ca746c5122b3ba1749f0c4c81803c3e263d7b4d66dd10dea243911d5ba4fb5623d71bac74d1e04835b00d7fa45fceb"], &(0x7f0000000140)={0x0, 0x1, [0x76a, 0x424, 0x1f8, 0x5bb]}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'bridge0\x00', @local}) [ 849.020589][ T8496] 8021q: adding VLAN 0 to HW filter on device batadv229 [ 849.029595][ T8496] bond69: (slave batadv229): Enslaving as a backup interface with an up link [ 849.047487][ T8497] 8021q: adding VLAN 0 to HW filter on device batadv78 [ 849.062131][ T8497] bond53: (slave batadv78): Enslaving as a backup interface with an up link [ 849.074052][ T8496] bond69 (unregistering): (slave batadv229): Releasing backup interface [ 849.093206][ T8496] bond69 (unregistering): Released all slaves [ 849.095917][ T8497] FAULT_INJECTION: forcing a failure. [ 849.095917][ T8497] name failslab, interval 1, probability 0, space 0, times 0 [ 849.112067][ T8497] CPU: 1 PID: 8497 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 849.122492][ T8497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 849.132578][ T8497] Call Trace: [ 849.135871][ T8497] [ 849.138821][ T8497] dump_stack_lvl+0xda/0x130 [ 849.143438][ T8497] dump_stack+0x15/0x20 [ 849.147663][ T8497] should_fail_ex+0x21f/0x230 [ 849.152362][ T8497] __should_failslab+0x92/0xa0 [ 849.157146][ T8497] should_failslab+0x9/0x20 [ 849.161709][ T8497] slab_pre_alloc_hook+0x38/0x180 [ 849.166844][ T8497] kmem_cache_alloc_node+0x54/0x240 [ 849.172085][ T8497] ? __alloc_skb+0x109/0x2e0 [ 849.176806][ T8497] __alloc_skb+0x109/0x2e0 [ 849.181262][ T8497] netlink_sendmsg+0x483/0x770 [ 849.186075][ T8497] ? netlink_getsockopt+0x3e0/0x3e0 [ 849.191385][ T8497] ____sys_sendmsg+0x37c/0x4d0 [ 849.196250][ T8497] __sys_sendmsg+0x1e9/0x270 [ 849.200939][ T8497] __x64_sys_sendmsg+0x46/0x50 [ 849.205816][ T8497] do_syscall_64+0x41/0xc0 [ 849.210346][ T8497] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 849.216346][ T8497] RIP: 0033:0x7f6f42996ae9 [ 849.220790][ T8497] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 849.240700][ T8497] RSP: 002b:00007f6f41d190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 849.249217][ T8497] RAX: ffffffffffffffda RBX: 00007f6f42ab5f80 RCX: 00007f6f42996ae9 [ 849.257243][ T8497] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 849.265236][ T8497] RBP: 00007f6f41d19120 R08: 0000000000000000 R09: 0000000000000000 15:26:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1000}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001a0010002bbd7000fcdbdf2580145f81fd00ed0500100000"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x44) 15:26:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 3) 15:26:09 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = inotify_init1(0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = memfd_create(0x0, 0x0) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) dup3(r2, r3, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x2000) [ 849.273227][ T8497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.281272][ T8497] R13: 000000000000000b R14: 00007f6f42ab5f80 R15: 00007ffc381e1498 [ 849.289289][ T8497] [ 849.351482][ T8515] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 849.361071][ T8516] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 849.384489][ T8516] 8021q: adding VLAN 0 to HW filter on device batadv79 [ 849.393853][ T8516] bond54: (slave batadv79): Enslaving as a backup interface with an up link 15:26:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/457]}, 0x241) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) [ 849.483634][ T8519] syzkaller1: entered promiscuous mode [ 849.489272][ T8519] syzkaller1: entered allmulticast mode [ 850.945735][ T21] usb usb6-port1: attempt power cycle 15:26:12 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x8400) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)="fb5cf30922bc37cb836dbadeb5fe4bbccb3ce6727ba035e8c0007fbf31fad46810febe17725aaf7d91a1e401758beb2996984b2b4eaaaab3628acc4c13ceedcf16eb910ce9820ad0bcedd384306ec524bb39b945859e91befb593f9f48e121f0f331af66d507d46211a2ac37f4c04dba8f4f3fc634616d9e5c088dc227ee7713e015f88850c52a376c2a18fbc1b5cd6bef1507aee00075016859ffaa1af7b192bf2d33532d2da67fd390869aa74a4ccbbfd3b74fa5c7d1c9604ba9a7feef9549db", 0xc1}, {&(0x7f0000000000)="63467ff615f1b9430a1b73e8add15e750e92c7123091d003e6b88b48065b4ca7fab2ebc07d56bb21249fdb91dc8bf434e369b55762c156150bc8db10a6d70cc801cf4a69cc042361702078b435b63f2d42282b97acc4a96699940aabab36cea4c0deb0e8715ef72cbf3fdc6690de91cf8bfee5fc86f25861257859e4510126fecf04bc77b400b4ae7f73ae2b2bc64680c0277019e0bf5d94e3f23beda8477b19a821dc790d0c6b4052868557b47723ce94", 0xb1}, {&(0x7f0000000200)="b8506a4ace22da977497c1301a6a4e151fc500d01cff5628e96dadf9f925efdcc0920e771afaa97bbfa44ccf17bc76208b93afce97a2b59d56e39f45ce6dacf594a415adff433292b15acc74ac", 0x4d}, {&(0x7f0000000280)="92c9066fd0c912d52676cdbcd367b69d78da2f9c4327de6401dd701fae1417f42212f50a6afc1794c4a0fac2bdecb5dcb2455f3a2ada69b8bbd4540e57c8b423095037e840f897759774a81a7b43b78962b15cf662fe03a431f72777482d3c06823569dfaf2bb6193b9672f697f87aa235e7bd5b118175e92aa69cb66d68e37566d92f80267847bc8c1d18e83bc7ffa9dcac12d6c55435aa881fd0683df8f3f4869a9e12932faf072a8fbaf6bade0a9d798ccc9d3b26ef", 0xb7}, {&(0x7f0000000340)="8f9529432152ef9c52dfd6b94c702fc0c210dbc41eb19fec11149e09ce6d137b79967b04f6acca93163ee6e01e65b578ead26da97b717aca32f8afb892a8ce054a754ca2d0bd9840db096e4cfec1e1f12001d61920e3bf208b2d5d48ddf3eb1fff1e81fd9f23c790d5f0511192ce7a088b50", 0x72}, {&(0x7f0000000540)="f93121cec7ac30923359fb3abeec7f4e22bc0f021b8ed6c1f8f428f0666c886c38e00684", 0x24}, {&(0x7f0000000400)="8b7324fad62991146fb3f736d70000dadce2260b60fa39cd4e73559911d5e7b0758f6d36090f406d98", 0x29}, {&(0x7f0000000440)="983b74bd74883d6da983b9f7f9f009e1faec1352741fdb7f1f23c04637bdee3a480289ee9398e51ab78631cbad000d83f73d086a60c84c129168909fb82f0038a79ddb5b3df9337ad56bc77cfb71b88c", 0x50}], 0x8) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x500, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/drivers\x00', 0x0, 0x0) (async, rerun: 32) r3 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x10, 0x803, 0x0) sendto$inet(r8, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r10, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000a00)={'tunl0\x00', &(0x7f0000000940)={'erspan0\x00', r4, 0x7800, 0x7, 0x3ff, 0x7, {{0x19, 0x4, 0x0, 0x1f, 0x64, 0x67, 0x0, 0x1f, 0x4, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x1c, 0x9a, 0x0, 0x7, [0x400, 0x100, 0x9, 0x9, 0x7, 0x5]}, @cipso={0x86, 0x34, 0x1, [{0xa0b8df807a40fb6d, 0x7, "3d4df729cb"}, {0x5, 0x2}, {0x5, 0x10, "9bb137d64b67220fc1054884d4d1"}, {0x6, 0x8, "693812c05b13"}, {0x6, 0xd, "95711dae8e448ed736956a"}]}]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000cc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a40)={0x224, r10, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x17c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa213a81bf5dd7f99}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x224}, 0x1, 0x0, 0x0, 0x24040890}, 0x800) (async) sendto$inet(r7, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) connect$inet(r3, &(0x7f0000000d00)={0x2, 0x1, @remote}, 0x10) (async) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r12, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000104fd0008000fa1bb7400000000", @ANYRES32=r4, @ANYBLOB="001d82000000000008000a00", @ANYRES32=r12], 0x28}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000640)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x808, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_any}, {@version_L}, {@version_9p2000}, {@version_L}, {@privport}, {@cache_mmap}, {@mmap}], [{@fowner_lt={'fowner<', r13}}, {@smackfshat={'smackfshat', 0x3d, '\''}}, {@uid_gt={'uid>', 0xee00}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@obj_role={'obj_role', 0x3d, '\\'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@permit_directio}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/bus/usb/00#/00#\x00'}}, {@measure}]}}) (async) ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523) 15:26:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0xf00, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:26:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 4) 15:26:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1000}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001a0010002bbd7000fcdbdf2580145f81fd00ed0500100000"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x44) 15:26:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = inotify_init1(0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = memfd_create(0x0, 0x0) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) dup3(r2, r3, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x4000) 15:26:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/457]}, 0x241) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) [ 852.915743][ T21] usb usb6-port1: unable to enumerate USB device [ 852.940804][ T8524] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 852.956132][ T8531] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN 15:26:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1000}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001a0010002bbd7000fcdbdf2580145f81fd00ed0500100000"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x44) [ 852.971055][ T8530] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 852.997245][ T8524] 8021q: adding VLAN 0 to HW filter on device batadv80 [ 853.005991][ T8524] bond55: (slave batadv80): Enslaving as a backup interface with an up link [ 853.031767][ T8530] 8021q: adding VLAN 0 to HW filter on device batadv230 [ 853.043035][ T8524] FAULT_INJECTION: forcing a failure. [ 853.043035][ T8524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.056188][ T8524] CPU: 0 PID: 8524 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 853.066858][ T8524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 853.077048][ T8524] Call Trace: [ 853.080344][ T8524] [ 853.083340][ T8524] dump_stack_lvl+0xda/0x130 [ 853.087952][ T8524] dump_stack+0x15/0x20 [ 853.092162][ T8524] should_fail_ex+0x21f/0x230 [ 853.096897][ T8524] should_fail+0xb/0x10 [ 853.101080][ T8524] should_fail_usercopy+0x1a/0x20 [ 853.106129][ T8524] _copy_from_iter+0xd8/0xa40 [ 853.110835][ T8524] ? kmalloc_reserve+0xfb/0x190 [ 853.115791][ T8524] ? __build_skb_around+0x196/0x1f0 [ 853.119668][ T8530] bond69: (slave batadv230): Enslaving as a backup interface with an up link [ 853.121008][ T8524] ? __virt_addr_valid+0x16a/0x1b0 [ 853.134929][ T8524] ? __check_object_size+0x363/0x520 [ 853.140282][ T8524] netlink_sendmsg+0x53c/0x770 [ 853.145129][ T8524] ? netlink_getsockopt+0x3e0/0x3e0 [ 853.150360][ T8524] ____sys_sendmsg+0x37c/0x4d0 [ 853.155243][ T8524] __sys_sendmsg+0x1e9/0x270 [ 853.159980][ T8524] __x64_sys_sendmsg+0x46/0x50 [ 853.164857][ T8524] do_syscall_64+0x41/0xc0 [ 853.169333][ T8524] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 853.175429][ T8524] RIP: 0033:0x7f6f42996ae9 [ 853.179895][ T8524] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 853.199566][ T8524] RSP: 002b:00007f6f41d190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 853.208121][ T8524] RAX: ffffffffffffffda RBX: 00007f6f42ab5f80 RCX: 00007f6f42996ae9 [ 853.216388][ T8524] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 853.224380][ T8524] RBP: 00007f6f41d19120 R08: 0000000000000000 R09: 0000000000000000 15:26:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x1100, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:26:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 5) 15:26:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r1, 0x8208200) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0xf5}, @val={0x1, 0x3, 0x400, 0x3, 0xde7, 0x7}, @mpls={[{0x3, 0x0, 0x1}, {0xff801}], @ipv4=@tipc={{0x16, 0x4, 0x0, 0x2b, 0x83, 0x64, 0x0, 0x5, 0x6, 0x0, @local, @rand_addr=0x64010101, {[@timestamp={0x44, 0x18, 0x26, 0x0, 0x2, [0x2, 0x800, 0x9, 0x7ff, 0x8fc]}, @timestamp={0x44, 0x14, 0x53, 0x0, 0x9, [0x6, 0xfffff539, 0x4, 0x3]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @rr={0x7, 0xf, 0xf0, [@rand_addr=0x64010102, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, @payload_named={{{{{0x2b, 0x0, 0x1, 0x0, 0x0, 0xa, 0x1, 0x2, 0x31f, 0x0, 0x3, 0x4, 0x3, 0x2, 0x3, 0x4, 0x4, 0x4e22, 0x4e23}, 0x0, 0x1}, 0x0, 0x3}}, [0x0, 0x0, 0x0]}}}}, 0x99) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) [ 853.232370][ T8524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.240441][ T8524] R13: 000000000000000b R14: 00007f6f42ab5f80 R15: 00007ffc381e1498 [ 853.248448][ T8524] [ 853.312617][ T8558] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 853.332957][ T8557] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 853.354621][ T8558] 8021q: adding VLAN 0 to HW filter on device batadv81 15:26:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) r1 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r1, 0x8208200) (async) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0xf5}, @val={0x1, 0x3, 0x400, 0x3, 0xde7, 0x7}, @mpls={[{0x3, 0x0, 0x1}, {0xff801}], @ipv4=@tipc={{0x16, 0x4, 0x0, 0x2b, 0x83, 0x64, 0x0, 0x5, 0x6, 0x0, @local, @rand_addr=0x64010101, {[@timestamp={0x44, 0x18, 0x26, 0x0, 0x2, [0x2, 0x800, 0x9, 0x7ff, 0x8fc]}, @timestamp={0x44, 0x14, 0x53, 0x0, 0x9, [0x6, 0xfffff539, 0x4, 0x3]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @rr={0x7, 0xf, 0xf0, [@rand_addr=0x64010102, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, @payload_named={{{{{0x2b, 0x0, 0x1, 0x0, 0x0, 0xa, 0x1, 0x2, 0x31f, 0x0, 0x3, 0x4, 0x3, 0x2, 0x3, 0x4, 0x4, 0x4e22, 0x4e23}, 0x0, 0x1}, 0x0, 0x3}}, [0x0, 0x0, 0x0]}}}}, 0x99) (async, rerun: 64) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (rerun: 64) [ 853.363116][ T8558] bond56: (slave batadv81): Enslaving as a backup interface with an up link [ 853.382138][ T8557] 8021q: adding VLAN 0 to HW filter on device batadv231 [ 853.391582][ T8558] FAULT_INJECTION: forcing a failure. [ 853.391582][ T8558] name failslab, interval 1, probability 0, space 0, times 0 [ 853.404372][ T8558] CPU: 0 PID: 8558 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 853.414727][ T8558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 853.424895][ T8558] Call Trace: [ 853.428253][ T8558] [ 853.431192][ T8558] dump_stack_lvl+0xda/0x130 [ 853.435893][ T8558] dump_stack+0x15/0x20 [ 853.440163][ T8558] should_fail_ex+0x21f/0x230 [ 853.444868][ T8558] __should_failslab+0x92/0xa0 [ 853.449731][ T8558] should_failslab+0x9/0x20 [ 853.455927][ T8558] slab_pre_alloc_hook+0x38/0x180 15:26:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x114a, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 853.456902][ T8557] bond70: (slave batadv231): Enslaving as a backup interface with an up link [ 853.461013][ T8558] kmem_cache_alloc+0x52/0x220 [ 853.474610][ T8558] ? skb_clone+0x154/0x1e0 [ 853.479125][ T8558] skb_clone+0x154/0x1e0 [ 853.483504][ T8558] __netlink_deliver_tap+0x2c0/0x4c0 [ 853.488920][ T8558] netlink_unicast+0x615/0x640 [ 853.493741][ T8558] netlink_sendmsg+0x665/0x770 [ 853.498546][ T8558] ? netlink_getsockopt+0x3e0/0x3e0 [ 853.503856][ T8558] ____sys_sendmsg+0x37c/0x4d0 [ 853.508732][ T8558] __sys_sendmsg+0x1e9/0x270 [ 853.513409][ T8558] __x64_sys_sendmsg+0x46/0x50 [ 853.518285][ T8558] do_syscall_64+0x41/0xc0 [ 853.522746][ T8558] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 853.528748][ T8558] RIP: 0033:0x7f6f42996ae9 [ 853.533181][ T8558] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 853.553467][ T8558] RSP: 002b:00007f6f41d190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 853.561920][ T8558] RAX: ffffffffffffffda RBX: 00007f6f42ab5f80 RCX: 00007f6f42996ae9 [ 853.569915][ T8558] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 853.577920][ T8558] RBP: 00007f6f41d19120 R08: 0000000000000000 R09: 0000000000000000 [ 853.586058][ T8558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.594152][ T8558] R13: 000000000000000b R14: 00007f6f42ab5f80 R15: 00007ffc381e1498 [ 853.602149][ T8558] [ 853.618169][ T8558] bond56 (unregistering): (slave batadv81): Releasing backup interface [ 853.644773][ T8558] bond56 (unregistering): Released all slaves [ 853.654509][ T8573] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 853.676334][ T8574] 8021q: adding VLAN 0 to HW filter on device batadv232 [ 853.684705][ T8574] bond71: (slave batadv232): Enslaving as a backup interface with an up link [ 853.701704][ T8573] bond71 (unregistering): (slave batadv232): Releasing backup interface [ 853.724775][ T8573] bond71 (unregistering): Released all slaves [ 854.966049][ T21] usb usb6-port1: attempt power cycle 15:26:16 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getnetconf={0x14, 0x52, 0x200, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) 15:26:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) r1 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r1, 0x8208200) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0xf5}, @val={0x1, 0x3, 0x400, 0x3, 0xde7, 0x7}, @mpls={[{0x3, 0x0, 0x1}, {0xff801}], @ipv4=@tipc={{0x16, 0x4, 0x0, 0x2b, 0x83, 0x64, 0x0, 0x5, 0x6, 0x0, @local, @rand_addr=0x64010101, {[@timestamp={0x44, 0x18, 0x26, 0x0, 0x2, [0x2, 0x800, 0x9, 0x7ff, 0x8fc]}, @timestamp={0x44, 0x14, 0x53, 0x0, 0x9, [0x6, 0xfffff539, 0x4, 0x3]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @rr={0x7, 0xf, 0xf0, [@rand_addr=0x64010102, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, @payload_named={{{{{0x2b, 0x0, 0x1, 0x0, 0x0, 0xa, 0x1, 0x2, 0x31f, 0x0, 0x3, 0x4, 0x3, 0x2, 0x3, 0x4, 0x4, 0x4e22, 0x4e23}, 0x0, 0x1}, 0x0, 0x3}}, [0x0, 0x0, 0x0]}}}}, 0x99) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) 15:26:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 6) 15:26:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x1200, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:26:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = inotify_init1(0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = memfd_create(0x0, 0x0) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) dup3(r2, r3, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x80000) 15:26:16 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/461]}, 0x245) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) [ 856.935750][ T21] usb usb6-port1: unable to enumerate USB device [ 856.951353][ T8579] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 856.968571][ T8585] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:26:16 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getnetconf={0x14, 0x52, 0x200, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) 15:26:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xffffffffffffffff) [ 856.988289][ T8588] syzkaller1: entered promiscuous mode [ 856.993879][ T8588] syzkaller1: entered allmulticast mode [ 857.002424][ T8581] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 857.041224][ T8585] 8021q: adding VLAN 0 to HW filter on device batadv82 [ 857.053522][ T8585] bond56: (slave batadv82): Enslaving as a backup interface with an up link [ 857.069640][ T8581] 8021q: adding VLAN 0 to HW filter on device batadv233 [ 857.078330][ T8581] bond71: (slave batadv233): Enslaving as a backup interface with an up link [ 857.091399][ T8598] FAULT_INJECTION: forcing a failure. [ 857.091399][ T8598] name failslab, interval 1, probability 0, space 0, times 0 [ 857.104162][ T8598] CPU: 1 PID: 8598 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 857.114520][ T8598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 857.124679][ T8598] Call Trace: [ 857.127977][ T8598] [ 857.130927][ T8598] dump_stack_lvl+0xda/0x130 [ 857.135629][ T8598] dump_stack+0x15/0x20 [ 857.139814][ T8598] should_fail_ex+0x21f/0x230 [ 857.144506][ T8598] ? netdevice_event+0x2b6/0x610 [ 857.149509][ T8598] __should_failslab+0x92/0xa0 [ 857.154302][ T8598] should_failslab+0x9/0x20 [ 857.158969][ T8598] slab_pre_alloc_hook+0x38/0x180 [ 857.164064][ T8598] ? netdevice_event+0x2b6/0x610 [ 857.169023][ T8598] __kmem_cache_alloc_node+0x48/0x1d0 [ 857.174504][ T8598] ? netdevice_event+0x2b6/0x610 [ 857.179472][ T8598] kmalloc_trace+0x2a/0xa0 [ 857.183936][ T8598] netdevice_event+0x2b6/0x610 [ 857.188825][ T8598] ? _raw_spin_lock_irqsave+0x3c/0xa0 [ 857.194237][ T8598] ? _raw_spin_unlock_irqrestore+0x2b/0x50 [ 857.200090][ T8598] ? netdevice_event+0x610/0x610 [ 857.205071][ T8598] ? rdma_roce_rescan_device+0x30/0x30 [ 857.210627][ T8598] ? cfg802154_netdev_notifier_call+0xa1/0x3b0 [ 857.216864][ T8598] ? inet6addr_event+0xa0/0xa0 [ 857.221663][ T8598] raw_notifier_call_chain+0x6b/0x1c0 [ 857.227089][ T8598] unregister_netdevice_many_notify+0x873/0x1070 [ 857.233480][ T8598] ? unregister_netdevice_queue+0x116/0x200 15:26:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xffffffffffffffff) [ 857.239454][ T8598] ? list_netdevice+0x2a0/0x2a0 [ 857.244427][ T8598] rtnl_dellink+0x384/0x580 [ 857.248987][ T8598] ? __list_del_entry_valid+0x5f/0xe0 [ 857.254463][ T8598] ? _raw_spin_unlock+0x26/0x40 [ 857.259413][ T8598] ? __mutex_lock+0x21c/0x8d0 [ 857.264125][ T8598] ? rtnl_newlink+0x1600/0x1600 [ 857.269066][ T8598] rtnetlink_rcv_msg+0x807/0x8c0 [ 857.274137][ T8598] ? slab_post_alloc_hook+0x8c/0x340 [ 857.279544][ T8598] ? kmem_cache_free+0x1db/0x3a0 [ 857.284545][ T8598] ? kmem_cache_alloc+0x10f/0x220 [ 857.289615][ T8598] ? kmem_cache_free+0x1db/0x3a0 [ 857.294745][ T8598] ? __kfree_skb+0x104/0x140 [ 857.299397][ T8598] ? nlmon_xmit+0x4b/0x60 [ 857.303777][ T8598] ? __kfree_skb+0x104/0x140 [ 857.308402][ T8598] ? consume_skb+0x57/0x180 [ 857.313044][ T8598] ? nlmon_xmit+0x4b/0x60 [ 857.317450][ T8598] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 857.322847][ T8598] ? ref_tracker_free+0x3a1/0x400 [ 857.327885][ T8598] ? __dev_queue_xmit+0xabb/0x1d10 [ 857.333076][ T8598] netlink_rcv_skb+0x126/0x220 [ 857.337955][ T8598] ? rtnetlink_bind+0x60/0x60 [ 857.342757][ T8598] rtnetlink_rcv+0x1c/0x20 [ 857.347254][ T8598] netlink_unicast+0x56f/0x640 [ 857.352116][ T8598] netlink_sendmsg+0x665/0x770 [ 857.356974][ T8598] ? netlink_getsockopt+0x3e0/0x3e0 [ 857.362234][ T8598] ____sys_sendmsg+0x37c/0x4d0 [ 857.367185][ T8598] __sys_sendmsg+0x1e9/0x270 [ 857.371902][ T8598] __x64_sys_sendmsg+0x46/0x50 [ 857.376717][ T8598] do_syscall_64+0x41/0xc0 [ 857.381185][ T8598] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 857.387246][ T8598] RIP: 0033:0x7f6f42996ae9 [ 857.391755][ T8598] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 857.411403][ T8598] RSP: 002b:00007f6f41cf80c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 857.419917][ T8598] RAX: ffffffffffffffda RBX: 00007f6f42ab6050 RCX: 00007f6f42996ae9 [ 857.427977][ T8598] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 15:26:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xffffffffffffffff) [ 857.435967][ T8598] RBP: 00007f6f41cf8120 R08: 0000000000000000 R09: 0000000000000000 [ 857.443980][ T8598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.452037][ T8598] R13: 000000000000006e R14: 00007f6f42ab6050 R15: 00007ffc381e1498 [ 857.460115][ T8598] [ 857.471094][ T8598] bond56 (unregistering): (slave batadv82): Releasing backup interface 15:26:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000080)) r2 = socket(0x10, 0x803, 0x0) sendto$inet(r2, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="585937609cfd9804310f22c0cda7ef4c1bee1129cc3deee55440ecef3441e29033d865f491be50ae2db3e61f9fa57f002c52823ac646df476384c827c887c479ed8ec5f0082ccb1b76af852a3de0952e027f18d862d1bcc0dc6f55a45088598bec2ceaf618df0394aa2281a16eedcafbd80fa91d60c40f23ab29eca31ccf851f748e38e3e884beed06207c657012cabd4a33115c578f4a3e22394cc3bee9be13b6f59b6d29efc60bb6be847a8cb20caac9c6238579246a1a3d14b00bf3104f597367261ba9c0", 0xc6}], 0x1000000000000386) 15:26:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 7) 15:26:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000080)) r2 = socket(0x10, 0x803, 0x0) sendto$inet(r2, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="585937609cfd9804310f22c0cda7ef4c1bee1129cc3deee55440ecef3441e29033d865f491be50ae2db3e61f9fa57f002c52823ac646df476384c827c887c479ed8ec5f0082ccb1b76af852a3de0952e027f18d862d1bcc0dc6f55a45088598bec2ceaf618df0394aa2281a16eedcafbd80fa91d60c40f23ab29eca31ccf851f748e38e3e884beed06207c657012cabd4a33115c578f4a3e22394cc3bee9be13b6f59b6d29efc60bb6be847a8cb20caac9c6238579246a1a3d14b00bf3104f597367261ba9c0", 0xc6}], 0x1000000000000386) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600201, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) (async) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000080)) (async) socket(0x10, 0x803, 0x0) (async) sendto$inet(r2, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="585937609cfd9804310f22c0cda7ef4c1bee1129cc3deee55440ecef3441e29033d865f491be50ae2db3e61f9fa57f002c52823ac646df476384c827c887c479ed8ec5f0082ccb1b76af852a3de0952e027f18d862d1bcc0dc6f55a45088598bec2ceaf618df0394aa2281a16eedcafbd80fa91d60c40f23ab29eca31ccf851f748e38e3e884beed06207c657012cabd4a33115c578f4a3e22394cc3bee9be13b6f59b6d29efc60bb6be847a8cb20caac9c6238579246a1a3d14b00bf3104f597367261ba9c0", 0xc6}], 0x1000000000000386) (async) [ 857.492488][ T8598] bond56 (unregistering): Released all slaves [ 857.504443][ T8581] bond71 (unregistering): (slave batadv233): Releasing backup interface [ 857.524850][ T8581] bond71 (unregistering): Released all slaves 15:26:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x2000, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:26:17 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600201, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000080)) r2 = socket(0x10, 0x803, 0x0) sendto$inet(r2, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="585937609cfd9804310f22c0cda7ef4c1bee1129cc3deee55440ecef3441e29033d865f491be50ae2db3e61f9fa57f002c52823ac646df476384c827c887c479ed8ec5f0082ccb1b76af852a3de0952e027f18d862d1bcc0dc6f55a45088598bec2ceaf618df0394aa2281a16eedcafbd80fa91d60c40f23ab29eca31ccf851f748e38e3e884beed06207c657012cabd4a33115c578f4a3e22394cc3bee9be13b6f59b6d29efc60bb6be847a8cb20caac9c6238579246a1a3d14b00bf3104f597367261ba9c0", 0xc6}], 0x1000000000000386) (async) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="585937609cfd9804310f22c0cda7ef4c1bee1129cc3deee55440ecef3441e29033d865f491be50ae2db3e61f9fa57f002c52823ac646df476384c827c887c479ed8ec5f0082ccb1b76af852a3de0952e027f18d862d1bcc0dc6f55a45088598bec2ceaf618df0394aa2281a16eedcafbd80fa91d60c40f23ab29eca31ccf851f748e38e3e884beed06207c657012cabd4a33115c578f4a3e22394cc3bee9be13b6f59b6d29efc60bb6be847a8cb20caac9c6238579246a1a3d14b00bf3104f597367261ba9c0", 0xc6}], 0x1000000000000386) [ 857.585082][ T8613] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 857.616402][ T8613] 8021q: adding VLAN 0 to HW filter on device batadv83 [ 857.624686][ T8613] bond56: (slave batadv83): Enslaving as a backup interface with an up link 15:26:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) [ 857.633717][ T8627] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 857.663037][ T8613] FAULT_INJECTION: forcing a failure. [ 857.663037][ T8613] name failslab, interval 1, probability 0, space 0, times 0 [ 857.675780][ T8613] CPU: 1 PID: 8613 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 857.686180][ T8613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 857.696256][ T8613] Call Trace: [ 857.699595][ T8613] [ 857.702583][ T8613] dump_stack_lvl+0xda/0x130 [ 857.707250][ T8613] dump_stack+0x15/0x20 [ 857.711474][ T8613] should_fail_ex+0x21f/0x230 [ 857.716178][ T8613] __should_failslab+0x92/0xa0 [ 857.721010][ T8613] should_failslab+0x9/0x20 [ 857.725548][ T8613] slab_pre_alloc_hook+0x38/0x180 [ 857.730613][ T8613] kmem_cache_alloc_node+0x54/0x240 [ 857.735846][ T8613] ? __alloc_skb+0x109/0x2e0 [ 857.740543][ T8613] __alloc_skb+0x109/0x2e0 [ 857.745010][ T8613] inet_netconf_notify_devconf+0x15a/0x210 [ 857.750858][ T8613] inetdev_event+0x648/0xaf0 [ 857.755522][ T8613] ? netdevice_event+0x610/0x610 [ 857.760487][ T8613] ? rdma_roce_rescan_device+0x30/0x30 [ 857.766042][ T8613] ? arp_seq_show+0x5b0/0x5b0 [ 857.770736][ T8613] ? ipv4_doint_and_flush+0xc0/0xc0 [ 857.775960][ T8613] raw_notifier_call_chain+0x6b/0x1c0 [ 857.781444][ T8613] unregister_netdevice_many_notify+0x873/0x1070 [ 857.787849][ T8613] ? unregister_netdevice_queue+0x116/0x200 [ 857.793767][ T8613] ? list_netdevice+0x2a0/0x2a0 [ 857.798767][ T8613] rtnl_dellink+0x384/0x580 [ 857.803435][ T8613] ? __list_del_entry_valid+0x5f/0xe0 [ 857.808845][ T8613] ? _raw_spin_unlock+0x26/0x40 [ 857.813777][ T8613] ? __mutex_lock+0x21c/0x8d0 [ 857.818555][ T8613] ? rtnl_newlink+0x1600/0x1600 [ 857.823435][ T8613] rtnetlink_rcv_msg+0x807/0x8c0 [ 857.828442][ T8613] ? slab_post_alloc_hook+0x8c/0x340 15:26:17 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = inotify_init1(0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = memfd_create(0x0, 0x0) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) dup3(r2, r3, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x80040) [ 857.833777][ T8613] ? kmem_cache_alloc+0x10f/0x220 [ 857.838933][ T8613] ? xas_load+0x37c/0x390 [ 857.843324][ T8613] ? skb_release_data+0x542/0x560 [ 857.848381][ T8613] ? kmem_cache_free+0x1db/0x3a0 [ 857.853411][ T8613] ? __kfree_skb+0x104/0x140 [ 857.858068][ T8613] ? nlmon_xmit+0x4b/0x60 [ 857.862447][ T8613] ? __kfree_skb+0x104/0x140 [ 857.867075][ T8613] ? consume_skb+0x57/0x180 [ 857.871657][ T8613] ? nlmon_xmit+0x4b/0x60 [ 857.876011][ T8613] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 857.881329][ T8613] ? ref_tracker_free+0x3a1/0x400 [ 857.886382][ T8613] ? __dev_queue_xmit+0xabb/0x1d10 [ 857.891524][ T8613] netlink_rcv_skb+0x126/0x220 [ 857.896336][ T8613] ? rtnetlink_bind+0x60/0x60 [ 857.901076][ T8613] rtnetlink_rcv+0x1c/0x20 [ 857.905531][ T8613] netlink_unicast+0x56f/0x640 [ 857.910291][ T8639] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 857.910379][ T8613] netlink_sendmsg+0x665/0x770 [ 857.923355][ T8613] ? netlink_getsockopt+0x3e0/0x3e0 [ 857.928638][ T8613] ____sys_sendmsg+0x37c/0x4d0 [ 857.933449][ T8613] __sys_sendmsg+0x1e9/0x270 [ 857.938113][ T8613] __x64_sys_sendmsg+0x46/0x50 [ 857.942966][ T8613] do_syscall_64+0x41/0xc0 [ 857.947408][ T8613] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 857.953338][ T8613] RIP: 0033:0x7f6f42996ae9 [ 857.957788][ T8613] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 857.977418][ T8613] RSP: 002b:00007f6f41d190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 857.985990][ T8613] RAX: ffffffffffffffda RBX: 00007f6f42ab5f80 RCX: 00007f6f42996ae9 [ 857.994037][ T8613] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 858.002028][ T8613] RBP: 00007f6f41d19120 R08: 0000000000000000 R09: 0000000000000000 [ 858.010005][ T8613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.017995][ T8613] R13: 000000000000000b R14: 00007f6f42ab5f80 R15: 00007ffc381e1498 [ 858.025989][ T8613] [ 858.033160][ T8613] bond56 (unregistering): (slave batadv83): Releasing backup interface [ 858.055099][ T8613] bond56 (unregistering): Released all slaves [ 858.071593][ T8633] 8021q: adding VLAN 0 to HW filter on device batadv234 [ 858.079963][ T8633] bond71: (slave batadv234): Enslaving as a backup interface with an up link 15:26:18 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000f38bb23dd23f44100000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff010000001d00000000000000000065727370616e300000000000000000006272696467653000400000000000bb976768aefd37190000b43b24af61af8e2f000000000000000065716c00000000000000000000000000ffffffffffff000000000000aaaaaaaaaa000000000000000000a000000010010000380100006d61726b5f6d00000000000000000000000000000000000000000000000000000c0000000400000001000000000100006e666c6f670000000000000000000000000000000000000000000000000000004c0000006d8000000900090000000000b80eba8ec4468a05f7d0c08be35638ee0eed5dd9119d918668afa6c019b085be3837595dc113ccf27499f7202a2b59394b26193cf57ec99b9abb99943198532b0b7bdd0f61e5726564697265637400"/461]}, 0x245) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) [ 858.174252][ T8641] syzkaller1: entered promiscuous mode [ 858.179802][ T8641] syzkaller1: entered allmulticast mode [ 858.925810][ T3187] usb usb6-port1: attempt power cycle 15:26:20 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getnetconf={0x14, 0x52, 0x200, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) 15:26:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x2400, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:26:20 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) 15:26:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 8) 15:26:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = inotify_init1(0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = memfd_create(0x0, 0x0) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) dup3(r2, r3, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x200000) 15:26:20 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/461]}, 0x245) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) [ 860.885773][ T3187] usb usb6-port1: unable to enumerate USB device 15:26:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) [ 860.944876][ T8651] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 860.952840][ T8646] syzkaller1: entered promiscuous mode [ 860.958697][ T8646] syzkaller1: entered allmulticast mode [ 860.970147][ T8653] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 860.990585][ T8652] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 861.012572][ T8653] 8021q: adding VLAN 0 to HW filter on device batadv235 [ 861.021063][ T8653] bond72: (slave batadv235): Enslaving as a backup interface with an up link 15:26:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r1, 0x8208200) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) r3 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r3, 0x8208200) openat$cgroup_ro(r3, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) [ 861.040433][ T8652] 8021q: adding VLAN 0 to HW filter on device batadv84 [ 861.048863][ T8652] bond56: (slave batadv84): Enslaving as a backup interface with an up link [ 861.061771][ T8652] bond56 (unregistering): (slave batadv84): Releasing backup interface [ 861.083883][ T8652] bond56 (unregistering): Released all slaves 15:26:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 9) [ 861.098026][ T8653] bond72 (unregistering): (slave batadv235): Releasing backup interface [ 861.119068][ T8653] bond72 (unregistering): Released all slaves 15:26:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x2500, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 861.146156][ T8666] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:26:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r1, 0x8208200) (async) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async, rerun: 64) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) (async, rerun: 32) r3 = creat(&(0x7f0000000440)='./bus\x00', 0x0) (rerun: 32) ftruncate(r3, 0x8208200) (async) openat$cgroup_ro(r3, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) [ 861.205717][ T8669] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 861.229778][ T8670] 8021q: adding VLAN 0 to HW filter on device batadv85 [ 861.238335][ T8670] bond56: (slave batadv85): Enslaving as a backup interface with an up link [ 861.259120][ T8669] 8021q: adding VLAN 0 to HW filter on device batadv236 [ 861.268953][ T8669] bond72: (slave batadv236): Enslaving as a backup interface with an up link [ 861.279332][ T8666] FAULT_INJECTION: forcing a failure. [ 861.279332][ T8666] name failslab, interval 1, probability 0, space 0, times 0 [ 861.292145][ T8666] CPU: 0 PID: 8666 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 861.302535][ T8666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 861.312681][ T8666] Call Trace: [ 861.315994][ T8666] [ 861.319085][ T8666] dump_stack_lvl+0xda/0x130 [ 861.323722][ T8666] dump_stack+0x15/0x20 [ 861.327916][ T8666] should_fail_ex+0x21f/0x230 [ 861.332651][ T8666] __should_failslab+0x92/0xa0 [ 861.337441][ T8666] should_failslab+0x9/0x20 [ 861.342025][ T8666] slab_pre_alloc_hook+0x38/0x180 [ 861.347117][ T8666] kmem_cache_alloc_node+0x54/0x240 [ 861.352449][ T8666] ? __alloc_skb+0x109/0x2e0 [ 861.357099][ T8666] __alloc_skb+0x109/0x2e0 [ 861.361551][ T8666] inet6_netconf_notify_devconf+0xfc/0x1b0 [ 861.367474][ T8666] addrconf_ifdown+0xd7f/0xf10 [ 861.372281][ T8666] ? __rcu_read_unlock+0x4d/0x70 [ 861.377264][ T8666] addrconf_notify+0x310/0x980 [ 861.382047][ T8666] ? ip6mr_device_event+0x12f/0x150 [ 861.387331][ T8666] ? dev_forward_change+0x560/0x560 [ 861.392542][ T8666] raw_notifier_call_chain+0x6b/0x1c0 [ 861.397958][ T8666] unregister_netdevice_many_notify+0x873/0x1070 [ 861.404397][ T8666] ? unregister_netdevice_queue+0x116/0x200 [ 861.410472][ T8666] ? list_netdevice+0x2a0/0x2a0 [ 861.415359][ T8666] rtnl_dellink+0x384/0x580 [ 861.419906][ T8666] ? __list_del_entry_valid+0x5f/0xe0 [ 861.425320][ T8666] ? _raw_spin_unlock+0x26/0x40 [ 861.430249][ T8666] ? __mutex_lock+0x21c/0x8d0 [ 861.434954][ T8666] ? rtnl_newlink+0x1600/0x1600 [ 861.439910][ T8666] rtnetlink_rcv_msg+0x807/0x8c0 [ 861.444984][ T8666] ? slab_post_alloc_hook+0x8c/0x340 [ 861.450308][ T8666] ? xas_load+0x37c/0x390 [ 861.454676][ T8666] ? skb_release_data+0x542/0x560 [ 861.459788][ T8666] ? kmem_cache_free+0x1db/0x3a0 [ 861.464772][ T8666] ? __kfree_skb+0x104/0x140 [ 861.469448][ T8666] ? nlmon_xmit+0x4b/0x60 [ 861.473803][ T8666] ? __kfree_skb+0x104/0x140 [ 861.478459][ T8666] ? consume_skb+0x57/0x180 [ 861.483049][ T8666] ? nlmon_xmit+0x4b/0x60 [ 861.487455][ T8666] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 861.492760][ T8666] ? ref_tracker_free+0x3a1/0x400 [ 861.497870][ T8666] ? __dev_queue_xmit+0xabb/0x1d10 [ 861.503027][ T8666] netlink_rcv_skb+0x126/0x220 [ 861.507856][ T8666] ? rtnetlink_bind+0x60/0x60 [ 861.512586][ T8666] rtnetlink_rcv+0x1c/0x20 [ 861.517113][ T8666] netlink_unicast+0x56f/0x640 [ 861.521952][ T8666] netlink_sendmsg+0x665/0x770 [ 861.526794][ T8666] ? netlink_getsockopt+0x3e0/0x3e0 [ 861.532055][ T8666] ____sys_sendmsg+0x37c/0x4d0 [ 861.536874][ T8666] __sys_sendmsg+0x1e9/0x270 [ 861.541548][ T8666] __x64_sys_sendmsg+0x46/0x50 [ 861.546345][ T8666] do_syscall_64+0x41/0xc0 [ 861.550909][ T8666] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 861.556872][ T8666] RIP: 0033:0x7f6f42996ae9 [ 861.561300][ T8666] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 861.580962][ T8666] RSP: 002b:00007f6f41d190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 861.589392][ T8666] RAX: ffffffffffffffda RBX: 00007f6f42ab5f80 RCX: 00007f6f42996ae9 [ 861.597418][ T8666] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 15:26:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async, rerun: 32) r1 = creat(&(0x7f0000000440)='./bus\x00', 0x0) (rerun: 32) ftruncate(r1, 0x8208200) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) (async) r3 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r3, 0x8208200) (async, rerun: 32) openat$cgroup_ro(r3, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) (rerun: 32) [ 861.605426][ T8666] RBP: 00007f6f41d19120 R08: 0000000000000000 R09: 0000000000000000 [ 861.613465][ T8666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 861.621451][ T8666] R13: 000000000000000b R14: 00007f6f42ab5f80 R15: 00007ffc381e1498 [ 861.629450][ T8666] [ 861.645168][ T8666] bond56 (unregistering): (slave batadv85): Releasing backup interface [ 861.667543][ T8666] bond56 (unregistering): Released all slaves [ 861.683677][ T8669] bond72 (unregistering): (slave batadv236): Releasing backup interface [ 861.704335][ T8669] bond72 (unregistering): Released all slaves [ 863.035742][ T3187] usb usb6-port1: attempt power cycle 15:26:24 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto$inet(r0, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r1, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x40, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24040001}, 0x80) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) 15:26:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 10) 15:26:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x9300}, @val={0x1, 0x1, 0x6, 0x0, 0x1, 0x7}, @ipv4=@icmp={{0x19, 0x4, 0x2, 0x9, 0xef, 0x68, 0x0, 0x4, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @rand_addr=0x64010101, {[@generic={0x86, 0x10, "06e93d8ad98796909aa9e3ebd5ee"}, @rr={0x7, 0x1b, 0x3d, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x36}, @empty, @dev={0xac, 0x14, 0x14, 0x2e}, @local, @empty]}, @end, @end, @timestamp={0x44, 0x20, 0xe5, 0x0, 0x1, [0x3, 0x2, 0x7a, 0x5, 0x2, 0x4, 0x97a]}]}}, @dest_unreach={0x3, 0xb, 0x0, 0x0, 0x3, 0x7, {0x20, 0x4, 0x3, 0xa, 0x6, 0x68, 0x7, 0x7f, 0x21, 0xcf32, @loopback, @dev={0xac, 0x14, 0x14, 0x33}, {[@ra={0x94, 0x4}, @cipso={0x86, 0x44, 0xffffffffffffffff, [{0x2, 0xd, "4bdb374a5aa82a4b726898"}, {0x0, 0xe, "23b8867747b2fad1fbe68ebc"}, {0x1, 0xa, "f8fbe36e6721e17f"}, {0x1, 0xf, "b33a1b18afc8a08c274f6ec100"}, {0x5, 0xa, "2577c59e9b078073"}]}, @rr={0x7, 0x7, 0x91, [@multicast2]}, @timestamp={0x44, 0x10, 0xe9, 0x0, 0x5, [0x0, 0x0, 0x22]}, @timestamp={0x44, 0xc, 0x4b, 0x0, 0x6, [0x7, 0xe9]}, @noop]}}, "34dbe3"}}}, 0xfd) r1 = socket(0x10, 0x803, 0x0) sendto$inet(r1, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) dup2(r0, r1) 15:26:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = inotify_init1(0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = memfd_create(0x0, 0x0) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) dup3(r2, r3, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x400000) 15:26:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x2be4, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:26:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x247) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) [ 864.995820][ T3187] usb usb6-port1: unable to enumerate USB device 15:26:25 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x9300}, @val={0x1, 0x1, 0x6, 0x0, 0x1, 0x7}, @ipv4=@icmp={{0x19, 0x4, 0x2, 0x9, 0xef, 0x68, 0x0, 0x4, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @rand_addr=0x64010101, {[@generic={0x86, 0x10, "06e93d8ad98796909aa9e3ebd5ee"}, @rr={0x7, 0x1b, 0x3d, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x36}, @empty, @dev={0xac, 0x14, 0x14, 0x2e}, @local, @empty]}, @end, @end, @timestamp={0x44, 0x20, 0xe5, 0x0, 0x1, [0x3, 0x2, 0x7a, 0x5, 0x2, 0x4, 0x97a]}]}}, @dest_unreach={0x3, 0xb, 0x0, 0x0, 0x3, 0x7, {0x20, 0x4, 0x3, 0xa, 0x6, 0x68, 0x7, 0x7f, 0x21, 0xcf32, @loopback, @dev={0xac, 0x14, 0x14, 0x33}, {[@ra={0x94, 0x4}, @cipso={0x86, 0x44, 0xffffffffffffffff, [{0x2, 0xd, "4bdb374a5aa82a4b726898"}, {0x0, 0xe, "23b8867747b2fad1fbe68ebc"}, {0x1, 0xa, "f8fbe36e6721e17f"}, {0x1, 0xf, "b33a1b18afc8a08c274f6ec100"}, {0x5, 0xa, "2577c59e9b078073"}]}, @rr={0x7, 0x7, 0x91, [@multicast2]}, @timestamp={0x44, 0x10, 0xe9, 0x0, 0x5, [0x0, 0x0, 0x22]}, @timestamp={0x44, 0xc, 0x4b, 0x0, 0x6, [0x7, 0xe9]}, @noop]}}, "34dbe3"}}}, 0xfd) r1 = socket(0x10, 0x803, 0x0) sendto$inet(r1, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) (async) sendto$inet(r1, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) dup2(r0, r1) [ 865.036928][ T8691] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 865.038366][ T8694] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 865.065442][ T8693] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:26:25 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto$inet(r0, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r1, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x40, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24040001}, 0x80) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) [ 865.096704][ T8693] 8021q: adding VLAN 0 to HW filter on device batadv86 [ 865.113302][ T8693] bond56: (slave batadv86): Enslaving as a backup interface with an up link [ 865.131299][ T8691] 8021q: adding VLAN 0 to HW filter on device batadv237 [ 865.140140][ T8691] bond72: (slave batadv237): Enslaving as a backup interface with an up link [ 865.149249][ T8698] syzkaller1: entered promiscuous mode [ 865.154754][ T8698] syzkaller1: entered allmulticast mode [ 865.166468][ T8693] bond56 (unregistering): (slave batadv86): Releasing backup interface [ 865.187801][ T8693] bond56 (unregistering): Released all slaves 15:26:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x9300}, @val={0x1, 0x1, 0x6, 0x0, 0x1, 0x7}, @ipv4=@icmp={{0x19, 0x4, 0x2, 0x9, 0xef, 0x68, 0x0, 0x4, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @rand_addr=0x64010101, {[@generic={0x86, 0x10, "06e93d8ad98796909aa9e3ebd5ee"}, @rr={0x7, 0x1b, 0x3d, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x36}, @empty, @dev={0xac, 0x14, 0x14, 0x2e}, @local, @empty]}, @end, @end, @timestamp={0x44, 0x20, 0xe5, 0x0, 0x1, [0x3, 0x2, 0x7a, 0x5, 0x2, 0x4, 0x97a]}]}}, @dest_unreach={0x3, 0xb, 0x0, 0x0, 0x3, 0x7, {0x20, 0x4, 0x3, 0xa, 0x6, 0x68, 0x7, 0x7f, 0x21, 0xcf32, @loopback, @dev={0xac, 0x14, 0x14, 0x33}, {[@ra={0x94, 0x4}, @cipso={0x86, 0x44, 0xffffffffffffffff, [{0x2, 0xd, "4bdb374a5aa82a4b726898"}, {0x0, 0xe, "23b8867747b2fad1fbe68ebc"}, {0x1, 0xa, "f8fbe36e6721e17f"}, {0x1, 0xf, "b33a1b18afc8a08c274f6ec100"}, {0x5, 0xa, "2577c59e9b078073"}]}, @rr={0x7, 0x7, 0x91, [@multicast2]}, @timestamp={0x44, 0x10, 0xe9, 0x0, 0x5, [0x0, 0x0, 0x22]}, @timestamp={0x44, 0xc, 0x4b, 0x0, 0x6, [0x7, 0xe9]}, @noop]}}, "34dbe3"}}}, 0xfd) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendto$inet(r1, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) dup2(r0, r1) 15:26:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 11) [ 865.200486][ T8706] bond72 (unregistering): (slave batadv237): Releasing backup interface [ 865.221991][ T8706] bond72 (unregistering): Released all slaves 15:26:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x90, 0x9, 0x4, 0x5, 0x0, 0xffffffff80000000, 0x10, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x2, 0xffffffffffffff4c}, 0x80200, 0x6, 0x3, 0x4, 0x8, 0x6, 0x401, 0x0, 0xa9, 0x0, 0x9}, 0x0, 0x6, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) 15:26:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x2be5, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:26:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x90, 0x9, 0x4, 0x5, 0x0, 0xffffffff80000000, 0x10, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x2, 0xffffffffffffff4c}, 0x80200, 0x6, 0x3, 0x4, 0x8, 0x6, 0x401, 0x0, 0xa9, 0x0, 0x9}, 0x0, 0x6, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x90, 0x9, 0x4, 0x5, 0x0, 0xffffffff80000000, 0x10, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x2, 0xffffffffffffff4c}, 0x80200, 0x6, 0x3, 0x4, 0x8, 0x6, 0x401, 0x0, 0xa9, 0x0, 0x9}, 0x0, 0x6, 0xffffffffffffffff, 0x9) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) [ 865.270690][ T8711] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 865.333607][ T8711] 8021q: adding VLAN 0 to HW filter on device batadv87 [ 865.342267][ T8711] bond56: (slave batadv87): Enslaving as a backup interface with an up link [ 865.352755][ T8718] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 865.371586][ T8711] FAULT_INJECTION: forcing a failure. [ 865.371586][ T8711] name failslab, interval 1, probability 0, space 0, times 0 [ 865.384378][ T8711] CPU: 1 PID: 8711 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 865.394865][ T8711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 865.405065][ T8711] Call Trace: [ 865.408370][ T8711] [ 865.411316][ T8711] dump_stack_lvl+0xda/0x130 [ 865.415939][ T8711] dump_stack+0x15/0x20 [ 865.420136][ T8711] should_fail_ex+0x21f/0x230 [ 865.424843][ T8711] __should_failslab+0x92/0xa0 [ 865.429674][ T8711] should_failslab+0x9/0x20 [ 865.434367][ T8711] slab_pre_alloc_hook+0x38/0x180 [ 865.439429][ T8711] kmem_cache_alloc_node+0x54/0x240 [ 865.444653][ T8711] ? __alloc_skb+0x109/0x2e0 [ 865.449288][ T8711] __alloc_skb+0x109/0x2e0 [ 865.453769][ T8711] mpls_netconf_notify_devconf+0x42/0xf0 [ 865.459437][ T8711] mpls_dev_sysctl_unregister+0x6b/0x80 [ 865.465552][ T8711] ? mpls_egress+0x390/0x390 [ 865.470272][ T8711] mpls_dev_notify+0x7d4/0x8e0 [ 865.475163][ T8711] ? batadv_hard_if_event+0xd9b/0x10c0 [ 865.480747][ T8711] ? ovs_netdev_get_vport+0x61/0x70 [ 865.486023][ T8711] ? mpls_egress+0x390/0x390 [ 865.490696][ T8711] raw_notifier_call_chain+0x6b/0x1c0 [ 865.496146][ T8711] unregister_netdevice_many_notify+0x873/0x1070 [ 865.502506][ T8711] ? unregister_netdevice_queue+0x116/0x200 [ 865.508475][ T8711] ? list_netdevice+0x2a0/0x2a0 [ 865.513359][ T8711] rtnl_dellink+0x384/0x580 [ 865.517909][ T8711] ? __list_del_entry_valid+0x5f/0xe0 [ 865.523408][ T8711] ? _raw_spin_unlock+0x26/0x40 [ 865.528357][ T8711] ? __mutex_lock+0x21c/0x8d0 [ 865.533167][ T8711] ? rtnl_newlink+0x1600/0x1600 [ 865.538147][ T8711] rtnetlink_rcv_msg+0x807/0x8c0 [ 865.543155][ T8711] ? __rcu_read_unlock+0x4d/0x70 [ 865.548238][ T8711] ? slab_post_alloc_hook+0x8c/0x340 [ 865.553767][ T8711] ? kmem_cache_alloc+0x10f/0x220 [ 865.558828][ T8711] ? xas_load+0x37c/0x390 [ 865.563196][ T8711] ? skb_release_data+0x542/0x560 [ 865.568463][ T8711] ? kmem_cache_free+0x1db/0x3a0 [ 865.573519][ T8711] ? __kfree_skb+0x104/0x140 [ 865.578239][ T8711] ? nlmon_xmit+0x4b/0x60 [ 865.582724][ T8711] ? __kfree_skb+0x104/0x140 [ 865.587355][ T8711] ? consume_skb+0x57/0x180 [ 865.591895][ T8711] ? nlmon_xmit+0x4b/0x60 [ 865.596259][ T8711] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 865.601607][ T8711] ? ref_tracker_free+0x3a1/0x400 [ 865.606647][ T8711] ? __dev_queue_xmit+0xabb/0x1d10 [ 865.611800][ T8711] netlink_rcv_skb+0x126/0x220 [ 865.616602][ T8711] ? rtnetlink_bind+0x60/0x60 [ 865.621363][ T8711] rtnetlink_rcv+0x1c/0x20 [ 865.625827][ T8711] netlink_unicast+0x56f/0x640 [ 865.630694][ T8711] netlink_sendmsg+0x665/0x770 [ 865.635566][ T8711] ? netlink_getsockopt+0x3e0/0x3e0 [ 865.640872][ T8711] ____sys_sendmsg+0x37c/0x4d0 [ 865.645669][ T8711] __sys_sendmsg+0x1e9/0x270 [ 865.650297][ T8711] __x64_sys_sendmsg+0x46/0x50 [ 865.655173][ T8711] do_syscall_64+0x41/0xc0 [ 865.659613][ T8711] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 865.665528][ T8711] RIP: 0033:0x7f6f42996ae9 [ 865.669948][ T8711] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 865.689666][ T8711] RSP: 002b:00007f6f41d190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 865.698188][ T8711] RAX: ffffffffffffffda RBX: 00007f6f42ab5f80 RCX: 00007f6f42996ae9 [ 865.706195][ T8711] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 865.714272][ T8711] RBP: 00007f6f41d19120 R08: 0000000000000000 R09: 0000000000000000 [ 865.722278][ T8711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 15:26:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x90, 0x9, 0x4, 0x5, 0x0, 0xffffffff80000000, 0x10, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x2, 0xffffffffffffff4c}, 0x80200, 0x6, 0x3, 0x4, 0x8, 0x6, 0x401, 0x0, 0xa9, 0x0, 0x9}, 0x0, 0x6, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x90, 0x9, 0x4, 0x5, 0x0, 0xffffffff80000000, 0x10, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x2, 0xffffffffffffff4c}, 0x80200, 0x6, 0x3, 0x4, 0x8, 0x6, 0x401, 0x0, 0xa9, 0x0, 0x9}, 0x0, 0x6, 0xffffffffffffffff, 0x9) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) [ 865.730440][ T8711] R13: 000000000000000b R14: 00007f6f42ab5f80 R15: 00007ffc381e1498 [ 865.738504][ T8711] [ 865.746643][ T8711] bond56 (unregistering): (slave batadv87): Releasing backup interface [ 865.766721][ T8711] bond56 (unregistering): Released all slaves [ 865.791376][ T8718] 8021q: adding VLAN 0 to HW filter on device batadv238 [ 865.804114][ T8718] bond72: (slave batadv238): Enslaving as a backup interface with an up link [ 865.818047][ T8726] bond72 (unregistering): (slave batadv238): Releasing backup interface 15:26:25 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = inotify_init1(0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = memfd_create(0x0, 0x0) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) dup3(r2, r3, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x2000000) 15:26:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 12) 15:26:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x3f00, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 865.846395][ T8726] bond72 (unregistering): Released all slaves [ 865.880073][ T8731] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 865.907177][ T8735] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 865.939332][ T8738] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 15:26:25 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x247) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) 15:26:25 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x4, 0x1) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r1, 0x10, 0x0, 0x1000f4) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000180)) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x7fffffffffffffff, 0x321000) r3 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f00000002c0)={{r0}, {@void, @max}}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x8}, 0x8) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000100)=0x1214) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './bus\x00'}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'xfrm0\x00', 0x800}) open(&(0x7f0000000200)='./file0\x00', 0x20800, 0x201) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000040)=0x1) [ 865.960811][ T8739] 8021q: adding VLAN 0 to HW filter on device batadv88 [ 865.970006][ T8739] bond56: (slave batadv88): Enslaving as a backup interface with an up link [ 865.987650][ T8738] 8021q: adding VLAN 0 to HW filter on device batadv239 [ 865.996249][ T8738] bond72: (slave batadv239): Enslaving as a backup interface with an up link [ 866.007088][ T8735] bond56 (unregistering): (slave batadv88): Releasing backup interface [ 866.027171][ T8735] bond56 (unregistering): Released all slaves [ 866.042934][ T8738] bond72 (unregistering): (slave batadv239): Releasing backup interface [ 866.064313][ T8738] bond72 (unregistering): Released all slaves [ 866.078653][ T8744] syzkaller1: entered promiscuous mode [ 866.084197][ T8744] syzkaller1: entered allmulticast mode [ 867.385783][ T3068] usb usb6-port1: attempt power cycle 15:26:29 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto$inet(r0, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r1, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x40, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24040001}, 0x80) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) 15:26:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 13) 15:26:29 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x4, 0x1) (async) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r1, 0x10, 0x0, 0x1000f4) (async) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000180)) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x7fffffffffffffff, 0x321000) r3 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f00000002c0)={{r0}, {@void, @max}}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x8}, 0x8) (async) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000100)=0x1214) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './bus\x00'}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'xfrm0\x00', 0x800}) (async) open(&(0x7f0000000200)='./file0\x00', 0x20800, 0x201) (async) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000040)=0x1) 15:26:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x4788, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:26:29 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = inotify_init1(0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = memfd_create(0x0, 0x0) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) dup3(r2, r3, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x20000000) 15:26:29 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000f38bb23dd23f44100000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff010000001d00000000000000000065727370616e300000000000000000006272696467653000400000000000bb976768aefd37190000b43b24af61af8e2f000000000000000065716c00000000000000000000000000ffffffffffff000000000000aaaaaaaaaa000000000000000000a000000010010000380100006d61726b5f6d00000000000000000000000000000000000000000000000000000c0000000400000001000000000100006e666c6f670000000000000000000000000000000000000000000000000000004c0000006d8000000900090000000000b80eba8ec4468a05f7d0c08be35638ee0eed5dd9119d918668afa6c019b085be3837595dc113ccf27499f7202a2b59394b26193cf57ec99b9abb99943198532b0b7bdd0f61e5726564697265637400000000000000000000000000000000000000000000000004"]}, 0x247) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) [ 869.365785][ T3068] usb usb6-port1: unable to enumerate USB device [ 869.392101][ T8752] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 869.393420][ T8753] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 869.421095][ T8750] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 869.447697][ T8750] 8021q: adding VLAN 0 to HW filter on device batadv89 [ 869.456734][ T8750] bond56: (slave batadv89): Enslaving as a backup interface with an up link 15:26:29 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x4, 0x1) (async) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r1, 0x10, 0x0, 0x1000f4) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000180)) (async) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x7fffffffffffffff, 0x321000) (async) r3 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f00000002c0)={{r0}, {@void, @max}}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x8}, 0x8) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000100)=0x1214) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './bus\x00'}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'xfrm0\x00', 0x800}) open(&(0x7f0000000200)='./file0\x00', 0x20800, 0x201) (async) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000040)=0x1) [ 869.475413][ T8753] 8021q: adding VLAN 0 to HW filter on device batadv240 [ 869.497433][ T8753] bond72: (slave batadv240): Enslaving as a backup interface with an up link [ 869.508003][ T8750] FAULT_INJECTION: forcing a failure. [ 869.508003][ T8750] name failslab, interval 1, probability 0, space 0, times 0 [ 869.520738][ T8750] CPU: 0 PID: 8750 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 869.531270][ T8750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 869.541583][ T8750] Call Trace: [ 869.544959][ T8750] [ 869.547907][ T8750] dump_stack_lvl+0xda/0x130 [ 869.552539][ T8750] dump_stack+0x15/0x20 [ 869.556748][ T8750] should_fail_ex+0x21f/0x230 [ 869.561459][ T8750] __should_failslab+0x92/0xa0 [ 869.566766][ T8750] should_failslab+0x9/0x20 15:26:29 executing program 3: sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="a879c2dee1f67c1d8557f4a150c33ea0e648d69e6c2c7d29b57d913045b31175704d41185a3fbf2e48422c2d8524bea1ee2701913f287cf379c0813a2955398ecfad87c723a4d74426f2281080a212128bae51ac8ae8db0238bd405c8897464850e87bf9a1f19b27781f7c9f63", 0x6d, 0x40000, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @private0, 0x1}, 0x1c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000140)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000080)=""/119) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'macvtap0\x00', 0x10}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) [ 869.571498][ T8750] slab_pre_alloc_hook+0x38/0x180 [ 869.576611][ T8750] kmem_cache_alloc_node+0x54/0x240 [ 869.581884][ T8750] ? __alloc_skb+0x109/0x2e0 [ 869.586587][ T8750] __alloc_skb+0x109/0x2e0 [ 869.591693][ T8750] rtmsg_ifinfo_build_skb+0x67/0x1b0 [ 869.597016][ T8750] ? nlmsg_parse_deprecated_strict+0xa0/0xa0 [ 869.603228][ T8750] unregister_netdevice_many_notify+0x90a/0x1070 [ 869.610573][ T8750] ? unregister_netdevice_queue+0x116/0x200 [ 869.616690][ T8750] ? list_netdevice+0x2a0/0x2a0 [ 869.621592][ T8750] rtnl_dellink+0x384/0x580 [ 869.626252][ T8750] ? __list_del_entry_valid+0x5f/0xe0 [ 869.631744][ T8750] ? _raw_spin_unlock+0x26/0x40 [ 869.637413][ T8750] ? __mutex_lock+0x21c/0x8d0 [ 869.642817][ T8750] ? rtnl_newlink+0x1600/0x1600 [ 869.647841][ T8750] rtnetlink_rcv_msg+0x807/0x8c0 [ 869.652856][ T8750] ? slab_post_alloc_hook+0x8c/0x340 [ 869.658323][ T8750] ? _raw_spin_unlock_irqrestore+0x19/0x50 [ 869.664281][ T8750] ? xas_load+0x37c/0x390 [ 869.668819][ T8750] ? skb_release_data+0x542/0x560 [ 869.674485][ T8750] ? kmem_cache_free+0x1db/0x3a0 [ 869.679575][ T8750] ? __kfree_skb+0x104/0x140 [ 869.684307][ T8750] ? nlmon_xmit+0x4b/0x60 [ 869.688752][ T8750] ? __kfree_skb+0x104/0x140 [ 869.693623][ T8750] ? consume_skb+0x57/0x180 [ 869.698167][ T8750] ? nlmon_xmit+0x4b/0x60 [ 869.702622][ T8750] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 869.708100][ T8750] ? ref_tracker_free+0x3a1/0x400 [ 869.713227][ T8750] ? __dev_queue_xmit+0xabb/0x1d10 [ 869.718561][ T8750] netlink_rcv_skb+0x126/0x220 [ 869.723515][ T8750] ? rtnetlink_bind+0x60/0x60 [ 869.728231][ T8750] rtnetlink_rcv+0x1c/0x20 [ 869.732756][ T8750] netlink_unicast+0x56f/0x640 [ 869.738860][ T8750] netlink_sendmsg+0x665/0x770 [ 869.743896][ T8750] ? netlink_getsockopt+0x3e0/0x3e0 [ 869.749135][ T8750] ____sys_sendmsg+0x37c/0x4d0 [ 869.754200][ T8750] __sys_sendmsg+0x1e9/0x270 [ 869.759119][ T8750] __x64_sys_sendmsg+0x46/0x50 [ 869.764107][ T8750] do_syscall_64+0x41/0xc0 [ 869.768548][ T8750] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 869.774583][ T8750] RIP: 0033:0x7f6f42996ae9 [ 869.779022][ T8750] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 869.799647][ T8750] RSP: 002b:00007f6f41d190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 869.808133][ T8750] RAX: ffffffffffffffda RBX: 00007f6f42ab5f80 RCX: 00007f6f42996ae9 [ 869.817082][ T8750] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 869.825532][ T8750] RBP: 00007f6f41d19120 R08: 0000000000000000 R09: 0000000000000000 [ 869.834140][ T8750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 869.842476][ T8750] R13: 000000000000000b R14: 00007f6f42ab5f80 R15: 00007ffc381e1498 [ 869.851802][ T8750] [ 869.859897][ T8750] bond56 (unregistering): (slave batadv89): Releasing backup interface [ 869.880645][ T8750] bond56 (unregistering): Released all slaves [ 869.894486][ T8765] bond72 (unregistering): (slave batadv240): Releasing backup interface [ 869.915991][ T8765] bond72 (unregistering): Released all slaves 15:26:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 14) 15:26:29 executing program 3: sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="a879c2dee1f67c1d8557f4a150c33ea0e648d69e6c2c7d29b57d913045b31175704d41185a3fbf2e48422c2d8524bea1ee2701913f287cf379c0813a2955398ecfad87c723a4d74426f2281080a212128bae51ac8ae8db0238bd405c8897464850e87bf9a1f19b27781f7c9f63", 0x6d, 0x40000, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @private0, 0x1}, 0x1c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000140)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000080)=""/119) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'macvtap0\x00', 0x10}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="a879c2dee1f67c1d8557f4a150c33ea0e648d69e6c2c7d29b57d913045b31175704d41185a3fbf2e48422c2d8524bea1ee2701913f287cf379c0813a2955398ecfad87c723a4d74426f2281080a212128bae51ac8ae8db0238bd405c8897464850e87bf9a1f19b27781f7c9f63", 0x6d, 0x40000, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @private0, 0x1}, 0x1c) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) (async) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000140)) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000080)=""/119) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'macvtap0\x00', 0x10}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) 15:26:29 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = inotify_init1(0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = memfd_create(0x0, 0x0) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) dup3(r2, r3, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x40000800) 15:26:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x4800, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 869.926458][ T8766] syzkaller1: entered promiscuous mode [ 869.932022][ T8766] syzkaller1: entered allmulticast mode [ 869.960141][ T8780] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 869.993123][ T8780] 8021q: adding VLAN 0 to HW filter on device batadv90 [ 870.003582][ T8780] bond56: (slave batadv90): Enslaving as a backup interface with an up link [ 870.020880][ T8780] bond56 (unregistering): (slave batadv90): Releasing backup interface [ 870.023673][ T8793] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 870.047082][ T8780] bond56 (unregistering): Released all slaves [ 870.056815][ T8786] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 870.089997][ T8794] 8021q: adding VLAN 0 to HW filter on device batadv241 [ 870.098507][ T8794] bond72: (slave batadv241): Enslaving as a backup interface with an up link [ 870.116885][ T8786] bond72 (unregistering): (slave batadv241): Releasing backup interface [ 870.138161][ T8786] bond72 (unregistering): Released all slaves [ 871.775881][ T3187] usb usb6-port1: attempt power cycle 15:26:33 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x80000001, 0x678802) 15:26:33 executing program 3: sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="a879c2dee1f67c1d8557f4a150c33ea0e648d69e6c2c7d29b57d913045b31175704d41185a3fbf2e48422c2d8524bea1ee2701913f287cf379c0813a2955398ecfad87c723a4d74426f2281080a212128bae51ac8ae8db0238bd405c8897464850e87bf9a1f19b27781f7c9f63", 0x6d, 0x40000, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @private0, 0x1}, 0x1c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000140)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async, rerun: 64) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000080)=""/119) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'macvtap0\x00', 0x10}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) 15:26:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 15) 15:26:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x4888, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:26:33 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x248) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) 15:26:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = inotify_init1(0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = memfd_create(0x0, 0x0) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) dup3(r2, r3, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x80000000000) [ 873.735903][ T3187] usb usb6-port1: unable to enumerate USB device [ 873.768109][ T8800] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 15:26:33 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x80000001, 0x678802) [ 873.786464][ T8806] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 873.818727][ T8800] 8021q: adding VLAN 0 to HW filter on device batadv242 15:26:33 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x80000001, 0x678802) syz_open_dev$usbfs(&(0x7f00000000c0), 0x80000001, 0x678802) (async) [ 873.828011][ T8800] bond72: (slave batadv242): Enslaving as a backup interface with an up link [ 873.837621][ T8803] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 873.860067][ T8802] syzkaller1: entered promiscuous mode [ 873.865875][ T8802] syzkaller1: entered allmulticast mode 15:26:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001240), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x24}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xc}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x40094) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x501600, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x710, 0x0, 0x5, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [{{0x254, 0x1, {{0x1, 0x8}, 0x80, 0xf7, 0x2, 0x8001, 0x15, 'syz1\x00', "fb238c0599fa7bb537123d1c5dc9bd60bc6c7f337441666a51d64ec187b893dd", "c1a00745b393f57499b8b9ab2d28dd1ce019ebdbc30d83aa59e208412664601f", [{0x40, 0xd948, {0x0, 0x7}}, {0x7f, 0x4a1, {0x0, 0x6d1}}, {0x7, 0xffff, {0x2, 0x2}}, {0xfffc, 0x200, {0x1, 0x8}}, {0xff, 0x7, {0x2, 0x8}}, {0x8, 0x29, {0x2, 0x8}}, {0x9, 0x9, {0x1, 0x80000001}}, {0x3ff, 0xff, {0x2, 0xffffffff}}, {0x4e, 0x9f49, {0x1, 0x800}}, {0x5, 0x34f, {0x0, 0x5}}, {0x2, 0x6, {0x3}}, {0x9, 0x400, {0x1, 0x8}}, {0xa04c, 0x8, {0x2, 0x7}}, {0x7f, 0x5, {0x3, 0x3}}, {0x0, 0x8, {0x1, 0x5}}, {0x8000, 0x100, {0x3, 0x2}}, {0x8001, 0x81, {0x3, 0x7fffffff}}, {0xf800, 0x8, {0x0, 0x1}}, {0x9, 0x6, {0x3, 0x4}}, {0x5d5e, 0x7, {0x1, 0x552}}, {0x1, 0x2, {0x1, 0x80000001}}, {0xfff8, 0x1, {0x3, 0x3}}, {0x1, 0x2, {0x3, 0xf32b}}, {0x6, 0x101, {0x1, 0xffffff80}}, {0x3, 0x79c0, {0x1, 0xfffffffb}}, {0x171d, 0x80, {0x3, 0x8}}, {0xe91, 0x5, {0x3, 0x401}}, {0x1f, 0x2, {0x3, 0x1}}, {0x3, 0x3f, {0x2, 0x8000}}, {0x0, 0x1, {0x2, 0x7}}, {0x5, 0x5, {0x1, 0xfff}}, {0x0, 0xfff7, {0x3, 0x9}}, {0x80, 0x4}, {0x8, 0x9, {0x2, 0x4}}, {0x101, 0x7ff, {0x0, 0x10000}}, {0x0, 0xc01, {0x0, 0xca}}, {0x1, 0xe5, {0x3, 0x1}}, {0x7, 0x3, {0x2}}, {0x2, 0x7ff, {0x1, 0x8}}, {0x2, 0x0, {0x2, 0x8001}}]}}}, {{0x254, 0x1, {{0x1, 0x2}, 0xf9, 0x40, 0x1, 0x5, 0x10, 'syz0\x00', "b32e74663a2780f22ce6846dc9a5ddb6f0c9dc482ce39ae31af78a99721bbb0b", "aff9b4f104d4acd3db9bbf44d0206a4647b638227915ba9a605da71221751e67", [{0x8, 0xb90f, {0x1}}, {0xf801, 0x0, {0x2, 0x101}}, {0x8000, 0xe869, {0x1, 0x4}}, {0x0, 0x3, {0x3, 0xb}}, {0x3, 0x8, {0x1, 0x65b}}, {0x1, 0x20, {0x2, 0x20000000}}, {0x0, 0x2, {0x0, 0xd5e}}, {0x6, 0x6262, {0x1, 0x8001}}, {0xfff, 0xab4, {0x2, 0x1}}, {0x81, 0x8001, {0x2}}, {0x7fff, 0xfffa, {0x1, 0xfff}}, {0x4, 0x849, {0x2, 0x7ff}}, {0x7, 0x1, {0x3, 0x7}}, {0xfffb, 0x400, {0x0, 0xffff77cc}}, {0x8000, 0xffff, {0x3, 0xff}}, {0xf0, 0x9, {0x1, 0x2}}, {0x7fff, 0x101, {0x3, 0x1}}, {0xffff, 0x65, {0x0, 0x3b4}}, {0x7, 0xfa, {0x1, 0x579d}}, {0x5, 0x1, {0x1, 0xff}}, {0x4, 0x8, {0x3, 0x19}}, {0x1, 0x7, {0x0, 0x7}}, {0x401, 0x2, {0x1, 0xffffffff}}, {0x0, 0xfff, {0x3, 0x10000}}, {0x8, 0x6, {0x2, 0x44ae8a90}}, {0x3, 0x3, {0x0, 0x1}}, {0x33, 0x400, {0x3, 0x6}}, {0x200, 0x1, {0x0, 0x110}}, {0x5, 0x101, {0x0, 0x4}}, {0x0, 0x2, {0x2}}, {0xdde4, 0x81, {0x1, 0x10000}}, {0x14, 0x1c00, {0x2, 0xff}}, {0xb2f, 0x4, {0x3, 0x8}}, {0x0, 0x0, {0x1, 0x4}}, {0x1f, 0x2, {0x1, 0xffffff80}}, {0xd004, 0x7, {0x1, 0x7ff}}, {0x0, 0x1, {0x1, 0xfffffff7}}, {0x3, 0x5, {0x2, 0x2}}, {0x3, 0x3, {0x1, 0x7f}}, {0x9, 0x3898, {0x0, 0x3}}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0x80, 0x7, 0x1, 0x2, 0x22, 'syz0\x00', "a20c831ab6b95ebf3c2ee3bdab109770b32aaf04b267adc144a1e07a3a0a48b5", "8a7cf58636074a3c95e98ff28d7537ac3d8d3c283ffca892bf4710184ae8834b", [{0x6, 0xf493, {0x3, 0x2}}, {0x8451, 0x40, {0x16e004a749605bfd, 0xfffffeff}}, {0x6, 0xcc, {0x1, 0x3ff}}, {0x9, 0xeb5e, {0x2, 0x21}}, {0x94, 0x0, {0x3, 0x36}}, {0x9, 0xfff, {0x1}}, {0x8, 0xb13c, {0x3}}, {0x1, 0x400, {0x1, 0x32}}, {0x44, 0x93, {0x0, 0x7fff}}, {0x6c0c, 0x0, {0x1, 0x71}}, {0x7f, 0x1400, {0x3, 0x7}}, {0x81, 0x5, {0x2, 0xfffffff9}}, {0x0, 0x20, {0x1, 0x9}}, {0x3, 0xfb, {0x3, 0xffffffff}}, {0x3f, 0xfe, {0x1, 0x8001}}, {0xad, 0x9, {0x2, 0xf26}}, {0x3, 0x6}, {0x0, 0x1, {0x2, 0x7fffffff}}, {0x6, 0x8001, {0x3, 0xfff}}, {0xfffe, 0xfff7, {0x2, 0x2}}, {0x7, 0xb724, {0x1, 0x9}}, {0x9, 0xffff, {0x2, 0x101}}, {0x4, 0x9, {0x0, 0x5}}, {0x2, 0xf801, {0x2, 0x7}}, {0x7, 0xfbff, {0x1, 0x1bc9dc32}}, {0x7, 0x8, {0x2, 0x4a3dcd7c}}, {0x1, 0x1, {0x2, 0x76043a29}}, {0x8000, 0xa9, {0x3, 0x7f}}, {0x1, 0x2, {0x1, 0x1}}, {0xfff8, 0xfc5, {0x2, 0x8000}}, {0x80, 0x8000, {0x2, 0x4}}, {0x3, 0x5, {0x2, 0x9}}, {0x6, 0x1, {0x1, 0x7}}, {0x2, 0xdec6, {0x1, 0xc4}}, {0x4, 0x1, {0x2, 0x8}}, {0x1f0, 0x3, {0x3, 0x1f}}, {0x5, 0x3, {0x3, 0x1be}}, {0x4, 0x3, {0x2, 0x1}}, {0x7, 0x1ff, {0x1, 0xcb}}, {0x8, 0x7, {0x2, 0x6}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x44801}, 0x4000000) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r4) [ 873.892933][ T8811] 8021q: adding VLAN 0 to HW filter on device batadv91 [ 873.901964][ T8811] bond56: (slave batadv91): Enslaving as a backup interface with an up link [ 873.915914][ T8800] bond72 (unregistering): (slave batadv242): Releasing backup interface 15:26:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'ip6tnl0\x00', 0x200}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'bridge_slave_1\x00', 0x1000}) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r2, 0x8208200) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000240)={'team_slave_1\x00', @broadcast}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth1_to_team\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg0\x00', 0x20}) r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x4, 0x68002) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xb, @remote, @local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x34) write$tun(r3, &(0x7f0000000180)={@val={0x0, 0x88fb}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @local, @rand_addr=0x64010101, @empty, @broadcast}}, 0x20) [ 873.950835][ T8800] bond72 (unregistering): Released all slaves [ 873.976456][ T8803] FAULT_INJECTION: forcing a failure. [ 873.976456][ T8803] name failslab, interval 1, probability 0, space 0, times 0 [ 873.989514][ T8803] CPU: 1 PID: 8803 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 873.999991][ T8803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 874.010158][ T8803] Call Trace: [ 874.013545][ T8803] [ 874.016541][ T8803] dump_stack_lvl+0xda/0x130 [ 874.021361][ T8803] dump_stack+0x15/0x20 [ 874.025595][ T8803] should_fail_ex+0x21f/0x230 [ 874.030294][ T8803] __should_failslab+0x92/0xa0 [ 874.035151][ T8803] should_failslab+0x9/0x20 [ 874.039804][ T8803] slab_pre_alloc_hook+0x38/0x180 [ 874.044919][ T8803] kmem_cache_alloc_node+0x54/0x240 [ 874.050234][ T8803] ? __alloc_skb+0x109/0x2e0 [ 874.055001][ T8803] __alloc_skb+0x109/0x2e0 [ 874.059763][ T8803] __netdev_alloc_skb+0xb1/0x2e0 [ 874.064807][ T8803] ad_lacpdu_send+0x30/0x1e0 [ 874.069431][ T8803] bond_3ad_unbind_slave+0x247/0xc30 [ 874.074837][ T8803] ? wake_bit_function+0x70/0x70 [ 874.079876][ T8803] __bond_release_one+0x23f/0xa20 [ 874.085099][ T8803] ? batadv_hard_if_event+0xa0/0x10c0 [ 874.090758][ T8803] bond_uninit+0x1ad/0x320 [ 874.095276][ T8803] ? bond_init+0x290/0x290 [ 874.099874][ T8803] unregister_netdevice_many_notify+0xb7b/0x1070 [ 874.106479][ T8803] ? unregister_netdevice_queue+0x116/0x200 [ 874.112570][ T8803] ? list_netdevice+0x2a0/0x2a0 [ 874.117625][ T8803] rtnl_dellink+0x384/0x580 [ 874.122394][ T8803] ? __list_del_entry_valid+0x5f/0xe0 [ 874.128325][ T8803] ? _raw_spin_unlock+0x26/0x40 [ 874.133405][ T8803] ? __mutex_lock+0x21c/0x8d0 [ 874.138526][ T8803] ? rtnl_newlink+0x1600/0x1600 [ 874.144078][ T8803] rtnetlink_rcv_msg+0x807/0x8c0 [ 874.149351][ T8803] ? slab_post_alloc_hook+0x8c/0x340 [ 874.154941][ T8803] ? kmem_cache_alloc+0x10f/0x220 [ 874.160156][ T8803] ? xas_load+0x37c/0x390 [ 874.164591][ T8803] ? skb_release_data+0x542/0x560 [ 874.169729][ T8803] ? kmem_cache_free+0x1db/0x3a0 [ 874.174985][ T8803] ? __kfree_skb+0x104/0x140 [ 874.179764][ T8803] ? nlmon_xmit+0x4b/0x60 [ 874.184345][ T8803] ? __kfree_skb+0x104/0x140 [ 874.188954][ T8803] ? consume_skb+0x57/0x180 [ 874.193550][ T8803] ? nlmon_xmit+0x4b/0x60 [ 874.197896][ T8803] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 874.204326][ T8803] ? ref_tracker_free+0x3a1/0x400 [ 874.209454][ T8803] ? __dev_queue_xmit+0xabb/0x1d10 [ 874.214679][ T8803] netlink_rcv_skb+0x126/0x220 [ 874.219641][ T8803] ? rtnetlink_bind+0x60/0x60 [ 874.224658][ T8803] rtnetlink_rcv+0x1c/0x20 [ 874.229130][ T8803] netlink_unicast+0x56f/0x640 [ 874.234162][ T8803] netlink_sendmsg+0x665/0x770 [ 874.238948][ T8803] ? netlink_getsockopt+0x3e0/0x3e0 [ 874.244188][ T8803] ____sys_sendmsg+0x37c/0x4d0 [ 874.249237][ T8803] __sys_sendmsg+0x1e9/0x270 [ 874.253962][ T8803] __x64_sys_sendmsg+0x46/0x50 [ 874.258781][ T8803] do_syscall_64+0x41/0xc0 [ 874.263383][ T8803] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 874.269403][ T8803] RIP: 0033:0x7f6f42996ae9 [ 874.274261][ T8803] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 874.294149][ T8803] RSP: 002b:00007f6f41d190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 15:26:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001240), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x24}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xc}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x40094) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x501600, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x710, 0x0, 0x5, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [{{0x254, 0x1, {{0x1, 0x8}, 0x80, 0xf7, 0x2, 0x8001, 0x15, 'syz1\x00', "fb238c0599fa7bb537123d1c5dc9bd60bc6c7f337441666a51d64ec187b893dd", "c1a00745b393f57499b8b9ab2d28dd1ce019ebdbc30d83aa59e208412664601f", [{0x40, 0xd948, {0x0, 0x7}}, {0x7f, 0x4a1, {0x0, 0x6d1}}, {0x7, 0xffff, {0x2, 0x2}}, {0xfffc, 0x200, {0x1, 0x8}}, {0xff, 0x7, {0x2, 0x8}}, {0x8, 0x29, {0x2, 0x8}}, {0x9, 0x9, {0x1, 0x80000001}}, {0x3ff, 0xff, {0x2, 0xffffffff}}, {0x4e, 0x9f49, {0x1, 0x800}}, {0x5, 0x34f, {0x0, 0x5}}, {0x2, 0x6, {0x3}}, {0x9, 0x400, {0x1, 0x8}}, {0xa04c, 0x8, {0x2, 0x7}}, {0x7f, 0x5, {0x3, 0x3}}, {0x0, 0x8, {0x1, 0x5}}, {0x8000, 0x100, {0x3, 0x2}}, {0x8001, 0x81, {0x3, 0x7fffffff}}, {0xf800, 0x8, {0x0, 0x1}}, {0x9, 0x6, {0x3, 0x4}}, {0x5d5e, 0x7, {0x1, 0x552}}, {0x1, 0x2, {0x1, 0x80000001}}, {0xfff8, 0x1, {0x3, 0x3}}, {0x1, 0x2, {0x3, 0xf32b}}, {0x6, 0x101, {0x1, 0xffffff80}}, {0x3, 0x79c0, {0x1, 0xfffffffb}}, {0x171d, 0x80, {0x3, 0x8}}, {0xe91, 0x5, {0x3, 0x401}}, {0x1f, 0x2, {0x3, 0x1}}, {0x3, 0x3f, {0x2, 0x8000}}, {0x0, 0x1, {0x2, 0x7}}, {0x5, 0x5, {0x1, 0xfff}}, {0x0, 0xfff7, {0x3, 0x9}}, {0x80, 0x4}, {0x8, 0x9, {0x2, 0x4}}, {0x101, 0x7ff, {0x0, 0x10000}}, {0x0, 0xc01, {0x0, 0xca}}, {0x1, 0xe5, {0x3, 0x1}}, {0x7, 0x3, {0x2}}, {0x2, 0x7ff, {0x1, 0x8}}, {0x2, 0x0, {0x2, 0x8001}}]}}}, {{0x254, 0x1, {{0x1, 0x2}, 0xf9, 0x40, 0x1, 0x5, 0x10, 'syz0\x00', "b32e74663a2780f22ce6846dc9a5ddb6f0c9dc482ce39ae31af78a99721bbb0b", "aff9b4f104d4acd3db9bbf44d0206a4647b638227915ba9a605da71221751e67", [{0x8, 0xb90f, {0x1}}, {0xf801, 0x0, {0x2, 0x101}}, {0x8000, 0xe869, {0x1, 0x4}}, {0x0, 0x3, {0x3, 0xb}}, {0x3, 0x8, {0x1, 0x65b}}, {0x1, 0x20, {0x2, 0x20000000}}, {0x0, 0x2, {0x0, 0xd5e}}, {0x6, 0x6262, {0x1, 0x8001}}, {0xfff, 0xab4, {0x2, 0x1}}, {0x81, 0x8001, {0x2}}, {0x7fff, 0xfffa, {0x1, 0xfff}}, {0x4, 0x849, {0x2, 0x7ff}}, {0x7, 0x1, {0x3, 0x7}}, {0xfffb, 0x400, {0x0, 0xffff77cc}}, {0x8000, 0xffff, {0x3, 0xff}}, {0xf0, 0x9, {0x1, 0x2}}, {0x7fff, 0x101, {0x3, 0x1}}, {0xffff, 0x65, {0x0, 0x3b4}}, {0x7, 0xfa, {0x1, 0x579d}}, {0x5, 0x1, {0x1, 0xff}}, {0x4, 0x8, {0x3, 0x19}}, {0x1, 0x7, {0x0, 0x7}}, {0x401, 0x2, {0x1, 0xffffffff}}, {0x0, 0xfff, {0x3, 0x10000}}, {0x8, 0x6, {0x2, 0x44ae8a90}}, {0x3, 0x3, {0x0, 0x1}}, {0x33, 0x400, {0x3, 0x6}}, {0x200, 0x1, {0x0, 0x110}}, {0x5, 0x101, {0x0, 0x4}}, {0x0, 0x2, {0x2}}, {0xdde4, 0x81, {0x1, 0x10000}}, {0x14, 0x1c00, {0x2, 0xff}}, {0xb2f, 0x4, {0x3, 0x8}}, {0x0, 0x0, {0x1, 0x4}}, {0x1f, 0x2, {0x1, 0xffffff80}}, {0xd004, 0x7, {0x1, 0x7ff}}, {0x0, 0x1, {0x1, 0xfffffff7}}, {0x3, 0x5, {0x2, 0x2}}, {0x3, 0x3, {0x1, 0x7f}}, {0x9, 0x3898, {0x0, 0x3}}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0x80, 0x7, 0x1, 0x2, 0x22, 'syz0\x00', "a20c831ab6b95ebf3c2ee3bdab109770b32aaf04b267adc144a1e07a3a0a48b5", "8a7cf58636074a3c95e98ff28d7537ac3d8d3c283ffca892bf4710184ae8834b", [{0x6, 0xf493, {0x3, 0x2}}, {0x8451, 0x40, {0x16e004a749605bfd, 0xfffffeff}}, {0x6, 0xcc, {0x1, 0x3ff}}, {0x9, 0xeb5e, {0x2, 0x21}}, {0x94, 0x0, {0x3, 0x36}}, {0x9, 0xfff, {0x1}}, {0x8, 0xb13c, {0x3}}, {0x1, 0x400, {0x1, 0x32}}, {0x44, 0x93, {0x0, 0x7fff}}, {0x6c0c, 0x0, {0x1, 0x71}}, {0x7f, 0x1400, {0x3, 0x7}}, {0x81, 0x5, {0x2, 0xfffffff9}}, {0x0, 0x20, {0x1, 0x9}}, {0x3, 0xfb, {0x3, 0xffffffff}}, {0x3f, 0xfe, {0x1, 0x8001}}, {0xad, 0x9, {0x2, 0xf26}}, {0x3, 0x6}, {0x0, 0x1, {0x2, 0x7fffffff}}, {0x6, 0x8001, {0x3, 0xfff}}, {0xfffe, 0xfff7, {0x2, 0x2}}, {0x7, 0xb724, {0x1, 0x9}}, {0x9, 0xffff, {0x2, 0x101}}, {0x4, 0x9, {0x0, 0x5}}, {0x2, 0xf801, {0x2, 0x7}}, {0x7, 0xfbff, {0x1, 0x1bc9dc32}}, {0x7, 0x8, {0x2, 0x4a3dcd7c}}, {0x1, 0x1, {0x2, 0x76043a29}}, {0x8000, 0xa9, {0x3, 0x7f}}, {0x1, 0x2, {0x1, 0x1}}, {0xfff8, 0xfc5, {0x2, 0x8000}}, {0x80, 0x8000, {0x2, 0x4}}, {0x3, 0x5, {0x2, 0x9}}, {0x6, 0x1, {0x1, 0x7}}, {0x2, 0xdec6, {0x1, 0xc4}}, {0x4, 0x1, {0x2, 0x8}}, {0x1f0, 0x3, {0x3, 0x1f}}, {0x5, 0x3, {0x3, 0x1be}}, {0x4, 0x3, {0x2, 0x1}}, {0x7, 0x1ff, {0x1, 0xcb}}, {0x8, 0x7, {0x2, 0x6}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x44801}, 0x4000000) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r4) [ 874.302755][ T8803] RAX: ffffffffffffffda RBX: 00007f6f42ab5f80 RCX: 00007f6f42996ae9 [ 874.311736][ T8803] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 874.319831][ T8803] RBP: 00007f6f41d19120 R08: 0000000000000000 R09: 0000000000000000 [ 874.327819][ T8803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 874.335929][ T8803] R13: 000000000000000b R14: 00007f6f42ab5f80 R15: 00007ffc381e1498 [ 874.344019][ T8803] 15:26:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x4a11, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:26:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'ip6tnl0\x00', 0x200}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'bridge_slave_1\x00', 0x1000}) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r2, 0x8208200) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000240)={'team_slave_1\x00', @broadcast}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth1_to_team\x00', 0x2}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg0\x00', 0x20}) r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x4, 0x68002) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xb, @remote, @local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x34) (async) write$tun(r3, &(0x7f0000000180)={@val={0x0, 0x88fb}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @local, @rand_addr=0x64010101, @empty, @broadcast}}, 0x20) [ 874.356505][ T8803] bond56 (unregistering): (slave batadv91): Releasing backup interface [ 874.394664][ T8803] bond56 (unregistering): Released all slaves 15:26:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'ip6tnl0\x00', 0x200}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'bridge_slave_1\x00', 0x1000}) (async) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r2, 0x8208200) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000240)={'team_slave_1\x00', @broadcast}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth1_to_team\x00', 0x2}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg0\x00', 0x20}) r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x4, 0x68002) (async) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xb, @remote, @local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x34) write$tun(r3, &(0x7f0000000180)={@val={0x0, 0x88fb}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @local, @rand_addr=0x64010101, @empty, @broadcast}}, 0x20) [ 874.428440][ T8833] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 15:26:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 16) [ 874.478561][ T8833] 8021q: adding VLAN 0 to HW filter on device batadv243 [ 874.498779][ T8833] bond72: (slave batadv243): Enslaving as a backup interface with an up link [ 874.510577][ T8844] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:26:34 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto$inet(r0, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x80000001, 0x30}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1) [ 874.529433][ T8833] bond72 (unregistering): (slave batadv243): Releasing backup interface [ 874.556022][ T8833] bond72 (unregistering): Released all slaves [ 874.578991][ T8844] 8021q: adding VLAN 0 to HW filter on device batadv92 [ 874.587539][ T8844] bond56: (slave batadv92): Enslaving as a backup interface with an up link [ 874.600233][ T8844] bond56 (unregistering): (slave batadv92): Releasing backup interface [ 874.630292][ T8844] bond56 (unregistering): Released all slaves 15:26:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x248) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) 15:26:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = inotify_init1(0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = memfd_create(0x0, 0x0) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) dup3(r2, r3, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x20000000000000) 15:26:34 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto$inet(r0, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x80000001, 0x30}, 0xc) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1) 15:26:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x4c00, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:26:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 17) 15:26:34 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto$inet(r0, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) (async) sendto$inet(r0, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x80000001, 0x30}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1) [ 874.741260][ T8852] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 874.742045][ T8858] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 874.778536][ T8856] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 874.808679][ T8858] 8021q: adding VLAN 0 to HW filter on device batadv244 [ 874.817674][ T8858] bond72: (slave batadv244): Enslaving as a backup interface with an up link [ 874.833820][ T8856] 8021q: adding VLAN 0 to HW filter on device batadv93 [ 874.842267][ T8856] bond56: (slave batadv93): Enslaving as a backup interface with an up link [ 874.851697][ T8860] syzkaller1: entered promiscuous mode [ 874.857350][ T8860] syzkaller1: entered allmulticast mode [ 874.877171][ T8858] bond72 (unregistering): (slave batadv244): Releasing backup interface [ 874.898121][ T8858] bond72 (unregistering): Released all slaves [ 874.911429][ T8856] FAULT_INJECTION: forcing a failure. [ 874.911429][ T8856] name failslab, interval 1, probability 0, space 0, times 0 [ 874.924121][ T8856] CPU: 1 PID: 8856 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 874.934739][ T8856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 874.944960][ T8856] Call Trace: [ 874.948314][ T8856] [ 874.951331][ T8856] dump_stack_lvl+0xda/0x130 [ 874.956094][ T8856] dump_stack+0x15/0x20 [ 874.960895][ T8856] should_fail_ex+0x21f/0x230 [ 874.967974][ T8856] __should_failslab+0x92/0xa0 [ 874.972789][ T8856] should_failslab+0x9/0x20 [ 874.978302][ T8856] slab_pre_alloc_hook+0x38/0x180 [ 874.983386][ T8856] kmem_cache_alloc_node+0x54/0x240 [ 874.988700][ T8856] ? __alloc_skb+0x109/0x2e0 [ 874.993361][ T8856] __alloc_skb+0x109/0x2e0 [ 874.997815][ T8856] rtmsg_ifinfo_build_skb+0x67/0x1b0 [ 875.003206][ T8856] ? kvfree_call_rcu+0x40d/0x510 [ 875.008215][ T8856] ? rtnetlink_rcv_msg+0x8c0/0x8c0 [ 875.013443][ T8856] rtnetlink_event+0x180/0x1f0 [ 875.018234][ T8856] raw_notifier_call_chain+0x6b/0x1c0 [ 875.023653][ T8856] ? local_bh_enable+0x1f/0x20 [ 875.028781][ T8856] ? __dev_queue_xmit+0xabb/0x1d10 [ 875.033974][ T8856] __netdev_upper_dev_unlink+0x2ce/0x990 [ 875.039706][ T8856] ? bond_3ad_unbind_slave+0x846/0xc30 [ 875.045718][ T8856] ? netdev_lower_get_next_private+0x5a/0x70 [ 875.051746][ T8856] ? _raw_spin_unlock_bh+0x36/0x40 [ 875.057231][ T8856] ? bond_3ad_unbind_slave+0xb72/0xc30 [ 875.062713][ T8856] netdev_upper_dev_unlink+0x32/0x50 [ 875.068201][ T8856] __bond_release_one+0x26b/0xa20 [ 875.073301][ T8856] ? dump_schedule+0x470/0x470 [ 875.078171][ T8856] ? rtnl_fill_ifinfo+0x1117/0x1120 [ 875.083479][ T8856] ? tun_device_event+0x4d/0x9d0 [ 875.088677][ T8856] bond_uninit+0x1ad/0x320 [ 875.093125][ T8856] ? bond_init+0x290/0x290 [ 875.097567][ T8856] unregister_netdevice_many_notify+0xb7b/0x1070 [ 875.104174][ T8856] ? unregister_netdevice_queue+0x116/0x200 [ 875.110102][ T8856] ? list_netdevice+0x2a0/0x2a0 [ 875.115063][ T8856] rtnl_dellink+0x384/0x580 [ 875.119613][ T8856] ? __list_del_entry_valid+0x5f/0xe0 [ 875.125092][ T8856] ? _raw_spin_unlock+0x26/0x40 [ 875.129961][ T8856] ? __mutex_lock+0x21c/0x8d0 [ 875.134661][ T8856] ? rtnl_newlink+0x1600/0x1600 [ 875.139583][ T8856] rtnetlink_rcv_msg+0x807/0x8c0 [ 875.144559][ T8856] ? slab_post_alloc_hook+0x8c/0x340 [ 875.149918][ T8856] ? kmem_cache_alloc+0x10f/0x220 [ 875.154992][ T8856] ? xas_load+0x37c/0x390 [ 875.159457][ T8856] ? skb_release_data+0x542/0x560 [ 875.164541][ T8856] ? kmem_cache_free+0x1db/0x3a0 [ 875.169625][ T8856] ? __kfree_skb+0x104/0x140 [ 875.174306][ T8856] ? nlmon_xmit+0x4b/0x60 [ 875.178654][ T8856] ? __kfree_skb+0x104/0x140 [ 875.183353][ T8856] ? consume_skb+0x57/0x180 [ 875.187966][ T8856] ? nlmon_xmit+0x4b/0x60 [ 875.192322][ T8856] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 875.197846][ T8856] ? ref_tracker_free+0x3a1/0x400 [ 875.202881][ T8856] ? __dev_queue_xmit+0xabb/0x1d10 [ 875.208024][ T8856] netlink_rcv_skb+0x126/0x220 [ 875.212922][ T8856] ? rtnetlink_bind+0x60/0x60 [ 875.217685][ T8856] rtnetlink_rcv+0x1c/0x20 [ 875.222143][ T8856] netlink_unicast+0x56f/0x640 [ 875.227007][ T8856] netlink_sendmsg+0x665/0x770 [ 875.231894][ T8856] ? netlink_getsockopt+0x3e0/0x3e0 [ 875.237134][ T8856] ____sys_sendmsg+0x37c/0x4d0 [ 875.242096][ T8856] __sys_sendmsg+0x1e9/0x270 [ 875.246735][ T8856] __x64_sys_sendmsg+0x46/0x50 [ 875.251949][ T8856] do_syscall_64+0x41/0xc0 [ 875.256728][ T8856] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 875.262743][ T8856] RIP: 0033:0x7f6f42996ae9 [ 875.267168][ T8856] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 875.287121][ T8856] RSP: 002b:00007f6f41d190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 875.295553][ T8856] RAX: ffffffffffffffda RBX: 00007f6f42ab5f80 RCX: 00007f6f42996ae9 [ 875.303575][ T8856] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 875.311878][ T8856] RBP: 00007f6f41d19120 R08: 0000000000000000 R09: 0000000000000000 [ 875.320031][ T8856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 875.328149][ T8856] R13: 000000000000000b R14: 00007f6f42ab5f80 R15: 00007ffc381e1498 [ 875.336141][ T8856] [ 875.339720][ T8856] bond56 (unregistering): (slave batadv93): Releasing backup interface [ 875.360934][ T8856] bond56 (unregistering): Released all slaves [ 876.555672][ T3166] usb usb6-port1: attempt power cycle 15:26:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001240), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x24}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xc}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x40094) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x501600, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x710, 0x0, 0x5, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [{{0x254, 0x1, {{0x1, 0x8}, 0x80, 0xf7, 0x2, 0x8001, 0x15, 'syz1\x00', "fb238c0599fa7bb537123d1c5dc9bd60bc6c7f337441666a51d64ec187b893dd", "c1a00745b393f57499b8b9ab2d28dd1ce019ebdbc30d83aa59e208412664601f", [{0x40, 0xd948, {0x0, 0x7}}, {0x7f, 0x4a1, {0x0, 0x6d1}}, {0x7, 0xffff, {0x2, 0x2}}, {0xfffc, 0x200, {0x1, 0x8}}, {0xff, 0x7, {0x2, 0x8}}, {0x8, 0x29, {0x2, 0x8}}, {0x9, 0x9, {0x1, 0x80000001}}, {0x3ff, 0xff, {0x2, 0xffffffff}}, {0x4e, 0x9f49, {0x1, 0x800}}, {0x5, 0x34f, {0x0, 0x5}}, {0x2, 0x6, {0x3}}, {0x9, 0x400, {0x1, 0x8}}, {0xa04c, 0x8, {0x2, 0x7}}, {0x7f, 0x5, {0x3, 0x3}}, {0x0, 0x8, {0x1, 0x5}}, {0x8000, 0x100, {0x3, 0x2}}, {0x8001, 0x81, {0x3, 0x7fffffff}}, {0xf800, 0x8, {0x0, 0x1}}, {0x9, 0x6, {0x3, 0x4}}, {0x5d5e, 0x7, {0x1, 0x552}}, {0x1, 0x2, {0x1, 0x80000001}}, {0xfff8, 0x1, {0x3, 0x3}}, {0x1, 0x2, {0x3, 0xf32b}}, {0x6, 0x101, {0x1, 0xffffff80}}, {0x3, 0x79c0, {0x1, 0xfffffffb}}, {0x171d, 0x80, {0x3, 0x8}}, {0xe91, 0x5, {0x3, 0x401}}, {0x1f, 0x2, {0x3, 0x1}}, {0x3, 0x3f, {0x2, 0x8000}}, {0x0, 0x1, {0x2, 0x7}}, {0x5, 0x5, {0x1, 0xfff}}, {0x0, 0xfff7, {0x3, 0x9}}, {0x80, 0x4}, {0x8, 0x9, {0x2, 0x4}}, {0x101, 0x7ff, {0x0, 0x10000}}, {0x0, 0xc01, {0x0, 0xca}}, {0x1, 0xe5, {0x3, 0x1}}, {0x7, 0x3, {0x2}}, {0x2, 0x7ff, {0x1, 0x8}}, {0x2, 0x0, {0x2, 0x8001}}]}}}, {{0x254, 0x1, {{0x1, 0x2}, 0xf9, 0x40, 0x1, 0x5, 0x10, 'syz0\x00', "b32e74663a2780f22ce6846dc9a5ddb6f0c9dc482ce39ae31af78a99721bbb0b", "aff9b4f104d4acd3db9bbf44d0206a4647b638227915ba9a605da71221751e67", [{0x8, 0xb90f, {0x1}}, {0xf801, 0x0, {0x2, 0x101}}, {0x8000, 0xe869, {0x1, 0x4}}, {0x0, 0x3, {0x3, 0xb}}, {0x3, 0x8, {0x1, 0x65b}}, {0x1, 0x20, {0x2, 0x20000000}}, {0x0, 0x2, {0x0, 0xd5e}}, {0x6, 0x6262, {0x1, 0x8001}}, {0xfff, 0xab4, {0x2, 0x1}}, {0x81, 0x8001, {0x2}}, {0x7fff, 0xfffa, {0x1, 0xfff}}, {0x4, 0x849, {0x2, 0x7ff}}, {0x7, 0x1, {0x3, 0x7}}, {0xfffb, 0x400, {0x0, 0xffff77cc}}, {0x8000, 0xffff, {0x3, 0xff}}, {0xf0, 0x9, {0x1, 0x2}}, {0x7fff, 0x101, {0x3, 0x1}}, {0xffff, 0x65, {0x0, 0x3b4}}, {0x7, 0xfa, {0x1, 0x579d}}, {0x5, 0x1, {0x1, 0xff}}, {0x4, 0x8, {0x3, 0x19}}, {0x1, 0x7, {0x0, 0x7}}, {0x401, 0x2, {0x1, 0xffffffff}}, {0x0, 0xfff, {0x3, 0x10000}}, {0x8, 0x6, {0x2, 0x44ae8a90}}, {0x3, 0x3, {0x0, 0x1}}, {0x33, 0x400, {0x3, 0x6}}, {0x200, 0x1, {0x0, 0x110}}, {0x5, 0x101, {0x0, 0x4}}, {0x0, 0x2, {0x2}}, {0xdde4, 0x81, {0x1, 0x10000}}, {0x14, 0x1c00, {0x2, 0xff}}, {0xb2f, 0x4, {0x3, 0x8}}, {0x0, 0x0, {0x1, 0x4}}, {0x1f, 0x2, {0x1, 0xffffff80}}, {0xd004, 0x7, {0x1, 0x7ff}}, {0x0, 0x1, {0x1, 0xfffffff7}}, {0x3, 0x5, {0x2, 0x2}}, {0x3, 0x3, {0x1, 0x7f}}, {0x9, 0x3898, {0x0, 0x3}}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0x80, 0x7, 0x1, 0x2, 0x22, 'syz0\x00', "a20c831ab6b95ebf3c2ee3bdab109770b32aaf04b267adc144a1e07a3a0a48b5", "8a7cf58636074a3c95e98ff28d7537ac3d8d3c283ffca892bf4710184ae8834b", [{0x6, 0xf493, {0x3, 0x2}}, {0x8451, 0x40, {0x16e004a749605bfd, 0xfffffeff}}, {0x6, 0xcc, {0x1, 0x3ff}}, {0x9, 0xeb5e, {0x2, 0x21}}, {0x94, 0x0, {0x3, 0x36}}, {0x9, 0xfff, {0x1}}, {0x8, 0xb13c, {0x3}}, {0x1, 0x400, {0x1, 0x32}}, {0x44, 0x93, {0x0, 0x7fff}}, {0x6c0c, 0x0, {0x1, 0x71}}, {0x7f, 0x1400, {0x3, 0x7}}, {0x81, 0x5, {0x2, 0xfffffff9}}, {0x0, 0x20, {0x1, 0x9}}, {0x3, 0xfb, {0x3, 0xffffffff}}, {0x3f, 0xfe, {0x1, 0x8001}}, {0xad, 0x9, {0x2, 0xf26}}, {0x3, 0x6}, {0x0, 0x1, {0x2, 0x7fffffff}}, {0x6, 0x8001, {0x3, 0xfff}}, {0xfffe, 0xfff7, {0x2, 0x2}}, {0x7, 0xb724, {0x1, 0x9}}, {0x9, 0xffff, {0x2, 0x101}}, {0x4, 0x9, {0x0, 0x5}}, {0x2, 0xf801, {0x2, 0x7}}, {0x7, 0xfbff, {0x1, 0x1bc9dc32}}, {0x7, 0x8, {0x2, 0x4a3dcd7c}}, {0x1, 0x1, {0x2, 0x76043a29}}, {0x8000, 0xa9, {0x3, 0x7f}}, {0x1, 0x2, {0x1, 0x1}}, {0xfff8, 0xfc5, {0x2, 0x8000}}, {0x80, 0x8000, {0x2, 0x4}}, {0x3, 0x5, {0x2, 0x9}}, {0x6, 0x1, {0x1, 0x7}}, {0x2, 0xdec6, {0x1, 0xc4}}, {0x4, 0x1, {0x2, 0x8}}, {0x1f0, 0x3, {0x3, 0x1f}}, {0x5, 0x3, {0x3, 0x1be}}, {0x4, 0x3, {0x2, 0x1}}, {0x7, 0x1ff, {0x1, 0xcb}}, {0x8, 0x7, {0x2, 0x6}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x44801}, 0x4000000) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r4) 15:26:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x40) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x15) 15:26:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x5865, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:26:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = inotify_init1(0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = memfd_create(0x0, 0x0) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) dup3(r2, r3, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x40000000000000) 15:26:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 18) [ 878.545717][ T3166] usb usb6-port1: unable to enumerate USB device 15:26:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000f38bb23dd23f44100000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff010000001d00000000000000000065727370616e300000000000000000006272696467653000400000000000bb976768aefd37190000b43b24af61af8e2f000000000000000065716c00000000000000000000000000ffffffffffff000000000000aaaaaaaaaa000000000000000000a000000010010000380100006d61726b5f6d00000000000000000000000000000000000000000000000000000c0000000400000001000000000100006e666c6f670000000000000000000000000000000000000000000000000000004c0000006d8000000900090000000000b80eba8ec4468a05f7d0c08be35638ee0eed5dd9119d918668afa6c019b085be3837595dc113ccf27499f7202a2b59394b26193cf57ec99b9abb99943198532b0b7bdd0f61e572656469726563740000000000000000000000000000000000000000000000000400"]}, 0x248) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) 15:26:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x40) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x15) [ 878.605116][ T8876] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 878.626960][ T8875] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 878.645140][ T8879] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 15:26:38 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x40, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0xfffffffc, 0x2, &(0x7f0000000100)="387082379c7fdf4e50576c1db2bee17d33011c4399b5efd899edb2c3d2eff1e7fff5b2746ffd9b77887330efa16ffc0bb09d4171a97e4065cc89a9b44ab7c94cac3a66610d49ed1120844ba694af94527a1ef22f17459a0acfd3695eff39b4b452ab383596a74db24f433e50e4af0dc2ed3004ff13e144acd8302f621c4fd01ddd6d596454b8283bc958c60bfd4a45466a31e603d1ef80e90dac6de89fb2a8233cce19bec1a3bc60fadd77578166999294d13987d370b8c786d478dcf9324f6128f4acec9c6377c6dba4117d8b4430fedc33ea94eb8e99b5f7c7c108ba5d53817c88200b8e34cf532efd09faeaf0"}) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r1, 0x10, 0x0, 0x1000f4) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x1000}) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000080)=@usbdevfs_driver={0x1b, 0x7ff, &(0x7f0000000200)="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"}) 15:26:38 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x40, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0xfffffffc, 0x2, &(0x7f0000000100)="387082379c7fdf4e50576c1db2bee17d33011c4399b5efd899edb2c3d2eff1e7fff5b2746ffd9b77887330efa16ffc0bb09d4171a97e4065cc89a9b44ab7c94cac3a66610d49ed1120844ba694af94527a1ef22f17459a0acfd3695eff39b4b452ab383596a74db24f433e50e4af0dc2ed3004ff13e144acd8302f621c4fd01ddd6d596454b8283bc958c60bfd4a45466a31e603d1ef80e90dac6de89fb2a8233cce19bec1a3bc60fadd77578166999294d13987d370b8c786d478dcf9324f6128f4acec9c6377c6dba4117d8b4430fedc33ea94eb8e99b5f7c7c108ba5d53817c88200b8e34cf532efd09faeaf0"}) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) (async) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r1, 0x10, 0x0, 0x1000f4) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x1000}) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000080)=@usbdevfs_driver={0x1b, 0x7ff, &(0x7f0000000200)="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"}) (async) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000080)=@usbdevfs_driver={0x1b, 0x7ff, &(0x7f0000000200)="dc1c91fb2bbcc37f714b945157db5b95fe14217852d62d237b389d57f15a18dc5450bc6556e685d9f9257f9d0f264060a34ba82b52cff7a232b71d9ae879fed0c98eebe3d7c77c4df339952eedeeb2e3a574514f9876d99287e586826a4e860b38041774f38fa61223e4741e130f47d607bb6ef4c49be5f8a99ff4b4c0e70cdaa476bb4bfd85c873fb6c31c2ca5bd92c39e89950bf4b09cf5a8558d7f8b992954da9dc045aac36ae25a83ca82a19bc52c253584c4d606f4d2c9b63867ca283fecb0ce3ef4bd42d6e8476eab4e12b2e85cbeddcc0262dc2582dc30490828374f3693a39741d20e56eee16d36789a37c67093212c0b9ecfa5b7e69"}) [ 878.672857][ T8877] syzkaller1: entered promiscuous mode [ 878.678558][ T8877] syzkaller1: entered allmulticast mode [ 878.705006][ T8875] 8021q: adding VLAN 0 to HW filter on device batadv94 15:26:38 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x40, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0xfffffffc, 0x2, &(0x7f0000000100)="387082379c7fdf4e50576c1db2bee17d33011c4399b5efd899edb2c3d2eff1e7fff5b2746ffd9b77887330efa16ffc0bb09d4171a97e4065cc89a9b44ab7c94cac3a66610d49ed1120844ba694af94527a1ef22f17459a0acfd3695eff39b4b452ab383596a74db24f433e50e4af0dc2ed3004ff13e144acd8302f621c4fd01ddd6d596454b8283bc958c60bfd4a45466a31e603d1ef80e90dac6de89fb2a8233cce19bec1a3bc60fadd77578166999294d13987d370b8c786d478dcf9324f6128f4acec9c6377c6dba4117d8b4430fedc33ea94eb8e99b5f7c7c108ba5d53817c88200b8e34cf532efd09faeaf0"}) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r1, 0x10, 0x0, 0x1000f4) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x1000}) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000080)=@usbdevfs_driver={0x1b, 0x7ff, &(0x7f0000000200)="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"}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x40, 0x0) (async) open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) (async) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0xfffffffc, 0x2, &(0x7f0000000100)="387082379c7fdf4e50576c1db2bee17d33011c4399b5efd899edb2c3d2eff1e7fff5b2746ffd9b77887330efa16ffc0bb09d4171a97e4065cc89a9b44ab7c94cac3a66610d49ed1120844ba694af94527a1ef22f17459a0acfd3695eff39b4b452ab383596a74db24f433e50e4af0dc2ed3004ff13e144acd8302f621c4fd01ddd6d596454b8283bc958c60bfd4a45466a31e603d1ef80e90dac6de89fb2a8233cce19bec1a3bc60fadd77578166999294d13987d370b8c786d478dcf9324f6128f4acec9c6377c6dba4117d8b4430fedc33ea94eb8e99b5f7c7c108ba5d53817c88200b8e34cf532efd09faeaf0"}) (async) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) (async) fallocate(r1, 0x10, 0x0, 0x1000f4) (async) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x1000}) (async) open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) (async) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000080)=@usbdevfs_driver={0x1b, 0x7ff, &(0x7f0000000200)="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"}) (async) [ 878.732626][ T8875] bond56: (slave batadv94): Enslaving as a backup interface with an up link [ 878.749546][ T8893] bond72 (unregistering): Released all slaves 15:26:38 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x10001, 0x200080) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000240)={0x6, "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"}) r2 = socket(0x10, 0x803, 0x0) sendto$inet(r2, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write$binfmt_misc(r2, &(0x7f00000007c0)={'syz1', "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"}, 0x1004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0x1) 15:26:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x40) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x15) 15:26:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto$inet(r5, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000104fd0008000fa1bb7400000000", @ANYRES32=r2, @ANYBLOB="001d82000000000008000a00", @ANYRES32=r6], 0x28}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) [ 878.780082][ T8894] bond56 (unregistering): (slave batadv94): Releasing backup interface [ 878.816317][ T8894] bond56 (unregistering): Released all slaves 15:26:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 19) [ 878.869105][ T8917] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 878.884904][ T8917] bond0: left allmulticast mode [ 878.889978][ T8917] bridge69: port 1(bond0) entered disabled state [ 878.900545][ T8917] bridge70: port 1(bond0) entered blocking state [ 878.907076][ T8917] bridge70: port 1(bond0) entered disabled state [ 878.914259][ T8917] bond0: entered allmulticast mode 15:26:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x6000, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 878.922430][ T8920] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 878.953250][ T8920] 8021q: adding VLAN 0 to HW filter on device batadv95 [ 878.972985][ T8920] bond56: (slave batadv95): Enslaving as a backup interface with an up link [ 878.988348][ T8920] bond56 (unregistering): (slave batadv95): Releasing backup interface [ 879.009610][ T8920] bond56 (unregistering): Released all slaves [ 879.019748][ T8923] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 879.043640][ T8923] 8021q: adding VLAN 0 to HW filter on device batadv245 [ 879.052349][ T8923] bond72: (slave batadv245): Enslaving as a backup interface with an up link [ 879.065697][ T8923] bond72 (unregistering): (slave batadv245): Releasing backup interface 15:26:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = inotify_init1(0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = memfd_create(0x0, 0x0) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) dup3(r2, r3, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 15:26:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendto$inet(r5, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000104fd0008000fa1bb7400000000", @ANYRES32=r2, @ANYBLOB="001d82000000000008000a00", @ANYRES32=r6], 0x28}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) [ 879.102692][ T8923] bond72 (unregistering): Released all slaves [ 879.152909][ T8926] bond0: left allmulticast mode [ 879.158190][ T8926] bridge70: port 1(bond0) entered disabled state [ 879.170743][ T8929] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN 15:26:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x248) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r3}]}, 0x24}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r5, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r3}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r6, 0x2, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r4, 0xffffffffffffffff, r7, r4]}, 0x4) 15:26:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 20) 15:26:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x6558, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:26:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto$inet(r5, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000104fd0008000fa1bb7400000000", @ANYRES32=r2, @ANYBLOB="001d82000000000008000a00", @ANYRES32=r6], 0x28}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) (async) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) [ 879.509289][ T8932] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 879.534530][ T8935] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 879.559523][ T8932] 8021q: adding VLAN 0 to HW filter on device batadv96 [ 879.567922][ T8932] bond56: (slave batadv96): Enslaving as a backup interface with an up link [ 879.583936][ T8935] 8021q: adding VLAN 0 to HW filter on device batadv246 [ 879.592510][ T8935] bond72: (slave batadv246): Enslaving as a backup interface with an up link [ 879.601850][ T8939] syzkaller1: entered promiscuous mode [ 879.607508][ T8939] syzkaller1: entered allmulticast mode [ 879.615413][ T8937] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 879.633128][ T8932] FAULT_INJECTION: forcing a failure. [ 879.633128][ T8932] name failslab, interval 1, probability 0, space 0, times 0 [ 879.645923][ T8932] CPU: 1 PID: 8932 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 15:26:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = inotify_init1(0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = memfd_create(0x0, 0x0) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) dup3(r2, r3, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x2000000000000000) [ 879.656263][ T8932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 879.666417][ T8932] Call Trace: [ 879.669718][ T8932] [ 879.672664][ T8932] dump_stack_lvl+0xda/0x130 [ 879.677294][ T8932] dump_stack+0x15/0x20 [ 879.681521][ T8932] should_fail_ex+0x21f/0x230 [ 879.686266][ T8932] ? netdevice_event+0x2b6/0x610 [ 879.691240][ T8932] __should_failslab+0x92/0xa0 [ 879.696153][ T8932] should_failslab+0x9/0x20 [ 879.700749][ T8932] slab_pre_alloc_hook+0x38/0x180 [ 879.705902][ T8932] ? netdevice_event+0x2b6/0x610 [ 879.710874][ T8932] __kmem_cache_alloc_node+0x48/0x1d0 [ 879.716319][ T8932] ? netdevice_event+0x2b6/0x610 [ 879.717586][ T8942] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 879.721331][ T8932] kmalloc_trace+0x2a/0xa0 [ 879.734124][ T8932] netdevice_event+0x2b6/0x610 [ 879.738912][ T8932] ? _raw_spin_unlock_irqrestore+0x2b/0x50 [ 879.745313][ T8932] ? netdev_upper_walk+0x160/0x160 [ 879.750549][ T8932] ? add_default_gids+0xb0/0xb0 [ 879.755429][ T8932] ? is_eth_port_inactive_slave_filter+0x170/0x170 [ 879.761969][ T8932] ? del_netdev_upper_ips+0x210/0x210 [ 879.767386][ T8932] ? cfg802154_netdev_notifier_call+0xa1/0x3b0 [ 879.773683][ T8932] ? inet6addr_event+0xa0/0xa0 [ 879.778584][ T8932] raw_notifier_call_chain+0x6b/0x1c0 [ 879.783985][ T8932] ? local_bh_enable+0x1f/0x20 [ 879.788803][ T8932] ? __dev_queue_xmit+0xabb/0x1d10 [ 879.794067][ T8932] __netdev_upper_dev_unlink+0x2ce/0x990 [ 879.799786][ T8932] ? ad_lacpdu_send+0x1ba/0x1e0 [ 879.804775][ T8932] ? netdev_lower_get_next_private+0x5a/0x70 [ 879.810830][ T8932] ? _raw_spin_unlock_bh+0x36/0x40 [ 879.815968][ T8932] ? bond_3ad_unbind_slave+0xb72/0xc30 [ 879.821456][ T8932] netdev_upper_dev_unlink+0x32/0x50 [ 879.826960][ T8932] __bond_release_one+0x26b/0xa20 [ 879.832034][ T8932] ? dump_schedule+0x470/0x470 [ 879.836826][ T8932] ? rtnl_fill_ifinfo+0x1117/0x1120 [ 879.842071][ T8932] ? tun_device_event+0x4d/0x9d0 [ 879.847030][ T8932] bond_uninit+0x1ad/0x320 [ 879.851522][ T8932] ? bond_init+0x290/0x290 [ 879.856083][ T8932] unregister_netdevice_many_notify+0xb7b/0x1070 [ 879.862491][ T8932] ? unregister_netdevice_queue+0x116/0x200 [ 879.868446][ T8932] ? list_netdevice+0x2a0/0x2a0 [ 879.873337][ T8932] rtnl_dellink+0x384/0x580 [ 879.877875][ T8932] ? __list_del_entry_valid+0x5f/0xe0 [ 879.883358][ T8932] ? _raw_spin_unlock+0x26/0x40 [ 879.888313][ T8932] ? __mutex_lock+0x21c/0x8d0 [ 879.893018][ T8932] ? rtnl_newlink+0x1600/0x1600 [ 879.897898][ T8932] rtnetlink_rcv_msg+0x807/0x8c0 [ 879.902909][ T8932] ? slab_post_alloc_hook+0x8c/0x340 [ 879.908292][ T8932] ? kmem_cache_alloc+0x10f/0x220 [ 879.913360][ T8932] ? xas_load+0x37c/0x390 [ 879.917722][ T8932] ? skb_release_data+0x542/0x560 [ 879.922783][ T8932] ? kmem_cache_free+0x1db/0x3a0 [ 879.927780][ T8932] ? __kfree_skb+0x104/0x140 [ 879.932397][ T8932] ? nlmon_xmit+0x4b/0x60 [ 879.936755][ T8932] ? __kfree_skb+0x104/0x140 [ 879.941470][ T8932] ? consume_skb+0x57/0x180 [ 879.946041][ T8932] ? nlmon_xmit+0x4b/0x60 [ 879.950505][ T8932] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 879.955817][ T8932] ? ref_tracker_free+0x3a1/0x400 [ 879.960903][ T8932] ? __dev_queue_xmit+0xabb/0x1d10 [ 879.966056][ T8932] netlink_rcv_skb+0x126/0x220 [ 879.970999][ T8932] ? rtnetlink_bind+0x60/0x60 [ 879.975770][ T8932] rtnetlink_rcv+0x1c/0x20 [ 879.980215][ T8932] netlink_unicast+0x56f/0x640 [ 879.985096][ T8932] netlink_sendmsg+0x665/0x770 [ 879.989948][ T8932] ? netlink_getsockopt+0x3e0/0x3e0 [ 879.995238][ T8932] ____sys_sendmsg+0x37c/0x4d0 [ 880.000028][ T8932] __sys_sendmsg+0x1e9/0x270 [ 880.004711][ T8932] __x64_sys_sendmsg+0x46/0x50 [ 880.009573][ T8932] do_syscall_64+0x41/0xc0 [ 880.014015][ T8932] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 880.020106][ T8932] RIP: 0033:0x7f6f42996ae9 [ 880.024573][ T8932] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 880.044304][ T8932] RSP: 002b:00007f6f41d190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 880.052754][ T8932] RAX: ffffffffffffffda RBX: 00007f6f42ab5f80 RCX: 00007f6f42996ae9 [ 880.061011][ T8932] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 880.069093][ T8932] RBP: 00007f6f41d19120 R08: 0000000000000000 R09: 0000000000000000 [ 880.077084][ T8932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 880.085085][ T8932] R13: 000000000000000b R14: 00007f6f42ab5f80 R15: 00007ffc381e1498 [ 880.093118][ T8932] [ 880.101564][ T8932] bond56 (unregistering): (slave batadv96): Releasing backup interface [ 880.117851][ T8932] bond56 (unregistering): Released all slaves [ 880.130387][ T8935] bond72 (unregistering): (slave batadv246): Releasing backup interface [ 880.153375][ T8935] bond72 (unregistering): Released all slaves [ 880.163581][ T8934] bridge71: port 1(bond0) entered blocking state [ 880.170028][ T8934] bridge71: port 1(bond0) entered disabled state [ 880.177380][ T8934] bond0: entered allmulticast mode [ 880.995971][ T3166] usb usb6-port1: attempt power cycle 15:26:42 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x10001, 0x200080) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000240)={0x6, "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"}) (async, rerun: 32) r2 = socket(0x10, 0x803, 0x0) (rerun: 32) sendto$inet(r2, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) write$binfmt_misc(r2, &(0x7f00000007c0)={'syz1', "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"}, 0x1004) (async, rerun: 32) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) (async, rerun: 32) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0x1) 15:26:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 21) 15:26:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'team0\x00', 0x200}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000e80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e40)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {0x0, 0x0, r3, 0x30, 0x1, @ib={0x1b, 0x0, 0x0, {"87800d9ff5fa1d5da1838f9c37e2414e"}}}}, 0xa0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100)=0x20, r3, 0x0, 0x0, 0x1}}, 0x20) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r4, 0x10, 0x0, 0x1000f4) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000180)={0x0, 0x4, [@empty, @broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote]}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) 15:26:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x6800, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:26:42 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = inotify_init1(0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = memfd_create(0x0, 0x0) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) dup3(r2, r3, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x4000080000000000) 15:26:42 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x248) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r3}]}, 0x24}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r5, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r3}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r6, 0x2, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r4, 0xffffffffffffffff, r7, r4]}, 0x4) [ 882.957310][ T3166] usb usb6-port1: unable to enumerate USB device [ 882.988538][ T8948] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 882.994961][ T8952] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 883.022740][ T8954] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 883.040345][ T8955] syzkaller1: entered promiscuous mode [ 883.045929][ T8955] syzkaller1: entered allmulticast mode [ 883.059523][ T8952] 8021q: adding VLAN 0 to HW filter on device batadv97 [ 883.070271][ T8952] bond56: (slave batadv97): Enslaving as a backup interface with an up link [ 883.087795][ T8954] 8021q: adding VLAN 0 to HW filter on device batadv247 [ 883.101416][ T8954] bond72: (slave batadv247): Enslaving as a backup interface with an up link [ 883.117378][ T8952] FAULT_INJECTION: forcing a failure. [ 883.117378][ T8952] name failslab, interval 1, probability 0, space 0, times 0 [ 883.130097][ T8952] CPU: 0 PID: 8952 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 883.140587][ T8952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 883.151104][ T8952] Call Trace: [ 883.154525][ T8952] [ 883.157912][ T8952] dump_stack_lvl+0xda/0x130 [ 883.162535][ T8952] dump_stack+0x15/0x20 [ 883.166776][ T8952] should_fail_ex+0x21f/0x230 [ 883.171746][ T8952] ? bond_update_slave_arr+0x6b/0x6a0 [ 883.177157][ T8952] __should_failslab+0x92/0xa0 [ 883.182135][ T8952] should_failslab+0x9/0x20 [ 883.186692][ T8952] slab_pre_alloc_hook+0x38/0x180 [ 883.191850][ T8952] ? bond_update_slave_arr+0x6b/0x6a0 [ 883.197279][ T8952] ? bond_update_slave_arr+0x6b/0x6a0 [ 883.202686][ T8952] __kmem_cache_alloc_node+0x48/0x1d0 [ 883.208250][ T8952] ? bond_update_slave_arr+0x6b/0x6a0 [ 883.213644][ T8952] __kmalloc+0x95/0x1a0 [ 883.217921][ T8952] bond_update_slave_arr+0x6b/0x6a0 [ 883.223172][ T8952] __bond_release_one+0x307/0xa20 [ 883.228526][ T8952] ? dump_schedule+0x470/0x470 [ 883.233372][ T8952] ? rtnl_fill_ifinfo+0x1117/0x1120 [ 883.238692][ T8952] ? tun_device_event+0x4d/0x9d0 [ 883.243674][ T8952] bond_uninit+0x1ad/0x320 [ 883.248236][ T8952] ? bond_init+0x290/0x290 [ 883.252849][ T8952] unregister_netdevice_many_notify+0xb7b/0x1070 [ 883.259236][ T8952] ? unregister_netdevice_queue+0x116/0x200 [ 883.265254][ T8952] ? list_netdevice+0x2a0/0x2a0 [ 883.270156][ T8952] rtnl_dellink+0x384/0x580 [ 883.274785][ T8952] ? __list_del_entry_valid+0x5f/0xe0 [ 883.280328][ T8952] ? _raw_spin_unlock+0x26/0x40 [ 883.285220][ T8952] ? __mutex_lock+0x21c/0x8d0 [ 883.290008][ T8952] ? rtnl_newlink+0x1600/0x1600 [ 883.294961][ T8952] rtnetlink_rcv_msg+0x807/0x8c0 [ 883.299943][ T8952] ? slab_post_alloc_hook+0x8c/0x340 [ 883.305322][ T8952] ? kmem_cache_alloc+0x10f/0x220 [ 883.310579][ T8952] ? xas_load+0x37c/0x390 [ 883.315025][ T8952] ? skb_release_data+0x542/0x560 [ 883.320079][ T8952] ? kmem_cache_free+0x1db/0x3a0 [ 883.325050][ T8952] ? __kfree_skb+0x104/0x140 [ 883.329769][ T8952] ? nlmon_xmit+0x4b/0x60 [ 883.334186][ T8952] ? __kfree_skb+0x104/0x140 [ 883.338819][ T8952] ? consume_skb+0x57/0x180 [ 883.343371][ T8952] ? nlmon_xmit+0x4b/0x60 [ 883.347748][ T8952] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 883.353356][ T8952] ? ref_tracker_free+0x3a1/0x400 [ 883.358599][ T8952] ? __dev_queue_xmit+0xabb/0x1d10 [ 883.363770][ T8952] netlink_rcv_skb+0x126/0x220 [ 883.368581][ T8952] ? rtnetlink_bind+0x60/0x60 [ 883.373445][ T8952] rtnetlink_rcv+0x1c/0x20 [ 883.377897][ T8952] netlink_unicast+0x56f/0x640 [ 883.382703][ T8952] netlink_sendmsg+0x665/0x770 [ 883.387730][ T8952] ? netlink_getsockopt+0x3e0/0x3e0 [ 883.393032][ T8952] ____sys_sendmsg+0x37c/0x4d0 [ 883.397848][ T8952] __sys_sendmsg+0x1e9/0x270 [ 883.402508][ T8952] __x64_sys_sendmsg+0x46/0x50 [ 883.407347][ T8952] do_syscall_64+0x41/0xc0 [ 883.411790][ T8952] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 883.417818][ T8952] RIP: 0033:0x7f6f42996ae9 15:26:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'team0\x00', 0x200}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000e80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e40)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {0x0, 0x0, r3, 0x30, 0x1, @ib={0x1b, 0x0, 0x0, {"87800d9ff5fa1d5da1838f9c37e2414e"}}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100)=0x20, r3, 0x0, 0x0, 0x1}}, 0x20) (async) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r4, 0x10, 0x0, 0x1000f4) (async) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000180)={0x0, 0x4, [@empty, @broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote]}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) [ 883.422299][ T8952] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 883.442151][ T8952] RSP: 002b:00007f6f41d190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 883.450619][ T8952] RAX: ffffffffffffffda RBX: 00007f6f42ab5f80 RCX: 00007f6f42996ae9 [ 883.458624][ T8952] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 883.466715][ T8952] RBP: 00007f6f41d19120 R08: 0000000000000000 R09: 0000000000000000 [ 883.474787][ T8952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 883.482825][ T8952] R13: 000000000000000b R14: 00007f6f42ab5f80 R15: 00007ffc381e1498 [ 883.490831][ T8952] [ 883.504895][ T8952] bond56 (unregistering): (slave batadv97): Releasing backup interface 15:26:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x6c00, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:26:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = inotify_init1(0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = memfd_create(0x0, 0x0) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) dup3(r2, r3, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000080)='./file0\x00', 0xee01, 0xee00) 15:26:43 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'team0\x00', 0x200}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000e80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e40), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000e80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e40)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {0x0, 0x0, r3, 0x30, 0x1, @ib={0x1b, 0x0, 0x0, {"87800d9ff5fa1d5da1838f9c37e2414e"}}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {0x0, 0x0, r3, 0x30, 0x1, @ib={0x1b, 0x0, 0x0, {"87800d9ff5fa1d5da1838f9c37e2414e"}}}}, 0xa0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100)=0x20, r3, 0x0, 0x0, 0x1}}, 0x20) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r4, 0x10, 0x0, 0x1000f4) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000180)={0x0, 0x4, [@empty, @broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote]}) (async) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000180)={0x0, 0x4, [@empty, @broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote]}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) [ 883.526707][ T8952] bond56 (unregistering): Released all slaves 15:26:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 22) [ 883.576800][ T8976] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 883.586667][ T8974] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 883.616038][ T8981] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:26:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x60001, 0x0) [ 883.640180][ T8976] 8021q: adding VLAN 0 to HW filter on device batadv248 [ 883.650510][ T8976] bond73: (slave batadv248): Enslaving as a backup interface with an up link [ 883.665040][ T8981] 8021q: adding VLAN 0 to HW filter on device batadv98 [ 883.673313][ T8981] bond56: (slave batadv98): Enslaving as a backup interface with an up link [ 883.693621][ T8981] FAULT_INJECTION: forcing a failure. [ 883.693621][ T8981] name failslab, interval 1, probability 0, space 0, times 0 [ 883.706495][ T8981] CPU: 1 PID: 8981 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 883.716856][ T8981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 883.727005][ T8981] Call Trace: [ 883.730307][ T8981] [ 883.733261][ T8981] dump_stack_lvl+0xda/0x130 [ 883.738032][ T8981] dump_stack+0x15/0x20 [ 883.742297][ T8981] should_fail_ex+0x21f/0x230 [ 883.746998][ T8981] ? bond_update_slave_arr+0x96/0x6a0 [ 883.752396][ T8981] __should_failslab+0x92/0xa0 [ 883.757182][ T8981] should_failslab+0x9/0x20 [ 883.761711][ T8981] slab_pre_alloc_hook+0x38/0x180 [ 883.766843][ T8981] ? bond_update_slave_arr+0x96/0x6a0 [ 883.772270][ T8981] ? bond_update_slave_arr+0x96/0x6a0 [ 883.777671][ T8981] __kmem_cache_alloc_node+0x48/0x1d0 [ 883.783115][ T8981] ? bond_update_slave_arr+0x96/0x6a0 [ 883.788523][ T8981] __kmalloc+0x95/0x1a0 [ 883.792745][ T8981] bond_update_slave_arr+0x96/0x6a0 [ 883.798196][ T8981] __bond_release_one+0x307/0xa20 [ 883.803367][ T8981] ? dump_schedule+0x470/0x470 [ 883.808205][ T8981] ? rtnl_fill_ifinfo+0x1117/0x1120 [ 883.813509][ T8981] ? tun_device_event+0x4d/0x9d0 [ 883.818486][ T8981] bond_uninit+0x1ad/0x320 [ 883.822937][ T8981] ? bond_init+0x290/0x290 [ 883.827392][ T8981] unregister_netdevice_many_notify+0xb7b/0x1070 [ 883.833778][ T8981] ? unregister_netdevice_queue+0x116/0x200 [ 883.839740][ T8981] ? list_netdevice+0x2a0/0x2a0 [ 883.844652][ T8981] rtnl_dellink+0x384/0x580 [ 883.849248][ T8981] ? security_capable+0x5e/0x80 [ 883.854120][ T8981] ? ns_capable+0x7c/0xb0 [ 883.858488][ T8981] ? rtnl_newlink+0x1600/0x1600 [ 883.863391][ T8981] rtnetlink_rcv_msg+0x807/0x8c0 [ 883.868487][ T8981] ? slab_post_alloc_hook+0x8c/0x340 [ 883.873984][ T8981] ? kmem_cache_alloc+0x10f/0x220 [ 883.879115][ T8981] ? xas_load+0x37c/0x390 [ 883.883527][ T8981] ? skb_release_data+0x542/0x560 [ 883.888591][ T8981] ? kmem_cache_free+0x1db/0x3a0 [ 883.893663][ T8981] ? __kfree_skb+0x104/0x140 [ 883.898289][ T8981] ? nlmon_xmit+0x4b/0x60 [ 883.902651][ T8981] ? __kfree_skb+0x104/0x140 [ 883.907328][ T8981] ? consume_skb+0x57/0x180 [ 883.911888][ T8981] ? nlmon_xmit+0x4b/0x60 [ 883.916266][ T8981] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 883.921640][ T8981] ? ref_tracker_free+0x3a1/0x400 [ 883.926699][ T8981] ? __dev_queue_xmit+0xabb/0x1d10 [ 883.931883][ T8981] netlink_rcv_skb+0x126/0x220 [ 883.936814][ T8981] ? rtnetlink_bind+0x60/0x60 [ 883.941654][ T8981] rtnetlink_rcv+0x1c/0x20 [ 883.946107][ T8981] netlink_unicast+0x56f/0x640 [ 883.950956][ T8981] netlink_sendmsg+0x665/0x770 [ 883.955754][ T8981] ? netlink_getsockopt+0x3e0/0x3e0 [ 883.960983][ T8981] ____sys_sendmsg+0x37c/0x4d0 [ 883.965866][ T8981] __sys_sendmsg+0x1e9/0x270 [ 883.970545][ T8981] __x64_sys_sendmsg+0x46/0x50 [ 883.975406][ T8981] do_syscall_64+0x41/0xc0 [ 883.979865][ T8981] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 883.985851][ T8981] RIP: 0033:0x7f6f42996ae9 [ 883.990292][ T8981] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 884.010010][ T8981] RSP: 002b:00007f6f41d190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 884.018504][ T8981] RAX: ffffffffffffffda RBX: 00007f6f42ab5f80 RCX: 00007f6f42996ae9 [ 884.026505][ T8981] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 884.034517][ T8981] RBP: 00007f6f41d19120 R08: 0000000000000000 R09: 0000000000000000 [ 884.042595][ T8981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 884.050584][ T8981] R13: 000000000000000b R14: 00007f6f42ab5f80 R15: 00007ffc381e1498 [ 884.058583][ T8981] [ 884.061858][ T8981] bond56 (unregistering): (slave batadv98): Releasing backup interface [ 884.083412][ T8981] bond56 (unregistering): Released all slaves [ 884.095543][ T8976] bond73 (unregistering): (slave batadv248): Releasing backup interface [ 884.116459][ T8976] bond73 (unregistering): Released all slaves [ 885.345926][T26358] usb usb6-port1: attempt power cycle 15:26:47 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x10001, 0x200080) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000240)={0x6, "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"}) r2 = socket(0x10, 0x803, 0x0) sendto$inet(r2, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write$binfmt_misc(r2, &(0x7f00000007c0)={'syz1', "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"}, 0x1004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) (async) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0x1) 15:26:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 23) 15:26:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x60001, 0x0) 15:26:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x7400, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:26:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = inotify_init1(0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = memfd_create(0x0, 0x0) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) dup3(r2, r3, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000080)='./file0\x00', 0xee01, 0xee00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) inotify_init1(0x0) (async) syz_open_procfs(0x0, 0x0) (async) memfd_create(0x0, 0x0) (async) syz_usbip_server_init(0x0) (async) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) (async) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async) dup3(r2, r3, 0x0) (async) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) chown(&(0x7f0000000080)='./file0\x00', 0xee01, 0xee00) (async) 15:26:47 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x248) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r3}]}, 0x24}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r5, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r3}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r6, 0x2, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r4, 0xffffffffffffffff, r7, r4]}, 0x4) [ 887.316014][T26358] usb usb6-port1: unable to enumerate USB device [ 887.352406][ T8994] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 15:26:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = inotify_init1(0x0) r2 = syz_open_procfs(0x0, 0x0) (async) r3 = memfd_create(0x0, 0x0) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) (async) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async, rerun: 32) dup3(r2, r3, 0x0) (async, rerun: 32) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000080)='./file0\x00', 0xee01, 0xee00) [ 887.358742][ T8997] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 887.394998][ T8993] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 887.403854][ T9017] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 887.431725][ T8994] 8021q: adding VLAN 0 to HW filter on device batadv249 [ 887.440404][ T8994] bond73: (slave batadv249): Enslaving as a backup interface with an up link [ 887.449710][ T8996] syzkaller1: entered promiscuous mode [ 887.455220][ T8996] syzkaller1: entered allmulticast mode [ 887.470721][ T9018] 8021q: adding VLAN 0 to HW filter on device batadv99 [ 887.479227][ T9018] bond56: (slave batadv99): Enslaving as a backup interface with an up link 15:26:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x60001, 0x0) [ 887.491778][ T8994] bond73 (unregistering): (slave batadv249): Releasing backup interface [ 887.508483][ T8994] bond73 (unregistering): Released all slaves [ 887.522762][ T8993] bond56 (unregistering): (slave batadv99): Releasing backup interface [ 887.531347][ T8993] FAULT_INJECTION: forcing a failure. [ 887.531347][ T8993] name failslab, interval 1, probability 0, space 0, times 0 [ 887.544781][ T8993] CPU: 0 PID: 8993 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 887.555133][ T8993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 887.565417][ T8993] Call Trace: [ 887.568712][ T8993] [ 887.571663][ T8993] dump_stack_lvl+0xda/0x130 [ 887.576380][ T8993] dump_stack+0x15/0x20 [ 887.580567][ T8993] should_fail_ex+0x21f/0x230 [ 887.585268][ T8993] ? netdevice_event+0x2b6/0x610 [ 887.590328][ T8993] __should_failslab+0x92/0xa0 [ 887.595118][ T8993] should_failslab+0x9/0x20 [ 887.599745][ T8993] slab_pre_alloc_hook+0x38/0x180 [ 887.604848][ T8993] ? netdevice_event+0x2b6/0x610 [ 887.609890][ T8993] __kmem_cache_alloc_node+0x48/0x1d0 [ 887.615373][ T8993] ? netdevice_event+0x2b6/0x610 [ 887.620350][ T8993] kmalloc_trace+0x2a/0xa0 [ 887.624898][ T8993] netdevice_event+0x2b6/0x610 [ 887.629700][ T8993] ? _raw_spin_lock_irqsave+0x3c/0xa0 [ 887.635148][ T8993] ? _raw_spin_unlock_irqrestore+0x2b/0x50 [ 887.641000][ T8993] ? netdevice_event+0x610/0x610 [ 887.645974][ T8993] ? add_default_gids+0xb0/0xb0 [ 887.650853][ T8993] ? cfg802154_netdev_notifier_call+0xa1/0x3b0 [ 887.657126][ T8993] ? inet6addr_event+0xa0/0xa0 [ 887.661913][ T8993] raw_notifier_call_chain+0x6b/0x1c0 [ 887.667312][ T8993] call_netdevice_notifiers+0xc8/0x130 [ 887.673079][ T8993] __bond_release_one+0x62f/0xa20 [ 887.678143][ T8993] bond_uninit+0x1ad/0x320 [ 887.682719][ T8993] ? bond_init+0x290/0x290 [ 887.687174][ T8993] unregister_netdevice_many_notify+0xb7b/0x1070 [ 887.693552][ T8993] ? unregister_netdevice_queue+0x116/0x200 [ 887.699564][ T8993] ? list_netdevice+0x2a0/0x2a0 [ 887.704607][ T8993] rtnl_dellink+0x384/0x580 [ 887.709267][ T8993] ? __list_del_entry_valid+0x5f/0xe0 [ 887.714702][ T8993] ? _raw_spin_unlock+0x26/0x40 [ 887.719649][ T8993] ? __mutex_lock+0x21c/0x8d0 [ 887.724384][ T8993] ? rtnl_newlink+0x1600/0x1600 [ 887.729271][ T8993] rtnetlink_rcv_msg+0x807/0x8c0 [ 887.734252][ T8993] ? slab_post_alloc_hook+0x8c/0x340 [ 887.739598][ T8993] ? try_charge_memcg+0xb45/0xd20 [ 887.744784][ T8993] ? xas_load+0x37c/0x390 [ 887.749161][ T8993] ? skb_release_data+0x542/0x560 [ 887.754407][ T8993] ? kmem_cache_free+0x1db/0x3a0 [ 887.759389][ T8993] ? __kfree_skb+0x104/0x140 [ 887.764201][ T8993] ? nlmon_xmit+0x4b/0x60 [ 887.768554][ T8993] ? __kfree_skb+0x104/0x140 [ 887.773244][ T8993] ? consume_skb+0x57/0x180 [ 887.778023][ T8993] ? nlmon_xmit+0x4b/0x60 [ 887.782842][ T8993] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 887.788171][ T8993] ? ref_tracker_free+0x3a1/0x400 [ 887.793299][ T8993] ? __dev_queue_xmit+0xabb/0x1d10 [ 887.798493][ T8993] netlink_rcv_skb+0x126/0x220 [ 887.803285][ T8993] ? rtnetlink_bind+0x60/0x60 [ 887.808081][ T8993] rtnetlink_rcv+0x1c/0x20 [ 887.812630][ T8993] netlink_unicast+0x56f/0x640 [ 887.817562][ T8993] netlink_sendmsg+0x665/0x770 [ 887.822371][ T8993] ? netlink_getsockopt+0x3e0/0x3e0 [ 887.827868][ T8993] ____sys_sendmsg+0x37c/0x4d0 [ 887.832729][ T8993] __sys_sendmsg+0x1e9/0x270 [ 887.837425][ T8993] __x64_sys_sendmsg+0x46/0x50 [ 887.842337][ T8993] do_syscall_64+0x41/0xc0 [ 887.846898][ T8993] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 887.853112][ T8993] RIP: 0033:0x7f6f42996ae9 [ 887.857743][ T8993] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 887.877469][ T8993] RSP: 002b:00007f6f41d190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 887.885979][ T8993] RAX: ffffffffffffffda RBX: 00007f6f42ab5f80 RCX: 00007f6f42996ae9 15:26:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x7a00, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 887.894023][ T8993] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 887.902118][ T8993] RBP: 00007f6f41d19120 R08: 0000000000000000 R09: 0000000000000000 [ 887.910820][ T8993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 887.918891][ T8993] R13: 000000000000000b R14: 00007f6f42ab5f80 R15: 00007ffc381e1498 [ 887.927123][ T8993] 15:26:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = inotify_init1(0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = memfd_create(0x0, 0x0) r5 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f0000000140)) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r3, 0x1, 0x7f, 0x8000000000000001}) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x248200, 0x0) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x7}, 0xc) inotify_add_watch(r6, &(0x7f0000000100)='./file0/file0\x00', 0x46) r8 = accept4$llc(r3, &(0x7f0000000680)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000006c0)=0x10, 0x0) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bond0\x00'}) r10 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bond0\x00'}) r11 = ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000700)=0x0) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r14) sendmsg$unix(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)="e001e29efbb6acf7443a322c9e59", 0xe}, {&(0x7f0000000340)="0880dd6c50bb30b83ba4b3faa9d0c1c9465a9ceef7db", 0x16}, {&(0x7f0000000380)="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", 0xff}, {&(0x7f0000000480)="fd09d391ecce640e0cdbf6fb9cc60e612c48489085cc17f525bef7eb96f97046dbf23b54ecaaf82059f813effd2c3dad254658662036856a8ea72df3072d1ce41c39d83003652ff41d3b96c6c0fdc930eb04a7e3ef738237e9ca2ec9ad8e0aa28dd21a3989", 0x65}, {&(0x7f0000000500)="b630279685069a9787b3eac4aca5ff81062215522418bacbac07b9eaa3e1b9d5ed3f9bd90e99d7bbcbf851283208f7974bc6bdfc6fc31cc79ba434e5da3e07fa4c800c7a5b0aaae8bf30d4c623345222f78e30c89a04d8a3a49ec6fd1169d2390d7e5c3089fe7314776a1d77069e63c2856aff5bbe74293c", 0x78}, {&(0x7f0000000580)="3950bcc5d0304c57605f9d584605dacc9a36cbaf896e62512d4453828174d605588b4581bb19486aa9313809c95c2cf138d29ddee9f6ed4c5aeefc5d4c94dfeb602055d1bf28c610598e7bf0dd4e97011b55cf48f4d705ef58", 0x59}], 0x6, &(0x7f0000000740)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r8, r6]}}, @rights={{0x1c, 0x1, 0x1, [r9, r10, r11]}}, @cred={{0x1c, 0x1, 0x2, {r12, r14}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}], 0xb0, 0x4000000}, 0x0) write(r2, &(0x7f0000000180)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r15 = creat(&(0x7f0000000080)='./file0\x00', 0x8) dup(r15) dup3(r3, r4, 0x0) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x80000094) r16 = openat$cgroup_ro(r6, &(0x7f0000000200)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) inotify_add_watch(r16, &(0x7f0000000240)='./file0\x00', 0xa1000008) close_range(r0, 0xffffffffffffffff, 0x0) [ 887.958023][ T8993] bond56 (unregistering): Released all slaves [ 887.990048][ T9031] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 15:26:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'dvmrp0\x00', 0x200}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) write$tun(r1, &(0x7f00000001c0)={@void, @void, @ipv6=@gre_packet={0xb, 0x6, "f533e7", 0x42a, 0x2f, 0x0, @mcast2, @mcast2, {[@srh={0xbf, 0x8, 0x4, 0x4, 0x2, 0x50, 0x28e, [@dev={0xfe, 0x80, '\x00', 0x3f}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xff, 0x3, [0x5, 0x7f], "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"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x8, 0x3], "2a2d9f5a970a1be2e7192cb219f14e7ccdeff937491d622fb13ec286c61218e90d593cd76f85c1496c4813d3b1c90790b05b813fb3ac18dce6e7c824fcab86d4121daaa6b991fb9953557ff483a55589cf24bdade1e44bfb44bdc40713a71b71950643fa511bb96a18193a4cb144d8de54f21608aa79d905a954593201e4329f19462c330cc0b595d48305cd851c0ff368dfb9d2821a6bd179d41371536a182ca186ee30e2b3b6824b1ed9f2692793a06ea3f3055c763c1dd7b16f8f783ec361ae889b8bebe0884401eff1884d0375e3bd40444651d09e"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "dcdf4af46da10f8e84f4cd59828dfb653f66f1c88ceefb6c61297e13bb6cbf7caff296a8acd1b6f72d256934590c31896aef7a93918a8a3887f32db4325ce9f79d852d6c4d67b9938660c55db91fe10dc78bb39d7063d78730f617e013d266a551d9b83f7ab15d90025ab2492d406e63a3b5a238c8bbdaad254ef9bf564cefea6e95fb0792d8570aa8c95077d329f0367cadde0fe4d940b9d10537a0bc9c5b7b18cf7d5c97df56555b9ff83897484a90730c1b0ed016c9bc97acf2e5dc28ac1fdda53a6d8ad371bcd4bb1bf3f3086cfcacbcd35b1c163221b803f64da2e00b9c0738"}, {0x8, 0x88be, 0x0, {{0x8, 0x1, 0x7c, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x1, {0x3f}}}, {0x8, 0x22eb, 0x0, {{0x7, 0x2, 0x3f, 0x1, 0x0, 0x3, 0x5, 0x2}, 0x2, {0xfffffffd, 0x7, 0x0, 0x8, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "d44868ace542cb75e05a60b11f8392320005f81055ff3882dc12020257a255446948ddccf135998aa6dbba3e0c5e3a90238dedd1aeec1f68e1980602ede19b073e98e850f4f24db88cccf0e5fddb3fcc7ef8ad0793f0afaae43c533b4e3a41b085248d753ed3342e3fb9b1d48a11c57224c1abfbbeac4ba6d5e1efcea751db74c68d69703ee5206edb95f7254a644d9320e1d5f5cfa045a3948223c12a1cb0462b80cc8547b19f0027b1fc0079c903c6ad3f22a7bf73df715bf5f264908120ff6e439f61cd246da8562784ae4134403882ab5da7d35f1b536f5fe21cc07e"}}}}}, 0x452) socket$tipc(0x1e, 0x2, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x9, 0x424000) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3, 0x2}, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/module/gspca_topro', 0x10900, 0x22) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000680)={'macsec0\x00', 0x8000}) 15:26:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 24) [ 888.014004][ T9035] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 888.039952][ T9031] 8021q: adding VLAN 0 to HW filter on device batadv250 [ 888.049356][ T9031] bond73: (slave batadv250): Enslaving as a backup interface with an up link [ 888.067395][ T9031] bond73 (unregistering): (slave batadv250): Releasing backup interface [ 888.088846][ T9031] bond73 (unregistering): Released all slaves [ 888.099408][ T9039] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 888.121708][ T9039] 8021q: adding VLAN 0 to HW filter on device batadv100 [ 888.131830][ T9039] bond56: (slave batadv100): Enslaving as a backup interface with an up link [ 888.150893][ T9039] bond56 (unregistering): (slave batadv100): Releasing backup interface [ 888.168418][ T9039] FAULT_INJECTION: forcing a failure. [ 888.168418][ T9039] name failslab, interval 1, probability 0, space 0, times 0 [ 888.183330][ T9039] CPU: 0 PID: 9039 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 888.199180][ T9039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 888.209525][ T9039] Call Trace: [ 888.213081][ T9039] [ 888.216026][ T9039] dump_stack_lvl+0xda/0x130 [ 888.221235][ T9039] dump_stack+0x15/0x20 [ 888.225599][ T9039] should_fail_ex+0x21f/0x230 [ 888.230398][ T9039] ? ethnl_default_notify+0x7c/0x410 [ 888.236090][ T9039] __should_failslab+0x92/0xa0 [ 888.241183][ T9039] should_failslab+0x9/0x20 [ 888.245951][ T9039] slab_pre_alloc_hook+0x38/0x180 [ 888.251307][ T9039] ? ethnl_default_notify+0x7c/0x410 [ 888.256700][ T9039] ? ethnl_default_notify+0x7c/0x410 [ 888.262360][ T9039] __kmem_cache_alloc_node+0x48/0x1d0 [ 888.267844][ T9039] ? ethnl_default_notify+0x7c/0x410 [ 888.273237][ T9039] __kmalloc+0x95/0x1a0 [ 888.277437][ T9039] ethnl_default_notify+0x7c/0x410 [ 888.282746][ T9039] ? __dev_map_entry_free+0xb0/0xb0 [ 888.287981][ T9039] ? dev_map_notification+0x3ac/0x4f0 [ 888.293758][ T9039] ethtool_notify+0xb7/0x190 [ 888.302270][ T9039] ? ethnl_default_set_doit+0x4d0/0x4d0 [ 888.307963][ T9039] ethnl_netdev_event+0x41/0x50 [ 888.314019][ T9039] raw_notifier_call_chain+0x6b/0x1c0 [ 888.321542][ T9039] netdev_change_features+0xce/0x130 [ 888.327018][ T9039] bond_compute_features+0x3c9/0x3f0 [ 888.332443][ T9039] __bond_release_one+0x64c/0xa20 [ 888.337518][ T9039] ? tun_device_event+0x4d/0x9d0 [ 888.344026][ T9039] bond_uninit+0x1ad/0x320 [ 888.348532][ T9039] ? bond_init+0x290/0x290 [ 888.353154][ T9039] unregister_netdevice_many_notify+0xb7b/0x1070 [ 888.359585][ T9039] ? unregister_netdevice_queue+0x116/0x200 [ 888.365644][ T9039] ? list_netdevice+0x2a0/0x2a0 [ 888.370665][ T9039] rtnl_dellink+0x384/0x580 [ 888.375268][ T9039] ? security_capable+0x5e/0x80 [ 888.380176][ T9039] ? ns_capable+0x7c/0xb0 [ 888.384534][ T9039] ? rtnl_newlink+0x1600/0x1600 [ 888.389493][ T9039] rtnetlink_rcv_msg+0x807/0x8c0 [ 888.394539][ T9039] ? __rcu_read_unlock+0x4d/0x70 [ 888.399613][ T9039] ? __refill_stock+0x7f/0xb0 [ 888.404327][ T9039] ? try_charge_memcg+0xaff/0xd20 [ 888.409502][ T9039] ? xas_load+0x37c/0x390 [ 888.413909][ T9039] ? skb_release_data+0x542/0x560 [ 888.419048][ T9039] ? kmem_cache_free+0x1db/0x3a0 [ 888.424320][ T9039] ? __kfree_skb+0x104/0x140 [ 888.428982][ T9039] ? nlmon_xmit+0x4b/0x60 [ 888.433364][ T9039] ? __kfree_skb+0x104/0x140 [ 888.438001][ T9039] ? consume_skb+0x57/0x180 [ 888.442613][ T9039] ? nlmon_xmit+0x4b/0x60 [ 888.446977][ T9039] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 888.452387][ T9039] ? ref_tracker_free+0x3a1/0x400 [ 888.457474][ T9039] ? __dev_queue_xmit+0xabb/0x1d10 [ 888.462714][ T9039] netlink_rcv_skb+0x126/0x220 [ 888.467963][ T9039] ? rtnetlink_bind+0x60/0x60 [ 888.472706][ T9039] rtnetlink_rcv+0x1c/0x20 [ 888.477190][ T9039] netlink_unicast+0x56f/0x640 [ 888.482075][ T9039] netlink_sendmsg+0x665/0x770 [ 888.486873][ T9039] ? netlink_getsockopt+0x3e0/0x3e0 [ 888.492319][ T9039] ____sys_sendmsg+0x37c/0x4d0 [ 888.497131][ T9039] __sys_sendmsg+0x1e9/0x270 [ 888.501809][ T9039] __x64_sys_sendmsg+0x46/0x50 [ 888.506645][ T9039] do_syscall_64+0x41/0xc0 [ 888.511168][ T9039] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 888.517173][ T9039] RIP: 0033:0x7f6f42996ae9 [ 888.521606][ T9039] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 888.541391][ T9039] RSP: 002b:00007f6f41d190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 888.550006][ T9039] RAX: ffffffffffffffda RBX: 00007f6f42ab5f80 RCX: 00007f6f42996ae9 [ 888.558006][ T9039] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 888.566108][ T9039] RBP: 00007f6f41d19120 R08: 0000000000000000 R09: 0000000000000000 [ 888.574238][ T9039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 888.582490][ T9039] R13: 000000000000000b R14: 00007f6f42ab5f80 R15: 00007ffc381e1498 [ 888.591023][ T9039] [ 888.607023][ T9039] bond56 (unregistering): Released all slaves [ 889.326077][ T3201] usb usb6-port1: attempt power cycle 15:26:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x7c00, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:26:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'dvmrp0\x00', 0x200}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async, rerun: 32) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) (rerun: 32) write$tun(r1, &(0x7f00000001c0)={@void, @void, @ipv6=@gre_packet={0xb, 0x6, "f533e7", 0x42a, 0x2f, 0x0, @mcast2, @mcast2, {[@srh={0xbf, 0x8, 0x4, 0x4, 0x2, 0x50, 0x28e, [@dev={0xfe, 0x80, '\x00', 0x3f}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xff, 0x3, [0x5, 0x7f], "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"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x8, 0x3], "2a2d9f5a970a1be2e7192cb219f14e7ccdeff937491d622fb13ec286c61218e90d593cd76f85c1496c4813d3b1c90790b05b813fb3ac18dce6e7c824fcab86d4121daaa6b991fb9953557ff483a55589cf24bdade1e44bfb44bdc40713a71b71950643fa511bb96a18193a4cb144d8de54f21608aa79d905a954593201e4329f19462c330cc0b595d48305cd851c0ff368dfb9d2821a6bd179d41371536a182ca186ee30e2b3b6824b1ed9f2692793a06ea3f3055c763c1dd7b16f8f783ec361ae889b8bebe0884401eff1884d0375e3bd40444651d09e"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "dcdf4af46da10f8e84f4cd59828dfb653f66f1c88ceefb6c61297e13bb6cbf7caff296a8acd1b6f72d256934590c31896aef7a93918a8a3887f32db4325ce9f79d852d6c4d67b9938660c55db91fe10dc78bb39d7063d78730f617e013d266a551d9b83f7ab15d90025ab2492d406e63a3b5a238c8bbdaad254ef9bf564cefea6e95fb0792d8570aa8c95077d329f0367cadde0fe4d940b9d10537a0bc9c5b7b18cf7d5c97df56555b9ff83897484a90730c1b0ed016c9bc97acf2e5dc28ac1fdda53a6d8ad371bcd4bb1bf3f3086cfcacbcd35b1c163221b803f64da2e00b9c0738"}, {0x8, 0x88be, 0x0, {{0x8, 0x1, 0x7c, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x1, {0x3f}}}, {0x8, 0x22eb, 0x0, {{0x7, 0x2, 0x3f, 0x1, 0x0, 0x3, 0x5, 0x2}, 0x2, {0xfffffffd, 0x7, 0x0, 0x8, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "d44868ace542cb75e05a60b11f8392320005f81055ff3882dc12020257a255446948ddccf135998aa6dbba3e0c5e3a90238dedd1aeec1f68e1980602ede19b073e98e850f4f24db88cccf0e5fddb3fcc7ef8ad0793f0afaae43c533b4e3a41b085248d753ed3342e3fb9b1d48a11c57224c1abfbbeac4ba6d5e1efcea751db74c68d69703ee5206edb95f7254a644d9320e1d5f5cfa045a3948223c12a1cb0462b80cc8547b19f0027b1fc0079c903c6ad3f22a7bf73df715bf5f264908120ff6e439f61cd246da8562784ae4134403882ab5da7d35f1b536f5fe21cc07e"}}}}}, 0x452) socket$tipc(0x1e, 0x2, 0x0) (async) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x9, 0x424000) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3, 0x2}, 0x10) (async, rerun: 64) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) (rerun: 64) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/module/gspca_topro', 0x10900, 0x22) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000680)={'macsec0\x00', 0x8000}) 15:26:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r2 = inotify_init1(0x0) (rerun: 32) r3 = syz_open_procfs(0x0, 0x0) (async, rerun: 32) r4 = memfd_create(0x0, 0x0) (rerun: 32) r5 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f0000000140)) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r3, 0x1, 0x7f, 0x8000000000000001}) (async) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x248200, 0x0) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x7}, 0xc) (async) inotify_add_watch(r6, &(0x7f0000000100)='./file0/file0\x00', 0x46) (async) r8 = accept4$llc(r3, &(0x7f0000000680)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000006c0)=0x10, 0x0) (async) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bond0\x00'}) r10 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bond0\x00'}) r11 = ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) (async) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000700)=0x0) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r14) sendmsg$unix(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)="e001e29efbb6acf7443a322c9e59", 0xe}, {&(0x7f0000000340)="0880dd6c50bb30b83ba4b3faa9d0c1c9465a9ceef7db", 0x16}, {&(0x7f0000000380)="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", 0xff}, {&(0x7f0000000480)="fd09d391ecce640e0cdbf6fb9cc60e612c48489085cc17f525bef7eb96f97046dbf23b54ecaaf82059f813effd2c3dad254658662036856a8ea72df3072d1ce41c39d83003652ff41d3b96c6c0fdc930eb04a7e3ef738237e9ca2ec9ad8e0aa28dd21a3989", 0x65}, {&(0x7f0000000500)="b630279685069a9787b3eac4aca5ff81062215522418bacbac07b9eaa3e1b9d5ed3f9bd90e99d7bbcbf851283208f7974bc6bdfc6fc31cc79ba434e5da3e07fa4c800c7a5b0aaae8bf30d4c623345222f78e30c89a04d8a3a49ec6fd1169d2390d7e5c3089fe7314776a1d77069e63c2856aff5bbe74293c", 0x78}, {&(0x7f0000000580)="3950bcc5d0304c57605f9d584605dacc9a36cbaf896e62512d4453828174d605588b4581bb19486aa9313809c95c2cf138d29ddee9f6ed4c5aeefc5d4c94dfeb602055d1bf28c610598e7bf0dd4e97011b55cf48f4d705ef58", 0x59}], 0x6, &(0x7f0000000740)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r8, r6]}}, @rights={{0x1c, 0x1, 0x1, [r9, r10, r11]}}, @cred={{0x1c, 0x1, 0x2, {r12, r14}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}], 0xb0, 0x4000000}, 0x0) (async) write(r2, &(0x7f0000000180)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) (async, rerun: 32) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async, rerun: 32) r15 = creat(&(0x7f0000000080)='./file0\x00', 0x8) dup(r15) dup3(r3, r4, 0x0) (async, rerun: 64) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x80000094) (async, rerun: 64) r16 = openat$cgroup_ro(r6, &(0x7f0000000200)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) inotify_add_watch(r16, &(0x7f0000000240)='./file0\x00', 0xa1000008) close_range(r0, 0xffffffffffffffff, 0x0) 15:26:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 25) 15:26:51 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x2) 15:26:51 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x248) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) [ 891.286099][ T3201] usb usb6-port1: unable to enumerate USB device [ 891.321158][ T9052] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 15:26:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = inotify_init1(0x0) (async) r3 = syz_open_procfs(0x0, 0x0) (async) r4 = memfd_create(0x0, 0x0) (async) r5 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f0000000140)) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r3, 0x1, 0x7f, 0x8000000000000001}) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x248200, 0x0) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x7}, 0xc) (async) inotify_add_watch(r6, &(0x7f0000000100)='./file0/file0\x00', 0x46) (async) r8 = accept4$llc(r3, &(0x7f0000000680)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000006c0)=0x10, 0x0) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bond0\x00'}) (async) r10 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bond0\x00'}) (async) r11 = ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) (async) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000700)=0x0) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r14) (async) sendmsg$unix(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)="e001e29efbb6acf7443a322c9e59", 0xe}, {&(0x7f0000000340)="0880dd6c50bb30b83ba4b3faa9d0c1c9465a9ceef7db", 0x16}, {&(0x7f0000000380)="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", 0xff}, {&(0x7f0000000480)="fd09d391ecce640e0cdbf6fb9cc60e612c48489085cc17f525bef7eb96f97046dbf23b54ecaaf82059f813effd2c3dad254658662036856a8ea72df3072d1ce41c39d83003652ff41d3b96c6c0fdc930eb04a7e3ef738237e9ca2ec9ad8e0aa28dd21a3989", 0x65}, {&(0x7f0000000500)="b630279685069a9787b3eac4aca5ff81062215522418bacbac07b9eaa3e1b9d5ed3f9bd90e99d7bbcbf851283208f7974bc6bdfc6fc31cc79ba434e5da3e07fa4c800c7a5b0aaae8bf30d4c623345222f78e30c89a04d8a3a49ec6fd1169d2390d7e5c3089fe7314776a1d77069e63c2856aff5bbe74293c", 0x78}, {&(0x7f0000000580)="3950bcc5d0304c57605f9d584605dacc9a36cbaf896e62512d4453828174d605588b4581bb19486aa9313809c95c2cf138d29ddee9f6ed4c5aeefc5d4c94dfeb602055d1bf28c610598e7bf0dd4e97011b55cf48f4d705ef58", 0x59}], 0x6, &(0x7f0000000740)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r8, r6]}}, @rights={{0x1c, 0x1, 0x1, [r9, r10, r11]}}, @cred={{0x1c, 0x1, 0x2, {r12, r14}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}], 0xb0, 0x4000000}, 0x0) (async) write(r2, &(0x7f0000000180)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async) r15 = creat(&(0x7f0000000080)='./file0\x00', 0x8) dup(r15) dup3(r3, r4, 0x0) (async) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x80000094) r16 = openat$cgroup_ro(r6, &(0x7f0000000200)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) inotify_add_watch(r16, &(0x7f0000000240)='./file0\x00', 0xa1000008) (async) close_range(r0, 0xffffffffffffffff, 0x0) [ 891.327829][ T9051] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 891.346092][ T9048] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 891.377647][ T9052] 8021q: adding VLAN 0 to HW filter on device batadv251 [ 891.388101][ T9052] bond73: (slave batadv251): Enslaving as a backup interface with an up link [ 891.397661][ T9049] syzkaller1: entered promiscuous mode [ 891.403199][ T9049] syzkaller1: entered allmulticast mode 15:26:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = inotify_init1(0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r3, 0x10, 0x400000000, 0x0) inotify_rm_watch(r3, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = memfd_create(0x0, 0x0) r6 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000140)) write(r5, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bond0\x00'}) fstatfs(r7, &(0x7f00000003c0)=""/78) dup(r5) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendto$inet(r10, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00a80010000104000002cf08000000005dee008f7810b0ea7d5a9b2700548135b1f8872cb70998f9e881b6f47f95e29354f44d60bffab46787cd5201dc5189aed64c134f69fd0fdbaf9fe1f00a53edb3a476cc355df24ccd4efd6dd63dc3c57612ffffffff04bd5c1fb8f58410a70d1169e066998bc6f2529075eabf2b09d27bb9971edf6a", @ANYRES32=r11, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002840)=ANY=[@ANYBLOB="28000000f3000004fd0008000fa1d39300000085ac776a780ad41f0f90ac06191bfe7aba981a00", @ANYRES8=r6, @ANYRES32=r11, @ANYRESOCT=r11], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x80) fcntl$getownex(r8, 0x10, &(0x7f0000000440)) inotify_add_watch(r2, &(0x7f0000000080)='./file1\x00', 0x28) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x104, 0x70bd29, 0x27dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}}, 0x4008800) dup3(r4, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000580)=ANY=[@ANYBLOB="1c8d461bedc8b90301000000", @ANYRES32=r1, @ANYBLOB="0000003100b2ceb9e2bf0088a31e69abde14137408fdd54a4c5dd98108173ebe4213f2ac8383889f88a2266fc2e5cbb93086726391c33f0c6a59739e89924a1e44f1dd8e388216c9c43c27525606cdf235c99a879f3baadc33f28ab478294a2ff563db2ca8ab3557570aa736bc10862876e787e9f023c16e0c"]) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r12, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="01000000", @ANYRES16=0x0, @ANYBLOB="000128bd7000fddbdf250e00000008003400fe0d000008003c000080000008002c0009000000"], 0x2c}}, 0x2000000c) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x0) 15:26:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'dvmrp0\x00', 0x200}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) write$tun(r1, &(0x7f00000001c0)={@void, @void, @ipv6=@gre_packet={0xb, 0x6, "f533e7", 0x42a, 0x2f, 0x0, @mcast2, @mcast2, {[@srh={0xbf, 0x8, 0x4, 0x4, 0x2, 0x50, 0x28e, [@dev={0xfe, 0x80, '\x00', 0x3f}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xff, 0x3, [0x5, 0x7f], "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"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x8, 0x3], "2a2d9f5a970a1be2e7192cb219f14e7ccdeff937491d622fb13ec286c61218e90d593cd76f85c1496c4813d3b1c90790b05b813fb3ac18dce6e7c824fcab86d4121daaa6b991fb9953557ff483a55589cf24bdade1e44bfb44bdc40713a71b71950643fa511bb96a18193a4cb144d8de54f21608aa79d905a954593201e4329f19462c330cc0b595d48305cd851c0ff368dfb9d2821a6bd179d41371536a182ca186ee30e2b3b6824b1ed9f2692793a06ea3f3055c763c1dd7b16f8f783ec361ae889b8bebe0884401eff1884d0375e3bd40444651d09e"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "dcdf4af46da10f8e84f4cd59828dfb653f66f1c88ceefb6c61297e13bb6cbf7caff296a8acd1b6f72d256934590c31896aef7a93918a8a3887f32db4325ce9f79d852d6c4d67b9938660c55db91fe10dc78bb39d7063d78730f617e013d266a551d9b83f7ab15d90025ab2492d406e63a3b5a238c8bbdaad254ef9bf564cefea6e95fb0792d8570aa8c95077d329f0367cadde0fe4d940b9d10537a0bc9c5b7b18cf7d5c97df56555b9ff83897484a90730c1b0ed016c9bc97acf2e5dc28ac1fdda53a6d8ad371bcd4bb1bf3f3086cfcacbcd35b1c163221b803f64da2e00b9c0738"}, {0x8, 0x88be, 0x0, {{0x8, 0x1, 0x7c, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x1, {0x3f}}}, {0x8, 0x22eb, 0x0, {{0x7, 0x2, 0x3f, 0x1, 0x0, 0x3, 0x5, 0x2}, 0x2, {0xfffffffd, 0x7, 0x0, 0x8, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "d44868ace542cb75e05a60b11f8392320005f81055ff3882dc12020257a255446948ddccf135998aa6dbba3e0c5e3a90238dedd1aeec1f68e1980602ede19b073e98e850f4f24db88cccf0e5fddb3fcc7ef8ad0793f0afaae43c533b4e3a41b085248d753ed3342e3fb9b1d48a11c57224c1abfbbeac4ba6d5e1efcea751db74c68d69703ee5206edb95f7254a644d9320e1d5f5cfa045a3948223c12a1cb0462b80cc8547b19f0027b1fc0079c903c6ad3f22a7bf73df715bf5f264908120ff6e439f61cd246da8562784ae4134403882ab5da7d35f1b536f5fe21cc07e"}}}}}, 0x452) socket$tipc(0x1e, 0x2, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x9, 0x424000) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3, 0x2}, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/module/gspca_topro', 0x10900, 0x22) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000680)={'macsec0\x00', 0x8000}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'dvmrp0\x00', 0x200}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) (async) write$tun(r1, &(0x7f00000001c0)={@void, @void, @ipv6=@gre_packet={0xb, 0x6, "f533e7", 0x42a, 0x2f, 0x0, @mcast2, @mcast2, {[@srh={0xbf, 0x8, 0x4, 0x4, 0x2, 0x50, 0x28e, [@dev={0xfe, 0x80, '\x00', 0x3f}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xff, 0x3, [0x5, 0x7f], "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"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x8, 0x3], "2a2d9f5a970a1be2e7192cb219f14e7ccdeff937491d622fb13ec286c61218e90d593cd76f85c1496c4813d3b1c90790b05b813fb3ac18dce6e7c824fcab86d4121daaa6b991fb9953557ff483a55589cf24bdade1e44bfb44bdc40713a71b71950643fa511bb96a18193a4cb144d8de54f21608aa79d905a954593201e4329f19462c330cc0b595d48305cd851c0ff368dfb9d2821a6bd179d41371536a182ca186ee30e2b3b6824b1ed9f2692793a06ea3f3055c763c1dd7b16f8f783ec361ae889b8bebe0884401eff1884d0375e3bd40444651d09e"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "dcdf4af46da10f8e84f4cd59828dfb653f66f1c88ceefb6c61297e13bb6cbf7caff296a8acd1b6f72d256934590c31896aef7a93918a8a3887f32db4325ce9f79d852d6c4d67b9938660c55db91fe10dc78bb39d7063d78730f617e013d266a551d9b83f7ab15d90025ab2492d406e63a3b5a238c8bbdaad254ef9bf564cefea6e95fb0792d8570aa8c95077d329f0367cadde0fe4d940b9d10537a0bc9c5b7b18cf7d5c97df56555b9ff83897484a90730c1b0ed016c9bc97acf2e5dc28ac1fdda53a6d8ad371bcd4bb1bf3f3086cfcacbcd35b1c163221b803f64da2e00b9c0738"}, {0x8, 0x88be, 0x0, {{0x8, 0x1, 0x7c, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x1, {0x3f}}}, {0x8, 0x22eb, 0x0, {{0x7, 0x2, 0x3f, 0x1, 0x0, 0x3, 0x5, 0x2}, 0x2, {0xfffffffd, 0x7, 0x0, 0x8, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "d44868ace542cb75e05a60b11f8392320005f81055ff3882dc12020257a255446948ddccf135998aa6dbba3e0c5e3a90238dedd1aeec1f68e1980602ede19b073e98e850f4f24db88cccf0e5fddb3fcc7ef8ad0793f0afaae43c533b4e3a41b085248d753ed3342e3fb9b1d48a11c57224c1abfbbeac4ba6d5e1efcea751db74c68d69703ee5206edb95f7254a644d9320e1d5f5cfa045a3948223c12a1cb0462b80cc8547b19f0027b1fc0079c903c6ad3f22a7bf73df715bf5f264908120ff6e439f61cd246da8562784ae4134403882ab5da7d35f1b536f5fe21cc07e"}}}}}, 0x452) (async) socket$tipc(0x1e, 0x2, 0x0) (async) syz_open_dev$vcsu(&(0x7f00000000c0), 0x9, 0x424000) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3, 0x2}, 0x10) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/module/gspca_topro', 0x10900, 0x22) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000680)={'macsec0\x00', 0x8000}) (async) [ 891.444323][ T9048] 8021q: adding VLAN 0 to HW filter on device batadv101 [ 891.457993][ T9048] bond56: (slave batadv101): Enslaving as a backup interface with an up link [ 891.461231][ T9069] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 891.477943][ T9052] bond73 (unregistering): (slave batadv251): Releasing backup interface [ 891.485983][ T9069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=243 sclass=netlink_route_socket pid=9069 comm=syz-executor.0 [ 891.511824][ T9052] bond73 (unregistering): Released all slaves [ 891.524688][ T9066] bond56 (unregistering): (slave batadv101): Releasing backup interface [ 891.534298][ T9066] FAULT_INJECTION: forcing a failure. [ 891.534298][ T9066] name failslab, interval 1, probability 0, space 0, times 0 [ 891.547127][ T9066] CPU: 1 PID: 9066 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 891.557582][ T9066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 891.567693][ T9066] Call Trace: [ 891.570986][ T9066] [ 891.573938][ T9066] dump_stack_lvl+0xda/0x130 [ 891.578571][ T9066] dump_stack+0x15/0x20 [ 891.582818][ T9066] should_fail_ex+0x21f/0x230 [ 891.587563][ T9066] ? ethnl_default_notify+0xa6/0x410 [ 891.592888][ T9066] __should_failslab+0x92/0xa0 [ 891.597729][ T9066] should_failslab+0x9/0x20 [ 891.602270][ T9066] slab_pre_alloc_hook+0x38/0x180 [ 891.607334][ T9066] ? ethnl_default_notify+0xa6/0x410 [ 891.612729][ T9066] ? ethnl_default_notify+0xa6/0x410 [ 891.618077][ T9066] __kmem_cache_alloc_node+0x48/0x1d0 [ 891.623562][ T9066] ? ethnl_default_notify+0xa6/0x410 [ 891.628934][ T9066] __kmalloc+0x95/0x1a0 [ 891.633120][ T9066] ethnl_default_notify+0xa6/0x410 [ 891.638259][ T9066] ? __dev_map_entry_free+0xb0/0xb0 [ 891.643495][ T9066] ? dev_map_notification+0x3ac/0x4f0 [ 891.648937][ T9066] ethtool_notify+0xb7/0x190 [ 891.653566][ T9066] ? ethnl_default_set_doit+0x4d0/0x4d0 [ 891.659141][ T9066] ethnl_netdev_event+0x41/0x50 [ 891.664033][ T9066] raw_notifier_call_chain+0x6b/0x1c0 [ 891.669542][ T9066] netdev_change_features+0xce/0x130 [ 891.674870][ T9066] bond_compute_features+0x3c9/0x3f0 [ 891.680268][ T9066] __bond_release_one+0x64c/0xa20 [ 891.685383][ T9066] bond_uninit+0x1ad/0x320 [ 891.689832][ T9066] ? bond_init+0x290/0x290 [ 891.694362][ T9066] unregister_netdevice_many_notify+0xb7b/0x1070 [ 891.700839][ T9066] ? unregister_netdevice_queue+0x116/0x200 [ 891.706862][ T9066] ? list_netdevice+0x2a0/0x2a0 [ 891.711753][ T9066] rtnl_dellink+0x384/0x580 [ 891.716402][ T9066] ? __list_del_entry_valid+0x5f/0xe0 [ 891.721845][ T9066] ? _raw_spin_unlock+0x26/0x40 [ 891.726735][ T9066] ? __mutex_lock+0x21c/0x8d0 [ 891.731461][ T9066] ? rtnl_newlink+0x1600/0x1600 [ 891.736352][ T9066] rtnetlink_rcv_msg+0x807/0x8c0 [ 891.741338][ T9066] ? slab_post_alloc_hook+0x8c/0x340 [ 891.746694][ T9066] ? kmem_cache_alloc+0x10f/0x220 [ 891.751779][ T9066] ? xas_load+0x37c/0x390 [ 891.756143][ T9066] ? skb_release_data+0x542/0x560 [ 891.761343][ T9066] ? kmem_cache_free+0x1db/0x3a0 [ 891.766331][ T9066] ? __kfree_skb+0x104/0x140 [ 891.770962][ T9066] ? nlmon_xmit+0x4b/0x60 [ 891.775322][ T9066] ? __kfree_skb+0x104/0x140 [ 891.780002][ T9066] ? consume_skb+0x57/0x180 [ 891.785009][ T9066] ? nlmon_xmit+0x4b/0x60 [ 891.789499][ T9066] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 891.794819][ T9066] ? ref_tracker_free+0x3a1/0x400 [ 891.799932][ T9066] ? __dev_queue_xmit+0xabb/0x1d10 [ 891.805070][ T9066] netlink_rcv_skb+0x126/0x220 [ 891.809961][ T9066] ? rtnetlink_bind+0x60/0x60 [ 891.814750][ T9066] rtnetlink_rcv+0x1c/0x20 [ 891.819197][ T9066] netlink_unicast+0x56f/0x640 [ 891.824024][ T9066] netlink_sendmsg+0x665/0x770 [ 891.828866][ T9066] ? netlink_getsockopt+0x3e0/0x3e0 [ 891.834234][ T9066] ____sys_sendmsg+0x37c/0x4d0 [ 891.839052][ T9066] __sys_sendmsg+0x1e9/0x270 [ 891.843726][ T9066] __x64_sys_sendmsg+0x46/0x50 [ 891.848579][ T9066] do_syscall_64+0x41/0xc0 [ 891.853020][ T9066] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 891.858950][ T9066] RIP: 0033:0x7f6f42996ae9 [ 891.863394][ T9066] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 891.883220][ T9066] RSP: 002b:00007f6f41cf80c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 891.891689][ T9066] RAX: ffffffffffffffda RBX: 00007f6f42ab6050 RCX: 00007f6f42996ae9 [ 891.899726][ T9066] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 891.907763][ T9066] RBP: 00007f6f41cf8120 R08: 0000000000000000 R09: 0000000000000000 [ 891.915858][ T9066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 891.923982][ T9066] R13: 000000000000006e R14: 00007f6f42ab6050 R15: 00007ffc381e1498 [ 891.931995][ T9066] 15:26:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x7f00, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:26:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d9786390400129ce50000b9970fc221b1100016235a01bb690211712d0c05ab8454fa", @ANYRES32=r0, @ANYBLOB='0\x00'/16]) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'ip6tnl0\x00'}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00'}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000080)={0x0, 0x9, 0x8000000000000001}) [ 891.953143][ T9066] bond56 (unregistering): Released all slaves [ 891.975982][ T9089] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 15:26:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = inotify_init1(0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r3, 0x10, 0x400000000, 0x0) (async) fallocate(r3, 0x10, 0x400000000, 0x0) inotify_rm_watch(r3, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = memfd_create(0x0, 0x0) syz_usbip_server_init(0x0) (async) r6 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000140)) (async) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000140)) write(r5, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bond0\x00'}) fstatfs(r7, &(0x7f00000003c0)=""/78) (async) fstatfs(r7, &(0x7f00000003c0)=""/78) dup(r5) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendto$inet(r10, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00a80010000104000002cf08000000005dee008f7810b0ea7d5a9b2700548135b1f8872cb70998f9e881b6f47f95e29354f44d60bffab46787cd5201dc5189aed64c134f69fd0fdbaf9fe1f00a53edb3a476cc355df24ccd4efd6dd63dc3c57612ffffffff04bd5c1fb8f58410a70d1169e066998bc6f2529075eabf2b09d27bb9971edf6a", @ANYRES32=r11, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00a80010000104000002cf08000000005dee008f7810b0ea7d5a9b2700548135b1f8872cb70998f9e881b6f47f95e29354f44d60bffab46787cd5201dc5189aed64c134f69fd0fdbaf9fe1f00a53edb3a476cc355df24ccd4efd6dd63dc3c57612ffffffff04bd5c1fb8f58410a70d1169e066998bc6f2529075eabf2b09d27bb9971edf6a", @ANYRES32=r11, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002840)=ANY=[@ANYBLOB="28000000f3000004fd0008000fa1d39300000085ac776a780ad41f0f90ac06191bfe7aba981a00", @ANYRES8=r6, @ANYRES32=r11, @ANYRESOCT=r11], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x80) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002840)=ANY=[@ANYBLOB="28000000f3000004fd0008000fa1d39300000085ac776a780ad41f0f90ac06191bfe7aba981a00", @ANYRES8=r6, @ANYRES32=r11, @ANYRESOCT=r11], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x80) fcntl$getownex(r8, 0x10, &(0x7f0000000440)) inotify_add_watch(r2, &(0x7f0000000080)='./file1\x00', 0x28) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x104, 0x70bd29, 0x27dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}}, 0x4008800) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x104, 0x70bd29, 0x27dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}}, 0x4008800) dup3(r4, r5, 0x0) (async) dup3(r4, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000580)=ANY=[@ANYBLOB="1c8d461bedc8b90301000000", @ANYRES32=r1, @ANYBLOB="0000003100b2ceb9e2bf0088a31e69abde14137408fdd54a4c5dd98108173ebe4213f2ac8383889f88a2266fc2e5cbb93086726391c33f0c6a59739e89924a1e44f1dd8e388216c9c43c27525606cdf235c99a879f3baadc33f28ab478294a2ff563db2ca8ab3557570aa736bc10862876e787e9f023c16e0c"]) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000580)=ANY=[@ANYBLOB="1c8d461bedc8b90301000000", @ANYRES32=r1, @ANYBLOB="0000003100b2ceb9e2bf0088a31e69abde14137408fdd54a4c5dd98108173ebe4213f2ac8383889f88a2266fc2e5cbb93086726391c33f0c6a59739e89924a1e44f1dd8e388216c9c43c27525606cdf235c99a879f3baadc33f28ab478294a2ff563db2ca8ab3557570aa736bc10862876e787e9f023c16e0c"]) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r12, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="01000000", @ANYRES16=0x0, @ANYBLOB="000128bd7000fddbdf250e00000008003400fe0d000008003c000080000008002c0009000000"], 0x2c}}, 0x2000000c) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x0) 15:26:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d9786390400129ce50000b9970fc221b1100016235a01bb690211712d0c05ab8454fa", @ANYRES32=r0, @ANYBLOB='0\x00'/16]) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'ip6tnl0\x00'}) (async, rerun: 64) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async, rerun: 64) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00'}) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000080)={0x0, 0x9, 0x8000000000000001}) 15:26:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 26) [ 892.002769][ T9089] 8021q: adding VLAN 0 to HW filter on device batadv252 [ 892.011541][ T9089] bond73: (slave batadv252): Enslaving as a backup interface with an up link [ 892.030685][ T9089] bond73 (unregistering): (slave batadv252): Releasing backup interface 15:26:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d9786390400129ce50000b9970fc221b1100016235a01bb690211712d0c05ab8454fa", @ANYRES32=r0, @ANYBLOB='0\x00'/16]) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'ip6tnl0\x00'}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00'}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000080)={0x0, 0x9, 0x8000000000000001}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d9786390400129ce50000b9970fc221b1100016235a01bb690211712d0c05ab8454fa", @ANYRES32=r0, @ANYBLOB='0\x00'/16]) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'ip6tnl0\x00'}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00'}) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000080)={0x0, 0x9, 0x8000000000000001}) (async) [ 892.059982][ T9096] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 892.068222][ T9089] bond73 (unregistering): Released all slaves [ 892.085116][ T9102] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 892.093693][ T9095] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN 15:26:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x8100, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 892.121276][ T9096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=243 sclass=netlink_route_socket pid=9096 comm=syz-executor.0 [ 892.136373][ T9102] 8021q: adding VLAN 0 to HW filter on device batadv102 [ 892.145895][ T9102] bond56: (slave batadv102): Enslaving as a backup interface with an up link [ 892.161110][ T9095] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=243 sclass=netlink_route_socket pid=9095 comm=syz-executor.0 [ 892.177964][ T9104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=243 sclass=netlink_route_socket pid=9104 comm=syz-executor.0 [ 892.199589][ T9102] bond56 (unregistering): (slave batadv102): Releasing backup interface [ 892.209416][ T9102] FAULT_INJECTION: forcing a failure. [ 892.209416][ T9102] name failslab, interval 1, probability 0, space 0, times 0 [ 892.222089][ T9102] CPU: 1 PID: 9102 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 892.232447][ T9102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 892.242524][ T9102] Call Trace: [ 892.245823][ T9102] [ 892.248770][ T9102] dump_stack_lvl+0xda/0x130 [ 892.253398][ T9102] dump_stack+0x15/0x20 [ 892.257596][ T9102] should_fail_ex+0x21f/0x230 [ 892.262292][ T9102] __should_failslab+0x92/0xa0 [ 892.267121][ T9102] should_failslab+0x9/0x20 [ 892.271732][ T9102] slab_pre_alloc_hook+0x38/0x180 [ 892.276797][ T9102] kmem_cache_alloc_node+0x54/0x240 [ 892.282102][ T9102] ? __alloc_skb+0x109/0x2e0 [ 892.286797][ T9102] __alloc_skb+0x109/0x2e0 [ 892.291280][ T9102] ethnl_default_notify+0x171/0x410 [ 892.296520][ T9102] ? __dev_map_entry_free+0xb0/0xb0 [ 892.301813][ T9102] ? dev_map_notification+0x3ac/0x4f0 [ 892.307243][ T9102] ethtool_notify+0xb7/0x190 [ 892.311873][ T9102] ? ethnl_default_set_doit+0x4d0/0x4d0 [ 892.317542][ T9102] ethnl_netdev_event+0x41/0x50 [ 892.322440][ T9102] raw_notifier_call_chain+0x6b/0x1c0 [ 892.327979][ T9102] netdev_change_features+0xce/0x130 [ 892.333349][ T9102] bond_compute_features+0x3c9/0x3f0 [ 892.338733][ T9102] __bond_release_one+0x64c/0xa20 [ 892.343870][ T9102] bond_uninit+0x1ad/0x320 [ 892.348338][ T9102] ? bond_init+0x290/0x290 [ 892.352858][ T9102] unregister_netdevice_many_notify+0xb7b/0x1070 [ 892.359323][ T9102] ? unregister_netdevice_queue+0x116/0x200 [ 892.365328][ T9102] ? list_netdevice+0x2a0/0x2a0 [ 892.370210][ T9102] rtnl_dellink+0x384/0x580 [ 892.374878][ T9102] ? __list_del_entry_valid+0x5f/0xe0 [ 892.380381][ T9102] ? _raw_spin_unlock+0x26/0x40 [ 892.385259][ T9102] ? __mutex_lock+0x21c/0x8d0 [ 892.390018][ T9102] ? rtnl_newlink+0x1600/0x1600 [ 892.395009][ T9102] rtnetlink_rcv_msg+0x807/0x8c0 [ 892.400068][ T9102] ? slab_post_alloc_hook+0x8c/0x340 [ 892.405724][ T9102] ? kmem_cache_alloc+0x10f/0x220 [ 892.410958][ T9102] ? xas_load+0x37c/0x390 [ 892.415610][ T9102] ? skb_release_data+0x542/0x560 [ 892.420838][ T9102] ? kmem_cache_free+0x1db/0x3a0 [ 892.425904][ T9102] ? __kfree_skb+0x104/0x140 [ 892.430567][ T9102] ? nlmon_xmit+0x4b/0x60 [ 892.435002][ T9102] ? __kfree_skb+0x104/0x140 [ 892.439664][ T9102] ? consume_skb+0x57/0x180 [ 892.444251][ T9102] ? nlmon_xmit+0x4b/0x60 [ 892.448715][ T9102] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 892.454214][ T9102] ? ref_tracker_free+0x3a1/0x400 [ 892.459430][ T9102] ? __dev_queue_xmit+0xabb/0x1d10 [ 892.464608][ T9102] netlink_rcv_skb+0x126/0x220 [ 892.469406][ T9102] ? rtnetlink_bind+0x60/0x60 [ 892.474116][ T9102] rtnetlink_rcv+0x1c/0x20 [ 892.478674][ T9102] netlink_unicast+0x56f/0x640 [ 892.483471][ T9102] netlink_sendmsg+0x665/0x770 [ 892.488335][ T9102] ? netlink_getsockopt+0x3e0/0x3e0 [ 892.493583][ T9102] ____sys_sendmsg+0x37c/0x4d0 [ 892.498386][ T9102] __sys_sendmsg+0x1e9/0x270 [ 892.503146][ T9102] __x64_sys_sendmsg+0x46/0x50 [ 892.507976][ T9102] do_syscall_64+0x41/0xc0 [ 892.512419][ T9102] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 892.518390][ T9102] RIP: 0033:0x7f6f42996ae9 [ 892.522827][ T9102] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 892.543121][ T9102] RSP: 002b:00007f6f41d190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 892.551791][ T9102] RAX: ffffffffffffffda RBX: 00007f6f42ab5f80 RCX: 00007f6f42996ae9 [ 892.559784][ T9102] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 892.567887][ T9102] RBP: 00007f6f41d19120 R08: 0000000000000000 R09: 0000000000000000 [ 892.576016][ T9102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 892.584035][ T9102] R13: 000000000000000b R14: 00007f6f42ab5f80 R15: 00007ffc381e1498 [ 892.592134][ T9102] [ 892.607584][ T9102] bond56 (unregistering): Released all slaves [ 892.622457][ T9110] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 892.645238][ T9118] 8021q: adding VLAN 0 to HW filter on device batadv253 [ 892.654908][ T9118] bond73: (slave batadv253): Enslaving as a backup interface with an up link [ 893.826927][ T3201] usb usb6-port1: attempt power cycle 15:26:55 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) (async, rerun: 64) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x2) 15:26:55 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) inotify_init1(0x0) (async) r2 = inotify_init1(0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r3, 0x10, 0x400000000, 0x0) inotify_rm_watch(r3, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = memfd_create(0x0, 0x0) syz_usbip_server_init(0x0) (async) r6 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000140)) (async) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000140)) write(r5, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bond0\x00'}) fstatfs(r7, &(0x7f00000003c0)=""/78) dup(r5) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendto$inet(r10, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00a80010000104000002cf08000000005dee008f7810b0ea7d5a9b2700548135b1f8872cb70998f9e881b6f47f95e29354f44d60bffab46787cd5201dc5189aed64c134f69fd0fdbaf9fe1f00a53edb3a476cc355df24ccd4efd6dd63dc3c57612ffffffff04bd5c1fb8f58410a70d1169e066998bc6f2529075eabf2b09d27bb9971edf6a", @ANYRES32=r11, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00a80010000104000002cf08000000005dee008f7810b0ea7d5a9b2700548135b1f8872cb70998f9e881b6f47f95e29354f44d60bffab46787cd5201dc5189aed64c134f69fd0fdbaf9fe1f00a53edb3a476cc355df24ccd4efd6dd63dc3c57612ffffffff04bd5c1fb8f58410a70d1169e066998bc6f2529075eabf2b09d27bb9971edf6a", @ANYRES32=r11, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002840)=ANY=[@ANYBLOB="28000000f3000004fd0008000fa1d39300000085ac776a780ad41f0f90ac06191bfe7aba981a00", @ANYRES8=r6, @ANYRES32=r11, @ANYRESOCT=r11], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x80) fcntl$getownex(r8, 0x10, &(0x7f0000000440)) (async) fcntl$getownex(r8, 0x10, &(0x7f0000000440)) inotify_add_watch(r2, &(0x7f0000000080)='./file1\x00', 0x28) (async) inotify_add_watch(r2, &(0x7f0000000080)='./file1\x00', 0x28) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x104, 0x70bd29, 0x27dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}}, 0x4008800) dup3(r4, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000580)=ANY=[@ANYBLOB="1c8d461bedc8b90301000000", @ANYRES32=r1, @ANYBLOB="0000003100b2ceb9e2bf0088a31e69abde14137408fdd54a4c5dd98108173ebe4213f2ac8383889f88a2266fc2e5cbb93086726391c33f0c6a59739e89924a1e44f1dd8e388216c9c43c27525606cdf235c99a879f3baadc33f28ab478294a2ff563db2ca8ab3557570aa736bc10862876e787e9f023c16e0c"]) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000580)=ANY=[@ANYBLOB="1c8d461bedc8b90301000000", @ANYRES32=r1, @ANYBLOB="0000003100b2ceb9e2bf0088a31e69abde14137408fdd54a4c5dd98108173ebe4213f2ac8383889f88a2266fc2e5cbb93086726391c33f0c6a59739e89924a1e44f1dd8e388216c9c43c27525606cdf235c99a879f3baadc33f28ab478294a2ff563db2ca8ab3557570aa736bc10862876e787e9f023c16e0c"]) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r12, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="01000000", @ANYRES16=0x0, @ANYBLOB="000128bd7000fddbdf250e00000008003400fe0d000008003c000080000008002c0009000000"], 0x2c}}, 0x2000000c) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x80000094) (async) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x0) 15:26:55 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x248) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) 15:26:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 27) 15:26:55 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000180)=0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r2, 0x8208200) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000080)) 15:26:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x8847, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 895.815756][ T3201] usb usb6-port1: unable to enumerate USB device [ 895.840817][ T9130] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 895.850909][ T9125] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN 15:26:55 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x2) (async) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x2) [ 895.868067][ T9132] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 895.883442][ T9131] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 895.886190][ T9125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=243 sclass=netlink_route_socket pid=9125 comm=syz-executor.0 [ 895.934105][ T9130] 8021q: adding VLAN 0 to HW filter on device batadv103 [ 895.946343][ T9130] bond56: (slave batadv103): Enslaving as a backup interface with an up link [ 895.965728][ T9140] 8021q: adding VLAN 0 to HW filter on device batadv254 [ 895.979131][ T9140] bond74: (slave batadv254): Enslaving as a backup interface with an up link [ 895.988770][ T9124] syzkaller1: entered promiscuous mode [ 895.994308][ T9124] syzkaller1: entered allmulticast mode [ 896.006152][ T9145] bond56 (unregistering): (slave batadv103): Releasing backup interface [ 896.027553][ T9145] bond56 (unregistering): Released all slaves 15:26:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 28) [ 896.039897][ T9131] bond74 (unregistering): (slave batadv254): Releasing backup interface [ 896.062223][ T9131] bond74 (unregistering): Released all slaves 15:26:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x8848, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 896.114174][ T9150] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 896.140919][ T9150] 8021q: adding VLAN 0 to HW filter on device batadv104 [ 896.149983][ T9150] bond56: (slave batadv104): Enslaving as a backup interface with an up link [ 896.159084][ T9154] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 896.177049][ T9150] bond56 (unregistering): (slave batadv104): Releasing backup interface [ 896.187115][ T9150] FAULT_INJECTION: forcing a failure. [ 896.187115][ T9150] name failslab, interval 1, probability 0, space 0, times 0 [ 896.199855][ T9150] CPU: 0 PID: 9150 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 896.210438][ T9150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 896.220724][ T9150] Call Trace: [ 896.224043][ T9150] [ 896.227445][ T9150] dump_stack_lvl+0xda/0x130 [ 896.232140][ T9150] dump_stack+0x15/0x20 [ 896.236329][ T9150] should_fail_ex+0x21f/0x230 [ 896.241126][ T9150] __should_failslab+0x92/0xa0 [ 896.245932][ T9150] should_failslab+0x9/0x20 [ 896.250477][ T9150] slab_pre_alloc_hook+0x38/0x180 [ 896.255595][ T9150] kmem_cache_alloc_node+0x54/0x240 [ 896.261184][ T9150] ? __alloc_skb+0x109/0x2e0 [ 896.265987][ T9150] __alloc_skb+0x109/0x2e0 [ 896.270446][ T9150] rtmsg_ifinfo_build_skb+0x67/0x1b0 [ 896.275833][ T9150] ? dev_deactivate_many+0x688/0x6b0 [ 896.281165][ T9150] rtmsg_ifinfo+0x6b/0x100 [ 896.285675][ T9150] dev_close_many+0x145/0x2f0 [ 896.290401][ T9150] ? bond_compute_features+0x3c9/0x3f0 [ 896.295924][ T9150] dev_close+0xc2/0x130 [ 896.300122][ T9150] __bond_release_one+0x7c7/0xa20 [ 896.305185][ T9150] ? tun_device_event+0x4d/0x9d0 [ 896.310172][ T9150] bond_uninit+0x1ad/0x320 [ 896.314656][ T9150] ? bond_init+0x290/0x290 [ 896.319125][ T9150] unregister_netdevice_many_notify+0xb7b/0x1070 [ 896.325545][ T9150] ? unregister_netdevice_queue+0x116/0x200 [ 896.331600][ T9150] ? list_netdevice+0x2a0/0x2a0 [ 896.336526][ T9150] rtnl_dellink+0x384/0x580 [ 896.341198][ T9150] ? __list_del_entry_valid+0x5f/0xe0 [ 896.346624][ T9150] ? _raw_spin_unlock+0x26/0x40 [ 896.351880][ T9150] ? __mutex_lock+0x21c/0x8d0 [ 896.356668][ T9150] ? rtnl_newlink+0x1600/0x1600 [ 896.361571][ T9150] rtnetlink_rcv_msg+0x807/0x8c0 [ 896.367009][ T9150] ? slab_post_alloc_hook+0x8c/0x340 [ 896.372400][ T9150] ? kmem_cache_alloc+0x10f/0x220 [ 896.377474][ T9150] ? xas_load+0x37c/0x390 [ 896.381900][ T9150] ? skb_release_data+0x542/0x560 [ 896.387223][ T9150] ? kmem_cache_free+0x1db/0x3a0 [ 896.392235][ T9150] ? __kfree_skb+0x104/0x140 [ 896.396876][ T9150] ? nlmon_xmit+0x4b/0x60 [ 896.401319][ T9150] ? __kfree_skb+0x104/0x140 [ 896.405978][ T9150] ? consume_skb+0x57/0x180 [ 896.410577][ T9150] ? nlmon_xmit+0x4b/0x60 [ 896.414943][ T9150] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 896.420502][ T9150] ? ref_tracker_free+0x3a1/0x400 [ 896.425584][ T9150] ? __dev_queue_xmit+0xabb/0x1d10 [ 896.430971][ T9150] netlink_rcv_skb+0x126/0x220 [ 896.435780][ T9150] ? rtnetlink_bind+0x60/0x60 [ 896.440561][ T9150] rtnetlink_rcv+0x1c/0x20 [ 896.445047][ T9150] netlink_unicast+0x56f/0x640 [ 896.449903][ T9150] netlink_sendmsg+0x665/0x770 [ 896.455075][ T9150] ? netlink_getsockopt+0x3e0/0x3e0 [ 896.460592][ T9150] ____sys_sendmsg+0x37c/0x4d0 [ 896.465438][ T9150] __sys_sendmsg+0x1e9/0x270 [ 896.470086][ T9150] __x64_sys_sendmsg+0x46/0x50 [ 896.475236][ T9150] do_syscall_64+0x41/0xc0 [ 896.479734][ T9150] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 896.486332][ T9150] RIP: 0033:0x7f6f42996ae9 [ 896.490968][ T9150] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 896.511184][ T9150] RSP: 002b:00007f6f41d190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 896.519890][ T9150] RAX: ffffffffffffffda RBX: 00007f6f42ab5f80 RCX: 00007f6f42996ae9 [ 896.527984][ T9150] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 896.536076][ T9150] RBP: 00007f6f41d19120 R08: 0000000000000000 R09: 0000000000000000 [ 896.545140][ T9150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 896.553138][ T9150] R13: 000000000000000b R14: 00007f6f42ab5f80 R15: 00007ffc381e1498 [ 896.561147][ T9150] 15:26:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0xc00a, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:26:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 29) [ 896.575865][ T9150] bond56 (unregistering): Released all slaves [ 896.592505][ T9154] 8021q: adding VLAN 0 to HW filter on device batadv255 [ 896.601251][ T9154] bond74: (slave batadv255): Enslaving as a backup interface with an up link 15:26:56 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000180)=0x10) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1) (async, rerun: 32) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x0) (rerun: 32) ftruncate(r2, 0x8208200) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000080)) 15:26:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x248) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) [ 896.692583][ T9161] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 896.714221][ T9159] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 15:26:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = inotify_init1(0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = memfd_create(0x0, 0x0) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) r5 = epoll_create(0x1f) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000003, 0x810, r5, 0x25fda000) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file1\x00'}, 0x6e) dup3(r2, r3, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x0) [ 896.757447][ T9165] 8021q: adding VLAN 0 to HW filter on device batadv256 [ 896.768107][ T9165] bond75: (slave batadv256): Enslaving as a backup interface with an up link [ 896.785200][ T9161] 8021q: adding VLAN 0 to HW filter on device batadv105 [ 896.797253][ T9161] bond56: (slave batadv105): Enslaving as a backup interface with an up link [ 896.811689][ T9159] bond75 (unregistering): (slave batadv256): Releasing backup interface [ 896.822105][ T9174] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 896.844954][ T9159] bond75 (unregistering): Released all slaves 15:26:56 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000180)=0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r2, 0x8208200) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000180)=0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1) (async) creat(&(0x7f0000000440)='./bus\x00', 0x0) (async) ftruncate(r2, 0x8208200) (async) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000080)) (async) 15:26:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0xce0a, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 896.863003][ T9163] bond56 (unregistering): (slave batadv105): Releasing backup interface [ 896.888708][ T9163] bond56 (unregistering): Released all slaves [ 896.900111][ T9175] syzkaller1: entered promiscuous mode [ 896.905779][ T9175] syzkaller1: entered allmulticast mode 15:26:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 30) [ 896.953281][ T9179] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 896.979895][ T9181] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 897.002670][ T9179] 8021q: adding VLAN 0 to HW filter on device batadv257 [ 897.011346][ T9179] bond75: (slave batadv257): Enslaving as a backup interface with an up link [ 897.027358][ T9181] 8021q: adding VLAN 0 to HW filter on device batadv106 [ 897.035907][ T9181] bond56: (slave batadv106): Enslaving as a backup interface with an up link 15:26:57 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x6c2402, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r1, 0x10, 0x0, 0x1000f4) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x151000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'dvmrp1\x00', 0x1000}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) [ 897.057311][ T9181] bond56 (unregistering): (slave batadv106): Releasing backup interface [ 897.083039][ T9181] bond56 (unregistering): Released all slaves [ 897.097806][ T9179] bond75 (unregistering): (slave batadv257): Releasing backup interface [ 897.119067][ T9179] bond75 (unregistering): Released all slaves [ 898.245924][ T3187] usb usb6-port1: attempt power cycle 15:27:00 executing program 2: syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x165783) 15:27:00 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = open(&(0x7f0000000080)='./file0\x00', 0x6c2402, 0x0) (async, rerun: 32) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) (rerun: 32) fallocate(r1, 0x10, 0x0, 0x1000f4) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x151000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'dvmrp1\x00', 0x1000}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) 15:27:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 31) 15:27:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0xe42b, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:27:00 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = inotify_init1(0x0) (async) r2 = syz_open_procfs(0x0, 0x0) (async) r3 = memfd_create(0x0, 0x0) (async) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) (async, rerun: 64) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) (async, rerun: 64) r5 = epoll_create(0x1f) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000003, 0x810, r5, 0x25fda000) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file1\x00'}, 0x6e) (async) dup3(r2, r3, 0x0) (async) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) (async) close_range(r0, 0xffffffffffffffff, 0x0) 15:27:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000f38bb23dd23f44100000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff010000001d00000000000000000065727370616e300000000000000000006272696467653000400000000000bb976768aefd37190000b43b24af61af8e2f000000000000000065716c00000000000000000000000000ffffffffffff000000000000aaaaaaaaaa000000000000000000a000000010010000380100006d61726b5f6d00000000000000000000000000000000000000000000000000000c0000000400000001000000000100006e666c6f670000000000000000000000000000000000000000000000000000004c0000006d8000000900090000000000b80eba8ec4468a05f7d0c08be35638ee0eed5dd9119d918668afa6c019b085be3837595dc113ccf27499f7202a2b59394b26193cf57ec99b9abb99943198532b0b7bdd0f61e572656469726563740000000000000000000000000000000000000000000000000400"]}, 0x248) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) [ 900.205728][ T3187] usb usb6-port1: unable to enumerate USB device 15:27:00 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = inotify_init1(0x0) r2 = syz_open_procfs(0x0, 0x0) memfd_create(0x0, 0x0) (async) r3 = memfd_create(0x0, 0x0) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) (async) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) (async) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) r5 = epoll_create(0x1f) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000003, 0x810, r5, 0x25fda000) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file1\x00'}, 0x6e) dup3(r2, r3, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) [ 900.261007][ T9201] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 900.290115][ T9202] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 15:27:00 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x6c2402, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r1, 0x10, 0x0, 0x1000f4) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x151000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'dvmrp1\x00', 0x1000}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x6c2402, 0x0) (async) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) (async) fallocate(r1, 0x10, 0x0, 0x1000f4) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x151000, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'dvmrp1\x00', 0x1000}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) 15:27:00 executing program 2: syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x165783) [ 900.311253][ T9215] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 900.330696][ T9205] syzkaller1: entered promiscuous mode [ 900.336323][ T9205] syzkaller1: entered allmulticast mode [ 900.366028][ T9201] 8021q: adding VLAN 0 to HW filter on device batadv107 [ 900.381778][ T9201] bond56: (slave batadv107): Enslaving as a backup interface with an up link [ 900.402349][ T9217] 8021q: adding VLAN 0 to HW filter on device batadv258 15:27:00 executing program 2: syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x165783) [ 900.411042][ T9217] bond75: (slave batadv258): Enslaving as a backup interface with an up link [ 900.432529][ T9219] bond56 (unregistering): (slave batadv107): Releasing backup interface [ 900.456385][ T9219] FAULT_INJECTION: forcing a failure. [ 900.456385][ T9219] name failslab, interval 1, probability 0, space 0, times 0 [ 900.469771][ T9219] CPU: 1 PID: 9219 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 900.482926][ T9219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 900.493104][ T9219] Call Trace: [ 900.496489][ T9219] [ 900.499719][ T9219] dump_stack_lvl+0xda/0x130 [ 900.504566][ T9219] dump_stack+0x15/0x20 [ 900.509153][ T9219] should_fail_ex+0x21f/0x230 [ 900.514484][ T9219] ? nf_nat_masq_schedule+0x183/0x360 [ 900.520266][ T9219] __should_failslab+0x92/0xa0 [ 900.525912][ T9219] should_failslab+0x9/0x20 [ 900.530529][ T9219] slab_pre_alloc_hook+0x38/0x180 [ 900.535594][ T9219] ? nf_nat_masq_schedule+0x183/0x360 [ 900.541042][ T9219] __kmem_cache_alloc_node+0x48/0x1d0 [ 900.546621][ T9219] ? nf_nat_masq_schedule+0x183/0x360 [ 900.552094][ T9219] kmalloc_trace+0x2a/0xa0 [ 900.556904][ T9219] nf_nat_masq_schedule+0x183/0x360 [ 900.562248][ T9219] ? nf_nat_masq_schedule+0x360/0x360 [ 900.567744][ T9219] ? nf_nat_masquerade_inet_unregister_notifiers+0x80/0x80 [ 900.575074][ T9219] masq_device_event+0x71/0x80 [ 900.579877][ T9219] raw_notifier_call_chain+0x6b/0x1c0 [ 900.586302][ T9219] ? rtmsg_ifinfo+0xeb/0x100 [ 900.591404][ T9219] dev_close_many+0x1f0/0x2f0 [ 900.596310][ T9219] dev_close+0xc2/0x130 [ 900.600549][ T9219] __bond_release_one+0x7c7/0xa20 [ 900.605792][ T9219] ? tun_device_event+0x4d/0x9d0 [ 900.611291][ T9219] bond_uninit+0x1ad/0x320 [ 900.615753][ T9219] ? bond_init+0x290/0x290 [ 900.620548][ T9219] unregister_netdevice_many_notify+0xb7b/0x1070 [ 900.627071][ T9219] ? unregister_netdevice_queue+0x116/0x200 [ 900.634250][ T9219] ? list_netdevice+0x2a0/0x2a0 [ 900.639244][ T9219] rtnl_dellink+0x384/0x580 [ 900.643966][ T9219] ? __list_del_entry_valid+0x5f/0xe0 [ 900.649461][ T9219] ? _raw_spin_unlock+0x26/0x40 [ 900.654668][ T9219] ? __mutex_lock+0x21c/0x8d0 [ 900.659387][ T9219] ? rtnl_newlink+0x1600/0x1600 [ 900.664354][ T9219] rtnetlink_rcv_msg+0x807/0x8c0 [ 900.669431][ T9219] ? slab_post_alloc_hook+0x8c/0x340 [ 900.675149][ T9219] ? kmem_cache_alloc+0x10f/0x220 [ 900.680225][ T9219] ? xas_load+0x37c/0x390 [ 900.684706][ T9219] ? skb_release_data+0x542/0x560 [ 900.689865][ T9219] ? kmem_cache_free+0x1db/0x3a0 [ 900.694857][ T9219] ? __kfree_skb+0x104/0x140 [ 900.699569][ T9219] ? nlmon_xmit+0x4b/0x60 [ 900.703928][ T9219] ? __kfree_skb+0x104/0x140 [ 900.708843][ T9219] ? consume_skb+0x57/0x180 15:27:00 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) r1 = dup3(r0, r0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x5, 0x4, 0xcc, 0xe5, &(0x7f0000000200)="36c33c434d3ff68dc5d1d11604799b75bc665bcb143bf07770bf07c86cc34c6ffb61856cd61c2f912ea4270dfae0027105f0b38b5bdf20ed95c9eafe21d36cb82a78202d72fe7af8d96f5acc64159ae6a11f27912b78a24c0f2696c0d2f171b7a6780707b51e8acdad23bbcfa5d8ca0dfb0c05d5e60f632e46cceba8dc4969c0afead9ed5984381ef19c3a364ec245093ac50dd06ac85b86bb3fc38cc1bd7fe9194e7755cb2f83514d3ef4904a51721cea329f6ccb24477b55d9bdeb86e4178326362d0a1a6589218db42319"}) [ 900.717255][ T9219] ? nlmon_xmit+0x4b/0x60 [ 900.721796][ T9219] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 900.729068][ T9219] ? ref_tracker_free+0x3a1/0x400 [ 900.734124][ T9219] ? __dev_queue_xmit+0xabb/0x1d10 [ 900.739272][ T9219] netlink_rcv_skb+0x126/0x220 [ 900.744185][ T9219] ? rtnetlink_bind+0x60/0x60 [ 900.749010][ T9219] rtnetlink_rcv+0x1c/0x20 [ 900.753594][ T9219] netlink_unicast+0x56f/0x640 [ 900.758401][ T9219] netlink_sendmsg+0x665/0x770 [ 900.763202][ T9219] ? netlink_getsockopt+0x3e0/0x3e0 [ 900.768642][ T9219] ____sys_sendmsg+0x37c/0x4d0 [ 900.773457][ T9219] __sys_sendmsg+0x1e9/0x270 [ 900.778263][ T9219] __x64_sys_sendmsg+0x46/0x50 [ 900.783216][ T9219] do_syscall_64+0x41/0xc0 [ 900.787763][ T9219] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 900.794357][ T9219] RIP: 0033:0x7f6f42996ae9 [ 900.798882][ T9219] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 900.819289][ T9219] RSP: 002b:00007f6f41cf80c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 900.828521][ T9219] RAX: ffffffffffffffda RBX: 00007f6f42ab6050 RCX: 00007f6f42996ae9 [ 900.836654][ T9219] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 900.845120][ T9219] RBP: 00007f6f41cf8120 R08: 0000000000000000 R09: 0000000000000000 [ 900.853263][ T9219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 900.861564][ T9219] R13: 000000000000006e R14: 00007f6f42ab6050 R15: 00007ffc381e1498 [ 900.869772][ T9219] [ 900.881576][ T9219] bond56 (unregistering): Released all slaves [ 900.893675][ T9202] bond75 (unregistering): (slave batadv258): Releasing backup interface 15:27:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 32) [ 900.914595][ T9202] bond75 (unregistering): Released all slaves 15:27:00 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r1) setregid(0x0, r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r4) setregid(0x0, r4) r5 = getpgrp(0x0) r6 = socket(0x10, 0x803, 0x0) sendto$inet(r6, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="7753ee2bba18da3687d36e45e0", 0xd}, {&(0x7f0000000100)="c7711c32d232a4b49886624e7e585c489dd5fcf49242ca10734bac16381b7b31f9f42a908301bb55980dfec9f33bce02875d5a440133132bc9a4657ce8a0b7d48ab58d2346d823", 0x47}, {&(0x7f0000000180)="d51d9bcbd4e8810511cab2e0ae562b30e8de8464469ef5e464d37eb3fe10260b9c7d6bc35a69bcfa5124bd44f975b5567ed803d45034dded7578bd98c8", 0x3d}, {&(0x7f0000000240)="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", 0xfe}], 0x4, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2, r4}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee01, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r6, 0xffffffffffffffff]}}], 0xd0, 0x880}}], 0x1, 0x4000800) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r8 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r8, 0x10, 0x0, 0x1000f4) ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f0000000040)={0x0, 0x8, [@random="4971b40ffce8", @local, @multicast, @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}]}) 15:27:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0xe52b, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 900.975529][ T9238] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 901.012268][ T9243] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 901.036559][ T9238] 8021q: adding VLAN 0 to HW filter on device batadv108 [ 901.045088][ T9238] bond56: (slave batadv108): Enslaving as a backup interface with an up link [ 901.061235][ T9243] 8021q: adding VLAN 0 to HW filter on device batadv259 [ 901.072108][ T9243] bond75: (slave batadv259): Enslaving as a backup interface with an up link [ 901.083678][ T9238] bond56 (unregistering): (slave batadv108): Releasing backup interface [ 901.103822][ T9238] FAULT_INJECTION: forcing a failure. [ 901.103822][ T9238] name failslab, interval 1, probability 0, space 0, times 0 [ 901.116792][ T9238] CPU: 0 PID: 9238 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 901.127235][ T9238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 901.137320][ T9238] Call Trace: [ 901.140659][ T9238] [ 901.143608][ T9238] dump_stack_lvl+0xda/0x130 [ 901.148575][ T9238] dump_stack+0x15/0x20 [ 901.152837][ T9238] should_fail_ex+0x21f/0x230 [ 901.157540][ T9238] __should_failslab+0x92/0xa0 [ 901.162339][ T9238] should_failslab+0x9/0x20 [ 901.166949][ T9238] slab_pre_alloc_hook+0x38/0x180 [ 901.172055][ T9238] kmem_cache_alloc+0x52/0x220 [ 901.176861][ T9238] ? batadv_tt_local_event+0x46/0x3a0 [ 901.182291][ T9238] batadv_tt_local_event+0x46/0x3a0 [ 901.187597][ T9238] ? batadv_tt_hash_find+0x2ad/0x2d0 [ 901.193012][ T9238] batadv_tt_local_remove+0xe2/0x140 [ 901.198357][ T9238] batadv_softif_destroy_vlan+0x58/0x160 [ 901.204027][ T9238] batadv_interface_kill_vid+0x1e4/0x2e0 [ 901.210138][ T9238] vlan_vid_del+0x262/0x3f0 [ 901.214740][ T9238] ? register_vlan_dev+0x460/0x460 [ 901.220139][ T9238] vlan_device_event+0x164/0x1120 [ 901.225272][ T9238] ? phonet_device_notify+0x185/0x640 [ 901.231569][ T9238] ? isotp_notifier+0x7a/0x4b0 [ 901.236930][ T9238] ? cgw_notifier+0x9a/0x280 [ 901.241828][ T9238] ? register_vlan_dev+0x460/0x460 [ 901.247403][ T9238] raw_notifier_call_chain+0x6b/0x1c0 [ 901.252859][ T9238] ? rtmsg_ifinfo+0xeb/0x100 [ 901.257528][ T9238] dev_close_many+0x1f0/0x2f0 [ 901.262291][ T9238] dev_close+0xc2/0x130 [ 901.266590][ T9238] __bond_release_one+0x7c7/0xa20 [ 901.271848][ T9238] ? tun_device_event+0x4d/0x9d0 [ 901.276909][ T9238] bond_uninit+0x1ad/0x320 [ 901.281706][ T9238] ? bond_init+0x290/0x290 [ 901.286257][ T9238] unregister_netdevice_many_notify+0xb7b/0x1070 [ 901.293155][ T9238] ? unregister_netdevice_queue+0x116/0x200 [ 901.299264][ T9238] ? list_netdevice+0x2a0/0x2a0 [ 901.304144][ T9238] rtnl_dellink+0x384/0x580 [ 901.309130][ T9238] ? __list_del_entry_valid+0x5f/0xe0 [ 901.314568][ T9238] ? _raw_spin_unlock+0x26/0x40 [ 901.319511][ T9238] ? __mutex_lock+0x21c/0x8d0 [ 901.324348][ T9238] ? rtnl_newlink+0x1600/0x1600 [ 901.329242][ T9238] rtnetlink_rcv_msg+0x807/0x8c0 15:27:01 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = inotify_init1(0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = memfd_create(0x0, 0x0) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000280)={@local, @multicast1, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000004}, 0x840) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) dup3(r2, r3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000180)=0x6) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) r8 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) sendto$inet(r8, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$rxrpc(0x21, 0x2, 0xa) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r10, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r9], 0x4}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x4, 0x1f, 0x4, 0x20, 0x10, @private2, @mcast2, 0x7, 0x700, 0x0, 0xdf0}}) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r10, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffc0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4005}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) [ 901.334246][ T9238] ? slab_post_alloc_hook+0x8c/0x340 [ 901.339816][ T9238] ? try_charge_memcg+0xb45/0xd20 [ 901.344920][ T9238] ? xas_load+0x37c/0x390 [ 901.350272][ T9238] ? skb_release_data+0x542/0x560 [ 901.355337][ T9238] ? kmem_cache_free+0x1db/0x3a0 [ 901.360523][ T9238] ? __kfree_skb+0x104/0x140 [ 901.365221][ T9238] ? nlmon_xmit+0x4b/0x60 [ 901.369932][ T9238] ? __kfree_skb+0x104/0x140 [ 901.374557][ T9238] ? consume_skb+0x57/0x180 [ 901.379783][ T9238] ? nlmon_xmit+0x4b/0x60 [ 901.384185][ T9238] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 901.389975][ T9238] ? ref_tracker_free+0x3a1/0x400 [ 901.395054][ T9238] ? __dev_queue_xmit+0xabb/0x1d10 [ 901.400194][ T9238] netlink_rcv_skb+0x126/0x220 [ 901.405011][ T9238] ? rtnetlink_bind+0x60/0x60 [ 901.410038][ T9238] rtnetlink_rcv+0x1c/0x20 [ 901.414561][ T9238] netlink_unicast+0x56f/0x640 [ 901.419368][ T9238] netlink_sendmsg+0x665/0x770 [ 901.424547][ T9238] ? netlink_getsockopt+0x3e0/0x3e0 [ 901.429970][ T9238] ____sys_sendmsg+0x37c/0x4d0 [ 901.434785][ T9238] __sys_sendmsg+0x1e9/0x270 [ 901.439563][ T9238] __x64_sys_sendmsg+0x46/0x50 [ 901.444544][ T9238] do_syscall_64+0x41/0xc0 [ 901.449115][ T9238] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 901.455051][ T9238] RIP: 0033:0x7f6f42996ae9 [ 901.459490][ T9238] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 901.480122][ T9238] RSP: 002b:00007f6f41d190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 901.488859][ T9238] RAX: ffffffffffffffda RBX: 00007f6f42ab5f80 RCX: 00007f6f42996ae9 [ 901.497353][ T9238] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 901.505807][ T9238] RBP: 00007f6f41d19120 R08: 0000000000000000 R09: 0000000000000000 [ 901.513845][ T9238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 901.521872][ T9238] R13: 000000000000000b R14: 00007f6f42ab5f80 R15: 00007ffc381e1498 [ 901.530050][ T9238] [ 901.543629][ T9238] bond56 (unregistering): Released all slaves [ 901.550432][ T9247] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 901.565447][ T9243] bond75 (unregistering): (slave batadv259): Releasing backup interface [ 901.580145][ T9243] bond75 (unregistering): Released all slaves 15:27:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 33) 15:27:01 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r1) (async) setresgid(0x0, 0x0, r1) setregid(0x0, r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r4) setregid(0x0, r4) (async) setregid(0x0, r4) r5 = getpgrp(0x0) r6 = socket(0x10, 0x803, 0x0) sendto$inet(r6, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="7753ee2bba18da3687d36e45e0", 0xd}, {&(0x7f0000000100)="c7711c32d232a4b49886624e7e585c489dd5fcf49242ca10734bac16381b7b31f9f42a908301bb55980dfec9f33bce02875d5a440133132bc9a4657ce8a0b7d48ab58d2346d823", 0x47}, {&(0x7f0000000180)="d51d9bcbd4e8810511cab2e0ae562b30e8de8464469ef5e464d37eb3fe10260b9c7d6bc35a69bcfa5124bd44f975b5567ed803d45034dded7578bd98c8", 0x3d}, {&(0x7f0000000240)="15a8b0d5ac7845780c238dfa76ac9d3acc01f7296ef0fc56c0bc5df367060ab567c93f0e242fc7e7a4f5cb82241de153ec56f58516b4b0457d8a94126ce88a680a76027def8184d1e0fdd0a4d5a21d60b82f98ecbe3605cb92b2c079d4240534b34ee30c95861f3c7cc7ded61099d5ae2cff107f8283dfa6f37601e23365fc61c36c4a00d51c564bb5c3531b1357063990f4f81fba968c8f709df555bfade245b5f419878f9f0485e6948ced020d0808dd3d0a7d7af346cf8bcf1c6ce2b488b8653d0ed3312f498f0f1492ff20ffb702b90e916d9fc8490ec025c01e4ffcfd2215fb77d6090552ea255076f72bf28e2b81c22de85ab2e154c403db6d7f03", 0xfe}], 0x4, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2, r4}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee01, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r6, 0xffffffffffffffff]}}], 0xd0, 0x880}}], 0x1, 0x4000800) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="7753ee2bba18da3687d36e45e0", 0xd}, {&(0x7f0000000100)="c7711c32d232a4b49886624e7e585c489dd5fcf49242ca10734bac16381b7b31f9f42a908301bb55980dfec9f33bce02875d5a440133132bc9a4657ce8a0b7d48ab58d2346d823", 0x47}, {&(0x7f0000000180)="d51d9bcbd4e8810511cab2e0ae562b30e8de8464469ef5e464d37eb3fe10260b9c7d6bc35a69bcfa5124bd44f975b5567ed803d45034dded7578bd98c8", 0x3d}, {&(0x7f0000000240)="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", 0xfe}], 0x4, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2, r4}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee01, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r6, 0xffffffffffffffff]}}], 0xd0, 0x880}}], 0x1, 0x4000800) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r8 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r8, 0x10, 0x0, 0x1000f4) ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f0000000040)={0x0, 0x8, [@random="4971b40ffce8", @local, @multicast, @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}]}) [ 901.603555][ T9238] syz-executor.4 (9238) used greatest stack depth: 9336 bytes left 15:27:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x248) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) 15:27:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0xf40a, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 901.650400][ T9249] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 901.677734][ T9249] 8021q: adding VLAN 0 to HW filter on device batadv109 [ 901.689656][ T9249] bond56: (slave batadv109): Enslaving as a backup interface with an up link 15:27:01 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)) (async) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r1) setregid(0x0, r1) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) (async) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r4) (async) setregid(0x0, r4) (async) r5 = getpgrp(0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendto$inet(r6, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="7753ee2bba18da3687d36e45e0", 0xd}, {&(0x7f0000000100)="c7711c32d232a4b49886624e7e585c489dd5fcf49242ca10734bac16381b7b31f9f42a908301bb55980dfec9f33bce02875d5a440133132bc9a4657ce8a0b7d48ab58d2346d823", 0x47}, {&(0x7f0000000180)="d51d9bcbd4e8810511cab2e0ae562b30e8de8464469ef5e464d37eb3fe10260b9c7d6bc35a69bcfa5124bd44f975b5567ed803d45034dded7578bd98c8", 0x3d}, {&(0x7f0000000240)="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", 0xfe}], 0x4, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2, r4}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee01, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r6, 0xffffffffffffffff]}}], 0xd0, 0x880}}], 0x1, 0x4000800) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r8 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r8, 0x10, 0x0, 0x1000f4) ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f0000000040)={0x0, 0x8, [@random="4971b40ffce8", @local, @multicast, @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}]}) 15:27:01 executing program 3: setitimer(0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000140)={{0x77359400}, {r1, r2/1000+10000}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) [ 901.701095][ T9255] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 901.731984][ T9249] bond56 (unregistering): (slave batadv109): Releasing backup interface [ 901.757304][ T9249] FAULT_INJECTION: forcing a failure. [ 901.757304][ T9249] name failslab, interval 1, probability 0, space 0, times 0 [ 901.770117][ T9249] CPU: 0 PID: 9249 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 901.780544][ T9249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 901.790629][ T9249] Call Trace: [ 901.793922][ T9249] [ 901.796922][ T9249] dump_stack_lvl+0xda/0x130 [ 901.801637][ T9249] dump_stack+0x15/0x20 [ 901.805908][ T9249] should_fail_ex+0x21f/0x230 [ 901.810632][ T9249] __should_failslab+0x92/0xa0 [ 901.815430][ T9249] should_failslab+0x9/0x20 [ 901.820110][ T9249] slab_pre_alloc_hook+0x38/0x180 [ 901.825192][ T9249] kmem_cache_alloc_node+0x54/0x240 [ 901.830447][ T9249] ? __alloc_skb+0x109/0x2e0 [ 901.835112][ T9249] __alloc_skb+0x109/0x2e0 [ 901.839561][ T9249] rtmsg_ifinfo_build_skb+0x67/0x1b0 [ 901.844881][ T9249] ? ndisc_net_exit+0x50/0x50 [ 901.849608][ T9249] ? rtnetlink_rcv_msg+0x8c0/0x8c0 [ 901.854826][ T9249] rtnetlink_event+0x180/0x1f0 [ 901.859664][ T9249] raw_notifier_call_chain+0x6b/0x1c0 [ 901.865108][ T9249] dev_set_mac_address+0x241/0x2d0 [ 901.870360][ T9249] __bond_release_one+0x90f/0xa20 [ 901.875480][ T9249] bond_uninit+0x1ad/0x320 [ 901.879980][ T9249] ? bond_init+0x290/0x290 [ 901.884452][ T9249] unregister_netdevice_many_notify+0xb7b/0x1070 [ 901.890862][ T9249] ? unregister_netdevice_queue+0x116/0x200 [ 901.896836][ T9249] ? list_netdevice+0x2a0/0x2a0 [ 901.901847][ T9249] rtnl_dellink+0x384/0x580 [ 901.906458][ T9249] ? __list_del_entry_valid+0x5f/0xe0 [ 901.911940][ T9249] ? _raw_spin_unlock+0x26/0x40 [ 901.916817][ T9249] ? __mutex_lock+0x21c/0x8d0 [ 901.921528][ T9249] ? rtnl_newlink+0x1600/0x1600 [ 901.926420][ T9249] rtnetlink_rcv_msg+0x807/0x8c0 [ 901.931399][ T9249] ? __rcu_read_unlock+0x4d/0x70 [ 901.936433][ T9249] ? slab_post_alloc_hook+0x8c/0x340 [ 901.941763][ T9249] ? kmem_cache_alloc+0x10f/0x220 [ 901.946888][ T9249] ? xas_load+0x37c/0x390 [ 901.951252][ T9249] ? skb_release_data+0x542/0x560 [ 901.956526][ T9249] ? kmem_cache_free+0x1db/0x3a0 [ 901.961686][ T9249] ? __kfree_skb+0x104/0x140 [ 901.966545][ T9249] ? nlmon_xmit+0x4b/0x60 [ 901.970908][ T9249] ? __kfree_skb+0x104/0x140 [ 901.975546][ T9249] ? consume_skb+0x57/0x180 [ 901.980221][ T9249] ? nlmon_xmit+0x4b/0x60 [ 901.984662][ T9249] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 901.989970][ T9249] ? ref_tracker_free+0x3a1/0x400 [ 901.995028][ T9249] ? __dev_queue_xmit+0xabb/0x1d10 [ 902.000210][ T9249] netlink_rcv_skb+0x126/0x220 [ 902.005108][ T9249] ? rtnetlink_bind+0x60/0x60 [ 902.009839][ T9249] rtnetlink_rcv+0x1c/0x20 [ 902.014352][ T9249] netlink_unicast+0x56f/0x640 [ 902.019217][ T9249] netlink_sendmsg+0x665/0x770 [ 902.024152][ T9249] ? netlink_getsockopt+0x3e0/0x3e0 [ 902.029406][ T9249] ____sys_sendmsg+0x37c/0x4d0 [ 902.034263][ T9249] __sys_sendmsg+0x1e9/0x270 [ 902.038962][ T9249] __x64_sys_sendmsg+0x46/0x50 [ 902.044079][ T9249] do_syscall_64+0x41/0xc0 [ 902.048665][ T9249] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 902.054589][ T9249] RIP: 0033:0x7f6f42996ae9 [ 902.059021][ T9249] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 902.079091][ T9249] RSP: 002b:00007f6f41d190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 902.087562][ T9249] RAX: ffffffffffffffda RBX: 00007f6f42ab5f80 RCX: 00007f6f42996ae9 [ 902.095742][ T9249] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 902.103876][ T9249] RBP: 00007f6f41d19120 R08: 0000000000000000 R09: 0000000000000000 [ 902.111921][ T9249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 902.120133][ T9249] R13: 000000000000000b R14: 00007f6f42ab5f80 R15: 00007ffc381e1498 [ 902.128401][ T9249] [ 902.136152][ T9249] bond56 (unregistering): Released all slaves 15:27:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 34) [ 902.157198][ T9255] 8021q: adding VLAN 0 to HW filter on device batadv260 [ 902.166110][ T9255] bond75: (slave batadv260): Enslaving as a backup interface with an up link [ 902.204553][ T9274] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 902.233694][ T9274] 8021q: adding VLAN 0 to HW filter on device batadv110 [ 902.247028][ T9274] bond56: (slave batadv110): Enslaving as a backup interface with an up link [ 902.260396][ T9274] bond56 (unregistering): (slave batadv110): Releasing backup interface [ 902.278310][ T9274] bond56 (unregistering): Released all slaves [ 902.565702][ T21] usb usb6-port1: attempt power cycle 15:27:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) r1 = dup3(r0, r0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x5, 0x4, 0xcc, 0xe5, &(0x7f0000000200)="36c33c434d3ff68dc5d1d11604799b75bc665bcb143bf07770bf07c86cc34c6ffb61856cd61c2f912ea4270dfae0027105f0b38b5bdf20ed95c9eafe21d36cb82a78202d72fe7af8d96f5acc64159ae6a11f27912b78a24c0f2696c0d2f171b7a6780707b51e8acdad23bbcfa5d8ca0dfb0c05d5e60f632e46cceba8dc4969c0afead9ed5984381ef19c3a364ec245093ac50dd06ac85b86bb3fc38cc1bd7fe9194e7755cb2f83514d3ef4904a51721cea329f6ccb24477b55d9bdeb86e4178326362d0a1a6589218db42319"}) 15:27:04 executing program 3: setitimer(0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)) (async) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000140)={{0x77359400}, {r1, r2/1000+10000}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) 15:27:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0xf50a, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:27:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x248) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) 15:27:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 35) 15:27:04 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 64) r1 = inotify_init1(0x0) (rerun: 64) r2 = syz_open_procfs(0x0, 0x0) r3 = memfd_create(0x0, 0x0) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) (async) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) (async, rerun: 64) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) (async, rerun: 64) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) (async) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000280)={@local, @multicast1, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000004}, 0x840) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) dup3(r2, r3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000180)=0x6) (async) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) (async) r8 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) (async) sendto$inet(r8, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) r9 = socket$rxrpc(0x21, 0x2, 0xa) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r10, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r9], 0x4}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x4, 0x1f, 0x4, 0x20, 0x10, @private2, @mcast2, 0x7, 0x700, 0x0, 0xdf0}}) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r10, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffc0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4005}, 0x4) (async) close_range(r0, 0xffffffffffffffff, 0x0) [ 904.596211][ T21] usb usb6-port1: unable to enumerate USB device [ 904.655969][ T9284] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 904.662126][ T9280] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 904.674154][ T9282] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 904.698176][ T9286] syzkaller1: entered promiscuous mode [ 904.703761][ T9286] syzkaller1: entered allmulticast mode [ 904.721976][ T9284] 8021q: adding VLAN 0 to HW filter on device batadv261 [ 904.732588][ T9284] bond76: (slave batadv261): Enslaving as a backup interface with an up link [ 904.749500][ T9282] 8021q: adding VLAN 0 to HW filter on device batadv111 [ 904.758008][ T9282] bond56: (slave batadv111): Enslaving as a backup interface with an up link [ 904.770199][ T9284] bond76 (unregistering): (slave batadv261): Releasing backup interface [ 904.792137][ T9284] bond76 (unregistering): Released all slaves 15:27:04 executing program 3: setitimer(0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000140)={{0x77359400}, {r1, r2/1000+10000}}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) 15:27:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x800001) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'virt_wifi0\x00', 0x1000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'xfrm0\x00', 0x2000}) 15:27:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x40000, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 904.805944][ T9296] bond56 (unregistering): (slave batadv111): Releasing backup interface [ 904.826975][ T9296] bond56 (unregistering): Released all slaves 15:27:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x800001) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'virt_wifi0\x00', 0x1000}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'xfrm0\x00', 0x2000}) 15:27:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 36) [ 904.874342][ T9306] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 904.899723][ T9306] 8021q: adding VLAN 0 to HW filter on device batadv262 [ 904.908613][ T9306] bond76: (slave batadv262): Enslaving as a backup interface with an up link 15:27:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x800001) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x800001) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'virt_wifi0\x00', 0x1000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'xfrm0\x00', 0x2000}) [ 904.928401][ T9306] bond76 (unregistering): (slave batadv262): Releasing backup interface [ 904.947916][ T9306] bond76 (unregistering): Released all slaves [ 904.980297][ T9312] 8021q: adding VLAN 0 to HW filter on device batadv112 [ 904.989740][ T9312] bond56: (slave batadv112): Enslaving as a backup interface with an up link [ 905.003173][ T9312] bond56 (unregistering): (slave batadv112): Releasing backup interface [ 905.030531][ T9312] FAULT_INJECTION: forcing a failure. [ 905.030531][ T9312] name failslab, interval 1, probability 0, space 0, times 0 [ 905.043222][ T9312] CPU: 0 PID: 9312 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 905.053840][ T9312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 905.063950][ T9312] Call Trace: [ 905.067265][ T9312] [ 905.070257][ T9312] dump_stack_lvl+0xda/0x130 [ 905.074907][ T9312] dump_stack+0x15/0x20 [ 905.079106][ T9312] should_fail_ex+0x21f/0x230 [ 905.083834][ T9312] ? netdevice_event+0x2b6/0x610 [ 905.089088][ T9312] __should_failslab+0x92/0xa0 [ 905.093983][ T9312] should_failslab+0x9/0x20 [ 905.098519][ T9312] slab_pre_alloc_hook+0x38/0x180 [ 905.103666][ T9312] ? netdevice_event+0x2b6/0x610 [ 905.108686][ T9312] __kmem_cache_alloc_node+0x48/0x1d0 [ 905.114121][ T9312] ? netdevice_event+0x2b6/0x610 [ 905.119082][ T9312] kmalloc_trace+0x2a/0xa0 [ 905.123528][ T9312] netdevice_event+0x2b6/0x610 [ 905.128410][ T9312] ? _raw_spin_lock_irqsave+0x3c/0xa0 [ 905.133825][ T9312] ? _raw_spin_unlock_irqrestore+0x2b/0x50 [ 905.139858][ T9312] ? netdev_upper_walk+0x160/0x160 [ 905.145036][ T9312] ? add_default_gids+0xb0/0xb0 [ 905.149953][ T9312] ? is_ndev_for_default_gid_filter+0x140/0x140 [ 905.156391][ T9312] ? enum_all_gids_of_dev_cb+0x320/0x320 [ 905.162123][ T9312] ? netdevice_event+0x610/0x610 [ 905.167103][ T9312] ? add_default_gids+0xb0/0xb0 [ 905.171997][ T9312] ? cfg802154_netdev_notifier_call+0xa1/0x3b0 [ 905.178296][ T9312] ? inet6addr_event+0xa0/0xa0 [ 905.183129][ T9312] raw_notifier_call_chain+0x6b/0x1c0 [ 905.188598][ T9312] dev_set_mac_address+0x241/0x2d0 [ 905.193798][ T9312] __bond_release_one+0x90f/0xa20 [ 905.198940][ T9312] bond_uninit+0x1ad/0x320 [ 905.203426][ T9312] ? bond_init+0x290/0x290 [ 905.207906][ T9312] unregister_netdevice_many_notify+0xb7b/0x1070 [ 905.214304][ T9312] ? unregister_netdevice_queue+0x116/0x200 [ 905.220315][ T9312] ? list_netdevice+0x2a0/0x2a0 [ 905.225218][ T9312] rtnl_dellink+0x384/0x580 [ 905.229776][ T9312] ? security_capable+0x5e/0x80 [ 905.234792][ T9312] ? ns_capable+0x7c/0xb0 [ 905.239154][ T9312] ? rtnl_newlink+0x1600/0x1600 [ 905.244034][ T9312] rtnetlink_rcv_msg+0x807/0x8c0 [ 905.249102][ T9312] ? slab_post_alloc_hook+0x8c/0x340 [ 905.254499][ T9312] ? kmem_cache_alloc+0x10f/0x220 [ 905.259625][ T9312] ? xas_load+0x37c/0x390 [ 905.263972][ T9312] ? skb_release_data+0x542/0x560 [ 905.269103][ T9312] ? kmem_cache_free+0x1db/0x3a0 [ 905.274156][ T9312] ? __kfree_skb+0x104/0x140 [ 905.278835][ T9312] ? nlmon_xmit+0x4b/0x60 [ 905.283205][ T9312] ? __kfree_skb+0x104/0x140 [ 905.287831][ T9312] ? consume_skb+0x57/0x180 [ 905.292371][ T9312] ? nlmon_xmit+0x4b/0x60 [ 905.296738][ T9312] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 905.302108][ T9312] ? ref_tracker_free+0x3a1/0x400 [ 905.307244][ T9312] ? __dev_queue_xmit+0xabb/0x1d10 [ 905.312399][ T9312] netlink_rcv_skb+0x126/0x220 [ 905.317275][ T9312] ? rtnetlink_bind+0x60/0x60 [ 905.322089][ T9312] rtnetlink_rcv+0x1c/0x20 [ 905.326596][ T9312] netlink_unicast+0x56f/0x640 [ 905.331399][ T9312] netlink_sendmsg+0x665/0x770 [ 905.336253][ T9312] ? netlink_getsockopt+0x3e0/0x3e0 [ 905.341605][ T9312] ____sys_sendmsg+0x37c/0x4d0 [ 905.346505][ T9312] __sys_sendmsg+0x1e9/0x270 [ 905.351249][ T9312] __x64_sys_sendmsg+0x46/0x50 [ 905.356053][ T9312] do_syscall_64+0x41/0xc0 [ 905.360693][ T9312] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 905.366994][ T9312] RIP: 0033:0x7f6f42996ae9 [ 905.371457][ T9312] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 905.391252][ T9312] RSP: 002b:00007f6f41d190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 905.399729][ T9312] RAX: ffffffffffffffda RBX: 00007f6f42ab5f80 RCX: 00007f6f42996ae9 [ 905.407754][ T9312] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 905.415792][ T9312] RBP: 00007f6f41d19120 R08: 0000000000000000 R09: 0000000000000000 [ 905.423887][ T9312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 905.431882][ T9312] R13: 000000000000000b R14: 00007f6f42ab5f80 R15: 00007ffc381e1498 [ 905.439876][ T9312] [ 905.448958][ T9312] bond56 (unregistering): Released all slaves [ 906.585674][ T21] usb usb6-port1: attempt power cycle 15:27:08 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) r1 = dup3(r0, r0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x5, 0x4, 0xcc, 0xe5, &(0x7f0000000200)="36c33c434d3ff68dc5d1d11604799b75bc665bcb143bf07770bf07c86cc34c6ffb61856cd61c2f912ea4270dfae0027105f0b38b5bdf20ed95c9eafe21d36cb82a78202d72fe7af8d96f5acc64159ae6a11f27912b78a24c0f2696c0d2f171b7a6780707b51e8acdad23bbcfa5d8ca0dfb0c05d5e60f632e46cceba8dc4969c0afead9ed5984381ef19c3a364ec245093ac50dd06ac85b86bb3fc38cc1bd7fe9194e7755cb2f83514d3ef4904a51721cea329f6ccb24477b55d9bdeb86e4178326362d0a1a6589218db42319"}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) (async) dup3(r0, r0, 0x0) (async) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x5, 0x4, 0xcc, 0xe5, &(0x7f0000000200)="36c33c434d3ff68dc5d1d11604799b75bc665bcb143bf07770bf07c86cc34c6ffb61856cd61c2f912ea4270dfae0027105f0b38b5bdf20ed95c9eafe21d36cb82a78202d72fe7af8d96f5acc64159ae6a11f27912b78a24c0f2696c0d2f171b7a6780707b51e8acdad23bbcfa5d8ca0dfb0c05d5e60f632e46cceba8dc4969c0afead9ed5984381ef19c3a364ec245093ac50dd06ac85b86bb3fc38cc1bd7fe9194e7755cb2f83514d3ef4904a51721cea329f6ccb24477b55d9bdeb86e4178326362d0a1a6589218db42319"}) (async) 15:27:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'tunl0\x00', 0x400}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) r1 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r1, 0x8208200) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00'}) sync_file_range(r2, 0xfffffffffffffe01, 0x3, 0x2) 15:27:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 37) 15:27:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x80000, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:27:08 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = inotify_init1(0x0) (async) r2 = syz_open_procfs(0x0, 0x0) (async) r3 = memfd_create(0x0, 0x0) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) (async) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) (async) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) (async, rerun: 32) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) (async, rerun: 32) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000280)={@local, @multicast1, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000004}, 0x840) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async, rerun: 64) dup3(r2, r3, 0x0) (rerun: 64) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000180)=0x6) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) (async) r8 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) (async) sendto$inet(r8, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r9 = socket$rxrpc(0x21, 0x2, 0xa) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r10, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r9], 0x4}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x4, 0x1f, 0x4, 0x20, 0x10, @private2, @mcast2, 0x7, 0x700, 0x0, 0xdf0}}) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r10, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffc0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4005}, 0x4) (async) close_range(r0, 0xffffffffffffffff, 0x0) 15:27:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000f38bb23dd23f44100000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff010000001d00000000000000000065727370616e300000000000000000006272696467653000400000000000bb976768aefd37190000b43b24af61af8e2f000000000000000065716c00000000000000000000000000ffffffffffff000000000000aaaaaaaaaa000000000000000000a000000010010000380100006d61726b5f6d00000000000000000000000000000000000000000000000000000c0000000400000001000000000100006e666c6f670000000000000000000000000000000000000000000000000000004c0000006d8000000900090000000000b80eba8ec4468a05f7d0c08be35638ee0eed5dd9119d918668afa6c019b085be3837595dc113ccf27499f7202a2b59394b26193cf57ec99b9abb99943198532b0b7bdd0f61e572656469726563740000000000000000000000000000000000000000000000000400"]}, 0x248) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) [ 908.545761][ T21] usb usb6-port1: unable to enumerate USB device [ 908.568440][ T9324] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 908.571254][ T9328] validate_nla: 1 callbacks suppressed [ 908.571270][ T9328] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:27:08 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = inotify_init1(0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = memfd_create(0x0, 0x0) fallocate(r3, 0x4a, 0xd8, 0xffffffffffffffff) r5 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f0000000140)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto$inet(r7, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000001c0)={r8, r9/1000+10000}, 0x10) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r10, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, 0xfffffffffffffffd, 0x20000000) write(r4, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) dup3(r3, r4, 0x0) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x80000094) r11 = socket(0x10, 0x803, 0x0) sendto$inet(r11, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendfile(r5, r11, 0x0, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 15:27:08 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'tunl0\x00', 0x400}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) r1 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r1, 0x8208200) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00'}) sync_file_range(r2, 0xfffffffffffffe01, 0x3, 0x2) (async) sync_file_range(r2, 0xfffffffffffffe01, 0x3, 0x2) [ 908.613038][ T9330] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 908.636943][ T9338] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 908.653986][ T9328] 8021q: adding VLAN 0 to HW filter on device batadv113 [ 908.663013][ T9328] bond56: (slave batadv113): Enslaving as a backup interface with an up link [ 908.672363][ T9346] syzkaller1: entered promiscuous mode [ 908.677957][ T9346] syzkaller1: entered allmulticast mode [ 908.698489][ T9344] 8021q: adding VLAN 0 to HW filter on device batadv263 [ 908.707748][ T9344] bond76: (slave batadv263): Enslaving as a backup interface with an up link [ 908.716759][ T9338] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 908.734200][ T9330] bond76 (unregistering): (slave batadv263): Releasing backup interface 15:27:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'tunl0\x00', 0x400}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) r1 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r1, 0x8208200) (async) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00'}) (async) sync_file_range(r2, 0xfffffffffffffe01, 0x3, 0x2) 15:27:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x1000000, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:27:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) fcntl$setpipe(r0, 0x407, 0x6) [ 908.758356][ T9330] bond76 (unregistering): Released all slaves [ 908.770014][ T9345] bond56 (unregistering): (slave batadv113): Releasing backup interface [ 908.789975][ T9345] bond56 (unregistering): Released all slaves 15:27:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 38) 15:27:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) fcntl$setpipe(r0, 0x407, 0x6) [ 908.847700][ T9355] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 908.880908][ T9360] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 908.910614][ T9355] 8021q: adding VLAN 0 to HW filter on device batadv264 [ 908.919323][ T9355] bond76: (slave batadv264): Enslaving as a backup interface with an up link [ 908.934527][ T9360] 8021q: adding VLAN 0 to HW filter on device batadv114 [ 908.943046][ T9360] bond56: (slave batadv114): Enslaving as a backup interface with an up link [ 908.954711][ T9355] bond76 (unregistering): (slave batadv264): Releasing backup interface [ 908.977055][ T9355] bond76 (unregistering): Released all slaves [ 908.993914][ T9360] bond56 (unregistering): (slave batadv114): Releasing backup interface [ 909.014291][ T9360] bond56 (unregistering): Released all slaves [ 909.020729][ T9360] FAULT_INJECTION: forcing a failure. [ 909.020729][ T9360] name failslab, interval 1, probability 0, space 0, times 0 [ 909.033391][ T9360] CPU: 0 PID: 9360 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 909.043889][ T9360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 909.053975][ T9360] Call Trace: [ 909.057279][ T9360] [ 909.060372][ T9360] dump_stack_lvl+0xda/0x130 [ 909.065005][ T9360] dump_stack+0x15/0x20 [ 909.069346][ T9360] should_fail_ex+0x21f/0x230 [ 909.074166][ T9360] ? kobject_uevent_env+0x1a1/0x5b0 [ 909.079394][ T9360] __should_failslab+0x92/0xa0 [ 909.084362][ T9360] should_failslab+0x9/0x20 [ 909.088915][ T9360] slab_pre_alloc_hook+0x38/0x180 [ 909.093977][ T9360] ? kobject_uevent_env+0x1a1/0x5b0 [ 909.099306][ T9360] __kmem_cache_alloc_node+0x48/0x1d0 [ 909.104718][ T9360] ? kobject_uevent_env+0x1a1/0x5b0 [ 909.109962][ T9360] kmalloc_trace+0x2a/0xa0 [ 909.114425][ T9360] kobject_uevent_env+0x1a1/0x5b0 [ 909.119533][ T9360] ? sysfs_remove_group+0x17a/0x190 [ 909.124935][ T9360] kobject_uevent+0x1c/0x20 [ 909.129686][ T9360] __kobject_del+0x8e/0x1a0 [ 909.134225][ T9360] kobject_put+0x119/0x170 [ 909.138684][ T9360] net_rx_queue_update_kobjects+0x3d5/0x410 [ 909.144644][ T9360] ? nlmsg_notify+0x127/0x170 [ 909.149433][ T9360] netdev_unregister_kobject+0xba/0x120 [ 909.155070][ T9360] unregister_netdevice_many_notify+0xc64/0x1070 [ 909.161516][ T9360] ? unregister_netdevice_queue+0x116/0x200 [ 909.167540][ T9360] ? list_netdevice+0x2a0/0x2a0 [ 909.172438][ T9360] rtnl_dellink+0x384/0x580 [ 909.176993][ T9360] ? __list_del_entry_valid+0x5f/0xe0 [ 909.182507][ T9360] ? _raw_spin_unlock+0x26/0x40 [ 909.187399][ T9360] ? __mutex_lock+0x21c/0x8d0 [ 909.192344][ T9360] ? rtnl_newlink+0x1600/0x1600 [ 909.197413][ T9360] rtnetlink_rcv_msg+0x807/0x8c0 [ 909.202471][ T9360] ? __rcu_read_unlock+0x4d/0x70 [ 909.207472][ T9360] ? slab_post_alloc_hook+0x8c/0x340 [ 909.212813][ T9360] ? kmem_cache_alloc+0x10f/0x220 [ 909.218013][ T9360] ? xas_load+0x37c/0x390 [ 909.222399][ T9360] ? skb_release_data+0x542/0x560 [ 909.227599][ T9360] ? kmem_cache_free+0x1db/0x3a0 [ 909.232764][ T9360] ? __kfree_skb+0x104/0x140 [ 909.237474][ T9360] ? nlmon_xmit+0x4b/0x60 [ 909.241850][ T9360] ? __kfree_skb+0x104/0x140 [ 909.246494][ T9360] ? consume_skb+0x57/0x180 [ 909.251034][ T9360] ? nlmon_xmit+0x4b/0x60 [ 909.255491][ T9360] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 909.260835][ T9360] ? ref_tracker_free+0x3a1/0x400 [ 909.265877][ T9360] ? __dev_queue_xmit+0xabb/0x1d10 [ 909.271090][ T9360] netlink_rcv_skb+0x126/0x220 [ 909.276119][ T9360] ? rtnetlink_bind+0x60/0x60 [ 909.280837][ T9360] rtnetlink_rcv+0x1c/0x20 [ 909.285340][ T9360] netlink_unicast+0x56f/0x640 [ 909.290323][ T9360] netlink_sendmsg+0x665/0x770 [ 909.295242][ T9360] ? netlink_getsockopt+0x3e0/0x3e0 [ 909.300571][ T9360] ____sys_sendmsg+0x37c/0x4d0 [ 909.305412][ T9360] __sys_sendmsg+0x1e9/0x270 [ 909.310221][ T9360] __x64_sys_sendmsg+0x46/0x50 [ 909.315138][ T9360] do_syscall_64+0x41/0xc0 [ 909.319669][ T9360] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 909.325672][ T9360] RIP: 0033:0x7f6f42996ae9 [ 909.330103][ T9360] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 909.349820][ T9360] RSP: 002b:00007f6f41d190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 909.358326][ T9360] RAX: ffffffffffffffda RBX: 00007f6f42ab5f80 RCX: 00007f6f42996ae9 [ 909.366339][ T9360] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 909.374358][ T9360] RBP: 00007f6f41d19120 R08: 0000000000000000 R09: 0000000000000000 [ 909.382382][ T9360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 909.390385][ T9360] R13: 000000000000000b R14: 00007f6f42ab5f80 R15: 00007ffc381e1498 [ 909.398407][ T9360] [ 910.615686][ T21] usb usb6-port1: attempt power cycle 15:27:12 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x13, 0x24101) 15:27:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) fcntl$setpipe(r0, 0x407, 0x6) 15:27:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x2000000, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:27:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 39) 15:27:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x248) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) 15:27:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = inotify_init1(0x0) r3 = syz_open_procfs(0x0, 0x0) (async) r4 = memfd_create(0x0, 0x0) fallocate(r3, 0x4a, 0xd8, 0xffffffffffffffff) (async) r5 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f0000000140)) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto$inet(r7, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000001c0)={r8, r9/1000+10000}, 0x10) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r10, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r6, 0xfffffffffffffffd, 0x20000000) (async) write(r4, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async) dup3(r3, r4, 0x0) (async) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x80000094) (async) r11 = socket(0x10, 0x803, 0x0) sendto$inet(r11, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendfile(r5, r11, 0x0, 0x3) (async) close_range(r0, 0xffffffffffffffff, 0x0) [ 912.605858][ T21] usb usb6-port1: unable to enumerate USB device [ 912.637751][ T9374] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 912.638961][ T9371] syzkaller1: entered promiscuous mode 15:27:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r2 = inotify_init1(0x0) (rerun: 32) r3 = syz_open_procfs(0x0, 0x0) r4 = memfd_create(0x0, 0x0) (async) fallocate(r3, 0x4a, 0xd8, 0xffffffffffffffff) (async) r5 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f0000000140)) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendto$inet(r7, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000001c0)={r8, r9/1000+10000}, 0x10) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r10, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, 0xfffffffffffffffd, 0x20000000) (async, rerun: 64) write(r4, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) (async, rerun: 64) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async, rerun: 64) dup3(r3, r4, 0x0) (async, rerun: 64) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x80000094) (async, rerun: 32) r11 = socket(0x10, 0x803, 0x0) (rerun: 32) sendto$inet(r11, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) (async) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendfile(r5, r11, 0x0, 0x3) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 32) [ 912.651486][ T9371] syzkaller1: entered allmulticast mode 15:27:12 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x13, 0x24101) syz_open_dev$usbfs(&(0x7f00000000c0), 0x13, 0x24101) (async) 15:27:12 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x13, 0x24101) 15:27:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = inotify_init1(0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = memfd_create(0x0, 0x0) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) dup3(r2, r3, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendto$inet(r9, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r10, @ANYBLOB="00000000000000001c0012000b000100627246646765"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000104fd0008000fa1bb7400000000", @ANYRES32=r6, @ANYBLOB="001d82000000000008000a00", @ANYRES32=r10], 0x28}}, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x80047210, &(0x7f0000000080)) [ 912.679376][ T9372] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 912.709784][ T9380] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:27:12 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x10, 0x0, 0x1000f4) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)={0x18fe, 0x1e, [{0x1}, {0x7, 0x1}, {0xe, 0x1}, {0x0, 0x1}, {0xf}, {0xd, 0x1}, {0x9, 0x1}, {0x7}, {0x0, 0x1}, {0x3}, {0x6, 0x1}, {0x8}, {0xb, 0x1}, {0x3, 0x1}, {0xb}, {0x8}, {0xd, 0x1}, {0x6}, {0xc, 0x1}, {0x9, 0x1}, {0xf, 0x1}, {0xb, 0x1}, {0xf, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x7}, {0x9}, {0x3}, {0xe, 0x1}]}) [ 912.740748][ T9396] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 912.769188][ T9389] 8021q: adding VLAN 0 to HW filter on device batadv265 [ 912.778228][ T9389] bond76: (slave batadv265): Enslaving as a backup interface with an up link 15:27:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='syzkaller1\x00') ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000080)=""/43) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r1, 0x10, 0x0, 0x1000f4) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f00000007c0)={0x12f, 0xe63, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x101) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x8000, 0x202200) openat2(r2, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180)={0x20100, 0x80, 0x7}, 0x18) [ 912.792950][ T9380] bond56 (unregistering): Released all slaves 15:27:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = inotify_init1(0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = memfd_create(0x0, 0x0) (async) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) (async) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) dup3(r2, r3, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) sendto$inet(r9, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r10, @ANYBLOB="00000000000000001c0012000b000100627246646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000104fd0008000fa1bb7400000000", @ANYRES32=r6, @ANYBLOB="001d82000000000008000a00", @ANYRES32=r10], 0x28}}, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x80047210, &(0x7f0000000080)) [ 912.833803][ T9372] bond76 (unregistering): (slave batadv265): Releasing backup interface [ 912.858671][ T9372] bond76 (unregistering): Released all slaves [ 912.869866][ T9396] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 15:27:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='syzkaller1\x00') (async) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000080)=""/43) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r1, 0x10, 0x0, 0x1000f4) (async) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f00000007c0)={0x12f, 0xe63, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x101) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x8000, 0x202200) openat2(r2, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180)={0x20100, 0x80, 0x7}, 0x18) 15:27:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x3000000, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:27:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 40) [ 912.954939][ T9408] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 912.989776][ T9418] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 913.032209][ T9418] 8021q: adding VLAN 0 to HW filter on device batadv115 [ 913.040804][ T9418] bond56: (slave batadv115): Enslaving as a backup interface with an up link [ 913.049783][ T9419] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 913.067675][ T9418] bond56 (unregistering): (slave batadv115): Releasing backup interface [ 913.087978][ T9418] bond56 (unregistering): Released all slaves [ 913.094287][ T9418] FAULT_INJECTION: forcing a failure. [ 913.094287][ T9418] name failslab, interval 1, probability 0, space 0, times 0 [ 913.107065][ T9418] CPU: 0 PID: 9418 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 913.117447][ T9418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 913.127727][ T9418] Call Trace: [ 913.131021][ T9418] [ 913.133975][ T9418] dump_stack_lvl+0xda/0x130 [ 913.138601][ T9418] dump_stack+0x15/0x20 [ 913.142849][ T9418] should_fail_ex+0x21f/0x230 [ 913.147551][ T9418] __should_failslab+0x92/0xa0 [ 913.152364][ T9418] should_failslab+0x9/0x20 [ 913.156917][ T9418] slab_pre_alloc_hook+0x38/0x180 [ 913.162018][ T9418] kmem_cache_alloc_node+0x54/0x240 [ 913.167269][ T9418] ? __alloc_skb+0x109/0x2e0 [ 913.171896][ T9418] __alloc_skb+0x109/0x2e0 [ 913.176344][ T9418] alloc_uevent_skb+0x5b/0x120 [ 913.181148][ T9418] kobject_uevent_net_broadcast+0xf6/0x3f0 [ 913.187110][ T9418] kobject_uevent_env+0x467/0x5b0 [ 913.192180][ T9418] kobject_uevent+0x1c/0x20 [ 913.196774][ T9418] __kobject_del+0x8e/0x1a0 [ 913.201429][ T9418] kobject_put+0x119/0x170 [ 913.205929][ T9418] net_rx_queue_update_kobjects+0x3d5/0x410 [ 913.211856][ T9418] ? nlmsg_notify+0x127/0x170 [ 913.216598][ T9418] netdev_unregister_kobject+0xba/0x120 [ 913.222223][ T9418] unregister_netdevice_many_notify+0xc64/0x1070 [ 913.228661][ T9418] ? unregister_netdevice_queue+0x116/0x200 [ 913.234773][ T9418] ? list_netdevice+0x2a0/0x2a0 [ 913.239665][ T9418] rtnl_dellink+0x384/0x580 [ 913.244252][ T9418] ? __list_del_entry_valid+0x5f/0xe0 [ 913.249658][ T9418] ? _raw_spin_unlock+0x26/0x40 [ 913.254545][ T9418] ? __mutex_lock+0x21c/0x8d0 [ 913.259303][ T9418] ? rtnl_newlink+0x1600/0x1600 [ 913.264256][ T9418] rtnetlink_rcv_msg+0x807/0x8c0 [ 913.269253][ T9418] ? __rcu_read_unlock+0x4d/0x70 [ 913.274232][ T9418] ? slab_post_alloc_hook+0x8c/0x340 [ 913.279554][ T9418] ? kmem_cache_alloc+0x10f/0x220 [ 913.284716][ T9418] ? xas_load+0x37c/0x390 [ 913.289157][ T9418] ? skb_release_data+0x542/0x560 [ 913.294260][ T9418] ? kmem_cache_free+0x1db/0x3a0 [ 913.299236][ T9418] ? __kfree_skb+0x104/0x140 [ 913.303866][ T9418] ? nlmon_xmit+0x4b/0x60 [ 913.308236][ T9418] ? __kfree_skb+0x104/0x140 [ 913.312874][ T9418] ? consume_skb+0x57/0x180 [ 913.317463][ T9418] ? nlmon_xmit+0x4b/0x60 [ 913.321824][ T9418] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 913.327218][ T9418] ? ref_tracker_free+0x3a1/0x400 [ 913.332353][ T9418] ? __dev_queue_xmit+0xabb/0x1d10 [ 913.337573][ T9418] netlink_rcv_skb+0x126/0x220 [ 913.342380][ T9418] ? rtnetlink_bind+0x60/0x60 [ 913.347131][ T9418] rtnetlink_rcv+0x1c/0x20 [ 913.351600][ T9418] netlink_unicast+0x56f/0x640 [ 913.356419][ T9418] netlink_sendmsg+0x665/0x770 [ 913.361293][ T9418] ? netlink_getsockopt+0x3e0/0x3e0 [ 913.366600][ T9418] ____sys_sendmsg+0x37c/0x4d0 [ 913.371472][ T9418] __sys_sendmsg+0x1e9/0x270 [ 913.376157][ T9418] __x64_sys_sendmsg+0x46/0x50 [ 913.380955][ T9418] do_syscall_64+0x41/0xc0 [ 913.385492][ T9418] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 913.391426][ T9418] RIP: 0033:0x7f6f42996ae9 [ 913.395856][ T9418] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 913.415518][ T9418] RSP: 002b:00007f6f41d190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 913.423988][ T9418] RAX: ffffffffffffffda RBX: 00007f6f42ab5f80 RCX: 00007f6f42996ae9 [ 913.431986][ T9418] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 913.439980][ T9418] RBP: 00007f6f41d19120 R08: 0000000000000000 R09: 0000000000000000 [ 913.448000][ T9418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 913.456139][ T9418] R13: 000000000000000b R14: 00007f6f42ab5f80 R15: 00007ffc381e1498 [ 913.464143][ T9418] [ 913.479798][ T9421] 8021q: adding VLAN 0 to HW filter on device batadv266 [ 913.488237][ T9421] bond76: (slave batadv266): Enslaving as a backup interface with an up link [ 913.499397][ T9419] bond76 (unregistering): (slave batadv266): Releasing backup interface [ 913.527544][ T9419] bond76 (unregistering): Released all slaves 15:27:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000f38bb23dd23f44100000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff010000001d00000000000000000065727370616e300000000000000000006272696467653000400000000000bb976768aefd37190000b43b24af61af8e2f000000000000000065716c00000000000000000000000000ffffffffffff000000000000aaaaaaaaaa000000000000000000a000000010010000380100006d61726b5f6d00000000000000000000000000000000000000000000000000000c0000000400000001000000000100006e666c6f670000000000000000000000000000000000000000000000000000004c0000006d8000000900090000000000b80eba8ec4468a05f7d0c08be35638ee0eed5dd9119d918668afa6c019b085be3837595dc113ccf27499f7202a2b59394b26193cf57ec99b9abb99943198532b0b7bdd0f61e572656469726563740000000000000000000000000000000000000000000000000400"]}, 0x248) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) 15:27:13 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = inotify_init1(0x0) syz_open_procfs(0x0, 0x0) (async) r2 = syz_open_procfs(0x0, 0x0) r3 = memfd_create(0x0, 0x0) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) dup3(r2, r3, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) (async) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendto$inet(r9, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r10, @ANYBLOB="00000000000000001c0012000b000100627246646765"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000104fd0008000fa1bb7400000000", @ANYRES32=r6, @ANYBLOB="001d82000000000008000a00", @ANYRES32=r10], 0x28}}, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x80047210, &(0x7f0000000080)) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x80047210, &(0x7f0000000080)) 15:27:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 41) 15:27:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='syzkaller1\x00') (async) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000080)=""/43) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r1, 0x10, 0x0, 0x1000f4) (async) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f00000007c0)={0x12f, 0xe63, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x101) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x8000, 0x202200) openat2(r2, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180)={0x20100, 0x80, 0x7}, 0x18) 15:27:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x4000000, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 913.603528][ T9427] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 913.616690][ T9424] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 913.630728][ T9427] 8021q: adding VLAN 0 to HW filter on device batadv116 [ 913.642149][ T9427] bond56: (slave batadv116): Enslaving as a backup interface with an up link [ 913.656174][ T9427] bond56 (unregistering): (slave batadv116): Releasing backup interface [ 913.676787][ T9427] bond56 (unregistering): Released all slaves [ 913.688383][ T9434] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 15:27:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) r1 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r1, 0x8208200) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000080)) [ 913.704953][ T9424] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 913.731652][ T9438] 8021q: adding VLAN 0 to HW filter on device batadv267 [ 913.749573][ T9438] bond76: (slave batadv267): Enslaving as a backup interface with an up link [ 913.758796][ T9429] bond0: left allmulticast mode [ 913.763682][ T9429] bond_slave_0: left allmulticast mode [ 913.769346][ T9429] bond_slave_1: left allmulticast mode [ 913.775059][ T9429] bridge111: port 1(bond0) entered disabled state [ 913.812877][ T9434] bond76 (unregistering): (slave batadv267): Releasing backup interface [ 913.863185][ T9434] bond76 (unregistering): Released all slaves [ 913.892078][ T9437] syzkaller1: entered promiscuous mode [ 913.897883][ T9437] syzkaller1: entered allmulticast mode [ 914.815899][ T3068] usb usb6-port1: attempt power cycle 15:27:16 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x10, 0x0, 0x1000f4) (async) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)={0x18fe, 0x1e, [{0x1}, {0x7, 0x1}, {0xe, 0x1}, {0x0, 0x1}, {0xf}, {0xd, 0x1}, {0x9, 0x1}, {0x7}, {0x0, 0x1}, {0x3}, {0x6, 0x1}, {0x8}, {0xb, 0x1}, {0x3, 0x1}, {0xb}, {0x8}, {0xd, 0x1}, {0x6}, {0xc, 0x1}, {0x9, 0x1}, {0xf, 0x1}, {0xb, 0x1}, {0xf, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x7}, {0x9}, {0x3}, {0xe, 0x1}]}) 15:27:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 42) 15:27:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x5000000, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:27:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) creat(&(0x7f0000000440)='./bus\x00', 0x0) (async) r1 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r1, 0x8208200) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000080)) 15:27:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = inotify_init1(0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = memfd_create(0x0, 0x0) r5 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f0000000140)) write(r4, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x200) r6 = dup3(r3, r4, 0x0) r7 = socket$inet_dccp(0x2, 0x6, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000c00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x4, [@enum={0x8, 0x7, 0x0, 0x6, 0x4, [{0xf, 0x1}, {0xc, 0x5c63}, {0x5, 0x80}, {0xe, 0xc4}, {0x6, 0x1f}, {0x6, 0x1}, {0x7, 0x7fffffff}]}, @union={0x2, 0x4, 0x0, 0x5, 0x1, 0x1, [{0xa, 0x4, 0x7}, {0x1, 0x3, 0x400}, {0x8, 0x0, 0x5}, {0xa, 0x1, 0x7}]}, @typedef={0xa, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000cc0)=""/63, 0xa8, 0x3f, 0x1}, 0x20) r9 = io_uring_setup(0x1e32, &(0x7f0000000f40)={0x0, 0xb076, 0x200, 0x2, 0x1d8, 0x0, r6}) r10 = timerfd_create(0x3, 0x80800) r11 = syz_clone3(&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_open(r11, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r13) r14 = syz_clone3(&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_open(r14, 0x0) r15 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r16) r17 = getgid() r18 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000004d00)={r3, r3, 0x14}, 0x10) sendmmsg$unix(r3, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)}], 0x1, &(0x7f0000004f40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120, 0x4000114}}, {{&(0x7f0000000540)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000b40)=[{&(0x7f00000005c0)="3ed34e3f62fed5c37bb1252bbd72d13bec1ddc320a121fbce37871adbe2f9c49840829f1ca88f22b2b02bd2f2f5cb5c72da540f6eaa9772512a7c9b512c8d7a5f13286a36546903b0c96efdede301f2e58d3fe7df0e418c08ee8118c379c45f8cd87f5", 0x63}, {&(0x7f0000000640)="1705f26d4f08ccde9435ef178729004da986a24c09717434a4fc7e7018e50a3c4017b9c615812d1dd1e4614fb02a97abbe5e5debfe08c8fbb6eb04f43ac3c8c34b8b447a464dbde9ee165071e205313686fe585f74ba1216a37bec81c970973eff06d02f716a580e5f6deef714b51d47f7b4914d84c855c696da3914ed39313a66cae0cc1604393193b7611a3c0f29d7cdd12a883a200fbd4efdcd0884e1eaa615622527819ab67d1b0dc489176ac214bc", 0xb1}, {&(0x7f0000000700)="eb267e780108f91fef896c70232286eb9627e2d876ebd6fa9c8c84d88d1c1ca0b1e6e915dc90083ed9a6f33724111fbe4e89f7123ea608f390b4ab40ca7943835a", 0x41}, {&(0x7f0000000780)="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", 0xfb}, {&(0x7f0000000880)="e058757d795632f3b28104452a68ae18eb36379cb4fd5e9e7b5544b178c81e284171098968a4148df3c28fffc36231f107995de7321f1ff81d48079e72a1639d672a6c82bf3686a15ecb4e8a605f3a0d4658140629678db123c21bfadb215d1a29245983301ffac0658c8c5b7ffe6d58542212c417a4c65290db7c4587e5849aa2104c2ce3a862ba83984ee975249fb6cd1368ef1e06ff5f4d1c0edfc8c6b2c376cc09fb7432698f0f8314a76ffb21b840e4adc15ee5d3c1bdf2297d148052e5a66881443a9100f8592d0bbd68e1363e0781b9a9ddfb53d9c8314525b7a233b4076bce78db9bec82", 0xe8}, {&(0x7f0000000980)="7d7873da485cf084dc1e5c188797ad9f38b75cfffd1083ff69f8a437252a989ade9b043b4965fb66390691c1f5076f973287168f2d90ed3e31bca386cb0f9f77cb", 0x41}, {&(0x7f0000000a00)="0000b85ddf830530986581deaca075491b07e32965250cc6132f4159275cc02a5bafa6d174754fea31e22945910dbbd89f08f7ef3532bccfc239f1c2726a453333da2d85d4a6f28ac924394d315e41a950ee0eaef1ec251896351ca554f21284d861339dfc0e1fc09dcd0161be45a43bd79d7a68d1ffde45a8bab9101eb0ab5492242c7533a9b4e7dd177895c30bfa71af9515e4ca5eb02805b75f2c05903aefbe3554db11c1ead8573089dc1bdbf29177c2954f0e7da49db1894a0e0dd0b31d49d3ffeac61da3e7240bca35f75173cad0dfcddd87aaaee484b2bc62acd08aecc403683cc7f95abf652b18d10aa981fd", 0xf0}, {&(0x7f0000000b00)="e14dd7c211fa869cd9b69de6586321ceb4ece40ed06142ac4ad5a0ac394dcd", 0x1f}], 0x8, &(0x7f0000000d40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r5, r3, 0xffffffffffffffff, r3, r5]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r5, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, r3, r8]}}], 0xc0, 0x1}}, {{&(0x7f0000000e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000e80)="96fd6a5c7e4ff826ef4014184988d5566dd89fdc0617ad8bec7cf3561a44361d0b63af82ed162330437aa4016523c36d7777578fdbe93821c3a4cd8a1a6707a0805e6aec4ae901ec7ea84bc6a06400ace39507b69af2e01c76b04ef17f5b459b781858cc8124bcde31e9c679ed87", 0x6e}], 0x1, &(0x7f0000000fc0)=[@rights={{0x1c, 0x1, 0x1, [r9, r10, r0]}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38, 0x4002000}}, {{&(0x7f0000001000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001180)=[{&(0x7f0000001080)="5c6bf47e10dd70f3d41f2a824b28343ef9f91d611f13cc75a6162cda1af81c064702e8ef46c23efe0184a933ad6f91efab87e3615f9567baa7c3c12f676873e8a45b36e70a5552f8df217294c2d38932ea9aa3be5ff2ea8212a723360deaa0731ff225d76d3f1c25154153a13b04193b9a62d8138756fb5b9654924502e54d2a5fecd037838ac6fd62198de75d8f99f19281ca0b2241545c21e317e9123443ff61987df77a899721b629ca14d813ebe68ff08fb4e156d086f3192528e9fa3bd22ae6e378db9db551318d", 0xca}], 0x1, 0x0, 0x0, 0x48000}}, {{&(0x7f00000011c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002640)=[{&(0x7f0000001240)="e2128eca4952ab03c21a0efbef699a46f75f1e0b69e1a96c5ad1026eb35ff32cbd2836a934d97e2447c3850d029610b802", 0x31}, {&(0x7f0000001280)="0f1a0445e144f9ace313cb2a3a4bf71b44de2793825e335ca2751051f02780b93e4e267bf014b75b4e34d30cb3a500f4e95f608c204465126ede53203f9a3495b2082d74779fbaf3ecafc6f7957b40a5a4e80bcf9e411efd5c80303d5eca28f8a9ddb817a179869e73d3efb1b199c8630e", 0x71}, {&(0x7f0000001300)="4d03f468c6046bfec83c5154d406f1816e6a022de6e622e63b4b1f899393adecab817ee4f831e2e7578dcac0bca8f39c29e370d057061e7772756bc36113939fab0ba0570c867bcb1e149bea8848c7f977838ac0741624e260791e1963818abe5d27302064a339e8395c8f4fae6477e67a0d639374520b7e793038167d2990fb3a5922b9e0dd1ed889ca3436170f55b14162fa76da124ed0ed40d675692b6cc91e0002de28987b8b61dc5a7d", 0xac}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f00000023c0)="d8b2230ebad1dd1f5d7ede5eeebfc05b69066cbf57803f1d79af250a6a736e3ead5f67718919a06020f2e36241f01e445a2d854e817d2650d7637d6061d20c9f4cdf912124c76339d8229bd4028b8d4677ee30f3fd424813fe20ec138d1e5da00947768b1010c038a0ac940f68ed3b4bc20162e278de24e9a0abac77ceddd4fa3d7820f4b61b611f1783fb0df30f52cd7641676fcb4e179dde101a842c5b4e0f6f5fcaca8f4be34836f5d9dc043794646371a28cdad9a6e3f3c6473808640b8a3cd0f2e17bb960daa08cb9b5c2af6721f0b2b0b8406135e6df2b6e3d121161dc39becdb1df744df51bb1342bf5", 0xed}, {&(0x7f00000002c0)="95c2ae5107d82b9c944f900ea7c130f589061c548e1cd284cb15a10527b9c04a0067f956baf6b6533d73eb3aa31a37a0e2b968f798a877db16404e62458491f37aa2035ae0e0e46f8c6e26b0bc7258a064bddcc08823c15bf522eeccf6f85cfec7c7fe75060e7917d1ca801d5a3733891d864db989276fb6d0b4222ba5801ba0dd764a4061c18874b1acf1ef9234d932fee7d009a61bc842bb859d95f89e3549d8fc8448f047cf7f081ca4c80a20d4e7e19b47fced604affbe930cfe0d1be27fdb973f15c175448d1f83a365e5eed903266ceec1564e7401051520a63818a6aae2ea077306e75f969987abad87af46b0255c550f07", 0xf5}, {&(0x7f00000025c0)="265f12d1d5d817e4c04d08a5d7ea8f3b7751acc37f6353cd26864673d0972350e8e94d0e210b054b64a1063b21ed7673d8ba9b7fbccc57540137c8574c9ded133f30b8b7a3646c0631508707edf42254ff336e67", 0x54}], 0x7, &(0x7f00000026c0)=[@cred={{0x1c, 0x1, 0x2, {r11, r13}}}], 0x20}}, {{&(0x7f0000002700)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000003b80)=[{&(0x7f0000002780)="30e8d9b9d865621cf91d6e33457301996141a9900339a73174102a5cf69e33dca14b00166d1cb5ff6c009f38919b54b289f988e229f9a97a71bd0a180b479bd6ea49d2cea207c049a85dfb41c7e99bfb74d57e312164edea50890570a9ddbbf5038babeec4cd06c583ac04ed795c8ec36cc3e88e1b9a4737315e7d097f471dca3241a3b1fae78fbbdc3c6cf7a29ee2ec081a109ad14240a5e8039bb26526", 0x9e}, {&(0x7f0000002840)="aa103168303cb831be85d902dbc87ecafd6853d7dee8a309e7d3566b02bd93ca9a0b2d6c497c0336dd555ae07ead6550f42603aaa654454704739072d597eaa939e740ae151276de8a1355d3ff692ac3ef90f608ef5ea2fb5306aa669f9857f6978ab347e2642d02237445308cfa6b923bc95ea0ba6b8874aca2791c1b5af48ca18a47c383728176b051b98af92d6f0c9ec328c06170cb5e64ba4719c536c9b22b9c4b48f7b37b55", 0xa8}, {&(0x7f0000002900)="08e9330d3767c7661564d3283bf280ed0cd90d685f61319c3ce5a107e950026198e1bcde0b032a943a4d7b0ea09c52528a0df5c7fdb2e0dbbef779ee743896574581b3c63fd532b38521bf7a1cbf0ff2758e7474dab3f9ba3693e0cf5a1a8ff9cd1cf1d838f1a1bc54186704324851e225b5730254a8e84a05aeeefe1b9dba8e78e7", 0x82}, {&(0x7f00000029c0)="b6bf08d9bd42e2639638709cf47478ee69f210fd9e20bd6d2353ef132b8b57171064b36531e3a23d7bf4601e45005633f526b20333bda61d049170543d0cf6984a317460db03dada0728cb3a244020f7ea1c375404393575a32fa7a265d5252315cbea25f169d9e480adc535d126b55e4dc95baeada053f45812825b3bd87ce5787b768348d841efa894594b388864f61120a0cb7781cc46aa26c5600d736eaa08f235d5e317151813acf900cbbe5e2a0c1997b0ef4c", 0xb6}, {&(0x7f0000002a80)="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", 0x1000}, {&(0x7f0000003a80)="8bab41acec3d1d16167d6df9355913ba452580e79aa068fda52ea51401ba7aa77078c6444559bda2cb01dc6225c0506eccac842aecb93d4ef6afdc7adfff40841551ddabe8b591ca6641ccccc684c143c18f08cf880233963b3fb0d64a27c6a12243b2f42a3f1a5a4d1fcb4c8e6d705b25da8dc8a72e660475baece2346a356c4338f190cf7b15cb248b154e148a767e8e6a9ec3ebc38c78d6b743e82641a9658d4f18a0386608bc1549d51ba1ec0981b4ca669fa4e96bad87bb952731babde38ff0bce8709c1eafe30ed6bbc923171438c4d92e38ac29efdceaa251f4a1c8", 0xdf}], 0x6, &(0x7f0000003c00), 0x0, 0x4000000}}, {{0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000003c40)="813ce8db4e0cdd7729052c679779571fbda78da117efe3fe1373", 0x1a}, {&(0x7f0000003c80)="3ffa974eb0d3fcb0d98c788b2cf32d85683e5bd0b043446e166e48332b0f9150f08308ddd0be3fb2757c505bf55793c905760ffba7ad88", 0x37}, {&(0x7f0000003cc0)="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", 0x1000}], 0x3, &(0x7f0000004d40)=[@cred={{0x1c, 0x1, 0x2, {r14, r16, r17}}}, @rights={{0x18, 0x1, 0x1, [r18, r3]}}], 0x38, 0x4004815}}], 0x7, 0x8801) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)) 15:27:16 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x248) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x0, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) 15:27:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async, rerun: 32) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (rerun: 32) r1 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r1, 0x8208200) (async, rerun: 32) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000080)) (rerun: 32) [ 916.775905][ T3068] usb usb6-port1: unable to enumerate USB device [ 916.802670][ T9455] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 916.807417][ T9457] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 916.847046][ T9459] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 916.865623][ T9458] syzkaller1: entered promiscuous mode [ 916.871151][ T9458] syzkaller1: entered allmulticast mode [ 916.885341][ T9455] 8021q: adding VLAN 0 to HW filter on device batadv117 [ 916.896022][ T9455] bond56: (slave batadv117): Enslaving as a backup interface with an up link [ 916.921354][ T9459] 8021q: adding VLAN 0 to HW filter on device batadv268 [ 916.939556][ T9459] bond76: (slave batadv268): Enslaving as a backup interface with an up link [ 916.951900][ T9471] bond76 (unregistering): (slave batadv268): Releasing backup interface [ 916.973351][ T9471] bond76 (unregistering): Released all slaves [ 916.985265][ T9455] bond56 (unregistering): (slave batadv117): Releasing backup interface [ 917.012479][ T9455] bond56 (unregistering): Released all slaves [ 917.018877][ T9455] FAULT_INJECTION: forcing a failure. [ 917.018877][ T9455] name failslab, interval 1, probability 0, space 0, times 0 [ 917.031710][ T9455] CPU: 1 PID: 9455 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 917.042159][ T9455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 917.052269][ T9455] Call Trace: [ 917.055560][ T9455] [ 917.058507][ T9455] dump_stack_lvl+0xda/0x130 [ 917.063154][ T9455] dump_stack+0x15/0x20 [ 917.067416][ T9455] should_fail_ex+0x21f/0x230 [ 917.072161][ T9455] ? kobject_uevent_env+0x1a1/0x5b0 [ 917.077387][ T9455] __should_failslab+0x92/0xa0 [ 917.082329][ T9455] should_failslab+0x9/0x20 [ 917.086928][ T9455] slab_pre_alloc_hook+0x38/0x180 [ 917.092010][ T9455] ? kobject_uevent_env+0x1a1/0x5b0 [ 917.097273][ T9455] __kmem_cache_alloc_node+0x48/0x1d0 [ 917.102790][ T9455] ? kobject_uevent_env+0x1a1/0x5b0 [ 917.108094][ T9455] kmalloc_trace+0x2a/0xa0 [ 917.112540][ T9455] kobject_uevent_env+0x1a1/0x5b0 [ 917.117661][ T9455] ? sysfs_remove_group+0x17a/0x190 [ 917.123036][ T9455] kobject_uevent+0x1c/0x20 [ 917.127707][ T9455] __kobject_del+0x8e/0x1a0 [ 917.132352][ T9455] kobject_put+0x119/0x170 [ 917.136894][ T9455] net_rx_queue_update_kobjects+0x3d5/0x410 [ 917.142886][ T9455] ? nlmsg_notify+0x127/0x170 [ 917.147596][ T9455] netdev_unregister_kobject+0xba/0x120 [ 917.153329][ T9455] unregister_netdevice_many_notify+0xc64/0x1070 [ 917.159706][ T9455] ? unregister_netdevice_queue+0x116/0x200 [ 917.165633][ T9455] ? list_netdevice+0x2a0/0x2a0 [ 917.170593][ T9455] rtnl_dellink+0x384/0x580 [ 917.175237][ T9455] ? __list_del_entry_valid+0x5f/0xe0 [ 917.180737][ T9455] ? _raw_spin_unlock+0x26/0x40 [ 917.185734][ T9455] ? __mutex_lock+0x21c/0x8d0 [ 917.190481][ T9455] ? rtnl_newlink+0x1600/0x1600 [ 917.195440][ T9455] rtnetlink_rcv_msg+0x807/0x8c0 [ 917.200486][ T9455] ? slab_post_alloc_hook+0x8c/0x340 [ 917.205811][ T9455] ? kmem_cache_alloc+0x10f/0x220 [ 917.210882][ T9455] ? xas_load+0x37c/0x390 [ 917.215304][ T9455] ? skb_release_data+0x542/0x560 [ 917.220500][ T9455] ? kmem_cache_free+0x1db/0x3a0 [ 917.225491][ T9455] ? __kfree_skb+0x104/0x140 [ 917.230118][ T9455] ? nlmon_xmit+0x4b/0x60 [ 917.234555][ T9455] ? __kfree_skb+0x104/0x140 [ 917.239192][ T9455] ? consume_skb+0x57/0x180 [ 917.243813][ T9455] ? nlmon_xmit+0x4b/0x60 [ 917.248236][ T9455] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 917.253623][ T9455] ? ref_tracker_free+0x3a1/0x400 [ 917.258841][ T9455] ? __dev_queue_xmit+0xabb/0x1d10 [ 917.264086][ T9455] netlink_rcv_skb+0x126/0x220 [ 917.268891][ T9455] ? rtnetlink_bind+0x60/0x60 [ 917.273896][ T9455] rtnetlink_rcv+0x1c/0x20 [ 917.278452][ T9455] netlink_unicast+0x56f/0x640 [ 917.283260][ T9455] netlink_sendmsg+0x665/0x770 [ 917.288185][ T9455] ? netlink_getsockopt+0x3e0/0x3e0 [ 917.293554][ T9455] ____sys_sendmsg+0x37c/0x4d0 [ 917.298383][ T9455] __sys_sendmsg+0x1e9/0x270 [ 917.303076][ T9455] __x64_sys_sendmsg+0x46/0x50 [ 917.307925][ T9455] do_syscall_64+0x41/0xc0 [ 917.312573][ T9455] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 917.318520][ T9455] RIP: 0033:0x7f6f42996ae9 [ 917.322953][ T9455] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 917.342656][ T9455] RSP: 002b:00007f6f41d190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 917.351331][ T9455] RAX: ffffffffffffffda RBX: 00007f6f42ab5f80 RCX: 00007f6f42996ae9 15:27:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x6000000, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:27:17 executing program 3: io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000380)={0xfffffffd, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/112, 0x70}, {&(0x7f0000000100)=""/151, 0x97}, {&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/140, 0x8c}], &(0x7f0000000340)=[0x7, 0x401, 0x3, 0x40fa], 0x4}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa325f159aa687697, 0x4002011, r1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x4) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) [ 917.359373][ T9455] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 917.367389][ T9455] RBP: 00007f6f41d19120 R08: 0000000000000000 R09: 0000000000000000 [ 917.375471][ T9455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 917.383557][ T9455] R13: 000000000000000b R14: 00007f6f42ab5f80 R15: 00007ffc381e1498 [ 917.391597][ T9455] [ 917.426440][ T9476] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 917.453463][ T9476] 8021q: adding VLAN 0 to HW filter on device batadv269 [ 917.462176][ T9476] bond76: (slave batadv269): Enslaving as a backup interface with an up link 15:27:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 43) 15:27:17 executing program 3: io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000380)={0xfffffffd, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/112, 0x70}, {&(0x7f0000000100)=""/151, 0x97}, {&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/140, 0x8c}], &(0x7f0000000340)=[0x7, 0x401, 0x3, 0x40fa], 0x4}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa325f159aa687697, 0x4002011, r1, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa325f159aa687697, 0x4002011, r1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x4) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) [ 917.479742][ T9476] bond76 (unregistering): (slave batadv269): Releasing backup interface [ 917.517807][ T9476] bond76 (unregistering): Released all slaves 15:27:17 executing program 3: io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000380)={0xfffffffd, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/112, 0x70}, {&(0x7f0000000100)=""/151, 0x97}, {&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/140, 0x8c}], &(0x7f0000000340)=[0x7, 0x401, 0x3, 0x40fa], 0x4}, 0x20) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa325f159aa687697, 0x4002011, r1, 0x0) (async) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x4) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) [ 917.529438][ T9481] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 917.552770][ T9481] 8021q: adding VLAN 0 to HW filter on device batadv118 [ 917.562129][ T9481] bond56: (slave batadv118): Enslaving as a backup interface with an up link [ 917.587605][ T9481] bond56 (unregistering): (slave batadv118): Releasing backup interface [ 917.611923][ T9481] bond56 (unregistering): Released all slaves [ 917.619348][ T9481] FAULT_INJECTION: forcing a failure. [ 917.619348][ T9481] name failslab, interval 1, probability 0, space 0, times 0 [ 917.632065][ T9481] CPU: 1 PID: 9481 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 917.642420][ T9481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 917.652565][ T9481] Call Trace: [ 917.655906][ T9481] [ 917.658860][ T9481] dump_stack_lvl+0xda/0x130 [ 917.663716][ T9481] dump_stack+0x15/0x20 [ 917.667914][ T9481] should_fail_ex+0x21f/0x230 [ 917.672650][ T9481] ? kobject_get_path+0x85/0x160 [ 917.677945][ T9481] __should_failslab+0x92/0xa0 [ 917.683078][ T9481] should_failslab+0x9/0x20 [ 917.687804][ T9481] slab_pre_alloc_hook+0x38/0x180 [ 917.693047][ T9481] ? kobject_get_path+0x85/0x160 [ 917.698222][ T9481] ? kobject_get_path+0x85/0x160 [ 917.703196][ T9481] __kmem_cache_alloc_node+0x48/0x1d0 [ 917.708605][ T9481] ? kobject_get_path+0x85/0x160 [ 917.713711][ T9481] __kmalloc+0x95/0x1a0 [ 917.718057][ T9481] kobject_get_path+0x85/0x160 [ 917.722867][ T9481] kobject_uevent_env+0x1b6/0x5b0 [ 917.727996][ T9481] ? sysfs_remove_group+0x17a/0x190 [ 917.734030][ T9481] kobject_uevent+0x1c/0x20 [ 917.738776][ T9481] __kobject_del+0x8e/0x1a0 [ 917.743453][ T9481] kobject_put+0x119/0x170 [ 917.747993][ T9481] net_rx_queue_update_kobjects+0x3d5/0x410 [ 917.753980][ T9481] ? nlmsg_notify+0x127/0x170 [ 917.758894][ T9481] netdev_unregister_kobject+0xba/0x120 [ 917.764676][ T9481] unregister_netdevice_many_notify+0xc64/0x1070 [ 917.771295][ T9481] ? unregister_netdevice_queue+0x116/0x200 [ 917.777524][ T9481] ? list_netdevice+0x2a0/0x2a0 [ 917.783268][ T9481] rtnl_dellink+0x384/0x580 [ 917.787961][ T9481] ? security_capable+0x5e/0x80 [ 917.792846][ T9481] ? ns_capable+0x7c/0xb0 [ 917.797263][ T9481] ? rtnl_newlink+0x1600/0x1600 [ 917.802151][ T9481] rtnetlink_rcv_msg+0x807/0x8c0 [ 917.807174][ T9481] ? slab_post_alloc_hook+0x8c/0x340 [ 917.813065][ T9481] ? kmem_cache_alloc+0x10f/0x220 [ 917.818187][ T9481] ? xas_load+0x37c/0x390 [ 917.822736][ T9481] ? skb_release_data+0x542/0x560 [ 917.827886][ T9481] ? kmem_cache_free+0x1db/0x3a0 [ 917.832929][ T9481] ? __kfree_skb+0x104/0x140 [ 917.837612][ T9481] ? nlmon_xmit+0x4b/0x60 [ 917.842071][ T9481] ? __kfree_skb+0x104/0x140 [ 917.846723][ T9481] ? consume_skb+0x57/0x180 [ 917.851270][ T9481] ? nlmon_xmit+0x4b/0x60 [ 917.856183][ T9481] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 917.862128][ T9481] ? ref_tracker_free+0x3a1/0x400 [ 917.867445][ T9481] ? __dev_queue_xmit+0xabb/0x1d10 [ 917.872775][ T9481] netlink_rcv_skb+0x126/0x220 [ 917.877733][ T9481] ? rtnetlink_bind+0x60/0x60 [ 917.883944][ T9481] rtnetlink_rcv+0x1c/0x20 [ 917.889061][ T9481] netlink_unicast+0x56f/0x640 [ 917.893874][ T9481] netlink_sendmsg+0x665/0x770 [ 917.898722][ T9481] ? netlink_getsockopt+0x3e0/0x3e0 [ 917.904549][ T9481] ____sys_sendmsg+0x37c/0x4d0 [ 917.910388][ T9481] __sys_sendmsg+0x1e9/0x270 [ 917.915181][ T9481] __x64_sys_sendmsg+0x46/0x50 [ 917.920273][ T9481] do_syscall_64+0x41/0xc0 [ 917.925050][ T9481] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 917.931872][ T9481] RIP: 0033:0x7f6f42996ae9 [ 917.937451][ T9481] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 917.967749][ T9481] RSP: 002b:00007f6f41d190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 917.977019][ T9481] RAX: ffffffffffffffda RBX: 00007f6f42ab5f80 RCX: 00007f6f42996ae9 [ 917.986104][ T9481] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 917.999530][ T9481] RBP: 00007f6f41d19120 R08: 0000000000000000 R09: 0000000000000000 [ 918.008149][ T9481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 918.016790][ T9481] R13: 000000000000000b R14: 00007f6f42ab5f80 R15: 00007ffc381e1498 [ 918.024934][ T9481] [ 918.925953][ T3187] usb usb6-port1: attempt power cycle 15:27:20 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) (async) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x10, 0x0, 0x1000f4) (async) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)={0x18fe, 0x1e, [{0x1}, {0x7, 0x1}, {0xe, 0x1}, {0x0, 0x1}, {0xf}, {0xd, 0x1}, {0x9, 0x1}, {0x7}, {0x0, 0x1}, {0x3}, {0x6, 0x1}, {0x8}, {0xb, 0x1}, {0x3, 0x1}, {0xb}, {0x8}, {0xd, 0x1}, {0x6}, {0xc, 0x1}, {0x9, 0x1}, {0xf, 0x1}, {0xb, 0x1}, {0xf, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x7}, {0x9}, {0x3}, {0xe, 0x1}]}) 15:27:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x7000000, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:27:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = inotify_init1(0x0) (async, rerun: 64) r3 = syz_open_procfs(0x0, 0x0) (async, rerun: 64) r4 = memfd_create(0x0, 0x0) (async, rerun: 64) r5 = syz_usbip_server_init(0x0) (rerun: 64) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f0000000140)) (async) write(r4, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x200) (async) r6 = dup3(r3, r4, 0x0) (async, rerun: 64) r7 = socket$inet_dccp(0x2, 0x6, 0x0) (rerun: 64) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000c00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x4, [@enum={0x8, 0x7, 0x0, 0x6, 0x4, [{0xf, 0x1}, {0xc, 0x5c63}, {0x5, 0x80}, {0xe, 0xc4}, {0x6, 0x1f}, {0x6, 0x1}, {0x7, 0x7fffffff}]}, @union={0x2, 0x4, 0x0, 0x5, 0x1, 0x1, [{0xa, 0x4, 0x7}, {0x1, 0x3, 0x400}, {0x8, 0x0, 0x5}, {0xa, 0x1, 0x7}]}, @typedef={0xa, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000cc0)=""/63, 0xa8, 0x3f, 0x1}, 0x20) (async) r9 = io_uring_setup(0x1e32, &(0x7f0000000f40)={0x0, 0xb076, 0x200, 0x2, 0x1d8, 0x0, r6}) (async) r10 = timerfd_create(0x3, 0x80800) (async) r11 = syz_clone3(&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_open(r11, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r13) (async) r14 = syz_clone3(&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_open(r14, 0x0) (async) r15 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r16) (async) r17 = getgid() (async) r18 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000004d00)={r3, r3, 0x14}, 0x10) sendmmsg$unix(r3, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)}], 0x1, &(0x7f0000004f40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120, 0x4000114}}, {{&(0x7f0000000540)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000b40)=[{&(0x7f00000005c0)="3ed34e3f62fed5c37bb1252bbd72d13bec1ddc320a121fbce37871adbe2f9c49840829f1ca88f22b2b02bd2f2f5cb5c72da540f6eaa9772512a7c9b512c8d7a5f13286a36546903b0c96efdede301f2e58d3fe7df0e418c08ee8118c379c45f8cd87f5", 0x63}, {&(0x7f0000000640)="1705f26d4f08ccde9435ef178729004da986a24c09717434a4fc7e7018e50a3c4017b9c615812d1dd1e4614fb02a97abbe5e5debfe08c8fbb6eb04f43ac3c8c34b8b447a464dbde9ee165071e205313686fe585f74ba1216a37bec81c970973eff06d02f716a580e5f6deef714b51d47f7b4914d84c855c696da3914ed39313a66cae0cc1604393193b7611a3c0f29d7cdd12a883a200fbd4efdcd0884e1eaa615622527819ab67d1b0dc489176ac214bc", 0xb1}, {&(0x7f0000000700)="eb267e780108f91fef896c70232286eb9627e2d876ebd6fa9c8c84d88d1c1ca0b1e6e915dc90083ed9a6f33724111fbe4e89f7123ea608f390b4ab40ca7943835a", 0x41}, {&(0x7f0000000780)="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", 0xfb}, {&(0x7f0000000880)="e058757d795632f3b28104452a68ae18eb36379cb4fd5e9e7b5544b178c81e284171098968a4148df3c28fffc36231f107995de7321f1ff81d48079e72a1639d672a6c82bf3686a15ecb4e8a605f3a0d4658140629678db123c21bfadb215d1a29245983301ffac0658c8c5b7ffe6d58542212c417a4c65290db7c4587e5849aa2104c2ce3a862ba83984ee975249fb6cd1368ef1e06ff5f4d1c0edfc8c6b2c376cc09fb7432698f0f8314a76ffb21b840e4adc15ee5d3c1bdf2297d148052e5a66881443a9100f8592d0bbd68e1363e0781b9a9ddfb53d9c8314525b7a233b4076bce78db9bec82", 0xe8}, {&(0x7f0000000980)="7d7873da485cf084dc1e5c188797ad9f38b75cfffd1083ff69f8a437252a989ade9b043b4965fb66390691c1f5076f973287168f2d90ed3e31bca386cb0f9f77cb", 0x41}, {&(0x7f0000000a00)="0000b85ddf830530986581deaca075491b07e32965250cc6132f4159275cc02a5bafa6d174754fea31e22945910dbbd89f08f7ef3532bccfc239f1c2726a453333da2d85d4a6f28ac924394d315e41a950ee0eaef1ec251896351ca554f21284d861339dfc0e1fc09dcd0161be45a43bd79d7a68d1ffde45a8bab9101eb0ab5492242c7533a9b4e7dd177895c30bfa71af9515e4ca5eb02805b75f2c05903aefbe3554db11c1ead8573089dc1bdbf29177c2954f0e7da49db1894a0e0dd0b31d49d3ffeac61da3e7240bca35f75173cad0dfcddd87aaaee484b2bc62acd08aecc403683cc7f95abf652b18d10aa981fd", 0xf0}, {&(0x7f0000000b00)="e14dd7c211fa869cd9b69de6586321ceb4ece40ed06142ac4ad5a0ac394dcd", 0x1f}], 0x8, &(0x7f0000000d40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r5, r3, 0xffffffffffffffff, r3, r5]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r5, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, r3, r8]}}], 0xc0, 0x1}}, {{&(0x7f0000000e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000e80)="96fd6a5c7e4ff826ef4014184988d5566dd89fdc0617ad8bec7cf3561a44361d0b63af82ed162330437aa4016523c36d7777578fdbe93821c3a4cd8a1a6707a0805e6aec4ae901ec7ea84bc6a06400ace39507b69af2e01c76b04ef17f5b459b781858cc8124bcde31e9c679ed87", 0x6e}], 0x1, &(0x7f0000000fc0)=[@rights={{0x1c, 0x1, 0x1, [r9, r10, r0]}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38, 0x4002000}}, {{&(0x7f0000001000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001180)=[{&(0x7f0000001080)="5c6bf47e10dd70f3d41f2a824b28343ef9f91d611f13cc75a6162cda1af81c064702e8ef46c23efe0184a933ad6f91efab87e3615f9567baa7c3c12f676873e8a45b36e70a5552f8df217294c2d38932ea9aa3be5ff2ea8212a723360deaa0731ff225d76d3f1c25154153a13b04193b9a62d8138756fb5b9654924502e54d2a5fecd037838ac6fd62198de75d8f99f19281ca0b2241545c21e317e9123443ff61987df77a899721b629ca14d813ebe68ff08fb4e156d086f3192528e9fa3bd22ae6e378db9db551318d", 0xca}], 0x1, 0x0, 0x0, 0x48000}}, {{&(0x7f00000011c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002640)=[{&(0x7f0000001240)="e2128eca4952ab03c21a0efbef699a46f75f1e0b69e1a96c5ad1026eb35ff32cbd2836a934d97e2447c3850d029610b802", 0x31}, {&(0x7f0000001280)="0f1a0445e144f9ace313cb2a3a4bf71b44de2793825e335ca2751051f02780b93e4e267bf014b75b4e34d30cb3a500f4e95f608c204465126ede53203f9a3495b2082d74779fbaf3ecafc6f7957b40a5a4e80bcf9e411efd5c80303d5eca28f8a9ddb817a179869e73d3efb1b199c8630e", 0x71}, {&(0x7f0000001300)="4d03f468c6046bfec83c5154d406f1816e6a022de6e622e63b4b1f899393adecab817ee4f831e2e7578dcac0bca8f39c29e370d057061e7772756bc36113939fab0ba0570c867bcb1e149bea8848c7f977838ac0741624e260791e1963818abe5d27302064a339e8395c8f4fae6477e67a0d639374520b7e793038167d2990fb3a5922b9e0dd1ed889ca3436170f55b14162fa76da124ed0ed40d675692b6cc91e0002de28987b8b61dc5a7d", 0xac}, {&(0x7f00000013c0)="6107af7dc46d08f848396ad24676bf1286434532c7c4ab8e3dde1957d13db4bbcc809f54428361b2724ac1e55dcaf0012692d8becec06256dd246f9539c2aa300db78d88e03b5a81b5e791779789988840fb03d91b062e7ab273e10131d6f6ed59e3340d49babfe48c715cfe24de06f18b252dcaf51768f9c90a72580a2a06b39f1182eebe001d47243bf8c9cfdaf74355743d6ac6ccb29d730ab77751118c737f6fe38e2a1d09e9955906722b8379db48c383a6cc14d03707fa4a8c525c63e2223b55a2b9b7865a63b34d35a23a94f367762feeba63fa4525a4a11933514f5376dfb334bf6e320eab9cffdd5a4bb6466555dc6c715ca4f7967c1ee587f062d6b6a4b3d35d740aca5d9ef0a7a4cfc53bde7b16ab6d2d084eefa757753b271f2b6d5746b3e527b7d84b6615c38babbbd8029006ac57d9941ab50c9533f578cf35e26b8b85a1e18c8c91281c8ad918e93eb26ceae92a554bac72dc674bb6e6b0147854b25f274fda3b2e5873d5eb9037830e9d49477c270edf2326a6f2b02c0c7b682ae021b7a5de608e444b17fdf235d651e12f804b3e305ba5ee64f172ac920fe4cffbdcde9abb644e0dd21a86990f39c082644b552f8908b2d1aa5a473275fb4ab3c6b08cb236b773521ad41fe60a4f8ea4ba399beb996db2f17d0ef14b2e301d4ae60045c08272b79a10657b47e4eeff817f0a4046eafd2dc038ea65a312afbde9e09ce0878187570f9a3749097b2034ded5d33801aef203ba2d3f550846abb6ebdfa91fbf3986c720e06df264b71b66c679ff94c2458f62169b4bda9b016c1a658a7c8769276407f5e20a9c20e49954e26d69ad3a5d17ee6d8399a511334a4661eaae57334e93e5dcaeadc275f93657be867a23d3dd171a48af45139f4b0304adf28ccadeda8129e50c03bda12e320d41e9aee119fbbb85fdda85d9a822438dde690fbba6c0e6423766fc7a0b34d30ae8a816e30c156ed72f0f04f17c86681cf490ad061413157a0ecfcf394e240120777ebbc8f5abffc2e5ab24fe2699aa611193783ab932bea9aaba4de8e98e83a55ab5acccf85df67d6f12617707ba645ee310a9284a307f563333636ddf7e5b73408facb1b1bf8882a29ced94adec9d5c89808f8abe5c11a650f0cf7aeafcae21e5d9990d1a045e2b693a13bf42b82efa19fb396ec6d1f12b61f4f69790e167c1f7d1fcd92c61bde025db6afbfef69b3d07b6cbdeb704bbb6de1527686a4c11c65c0c58dc5f813e3b3d52ead5e1a1668e9d716ca2daab297d2f0b3bf1ce784e940a5a49655ef88f8ebe18017b8cd6109e99c78a906da68ce4a188b49dc3e7d5af78c89465075333c2a9831ce22a1fad27bc47cf66bd4743c74b05fa9428009406653c0dd515f3363c200180fc45c98d2b01993561a65639440efda91733fcea8c9091deb66b14d8ac0d9c2df97bf87352a0379347885cac034f8a98fa86407ae7c22e65d9b153e251008e7a95e3dac80f39f11c5ee76932db9d76bbd39ffc7a4216c21c7a242c0e02235fe21ba81a19f907e51f5a908dbcf83bceb55ba330b7af7a243c8058c3ffb2634c5999a9409f50a294b2835ab4b8cd7b5d2473761f2b7912daeecc8caa0875e31e6b30af1602fda6062c1815e6495e1baa454e8dfd072d089c062fe8690d40187be5d6f23a92b41f86e2b38cc2008570c9b52260262af30b0374c5ee8594fa673a2dc5d10e2e369a2720c8b39a380f71574591dc61776bae376aa244d5618c77911899e02c0442f8f206ebaf961d1c4824be212a78d7ce14b07a4e5d62db371e93d7513a778ac9f6a04d8576515610120917392e4e025bfab71ba05cf734dc13547b1581ee5d6f7870357aecc6cdf121d0c7c8bae4fb3f8df5b9110ae72b1886c274e26c4a5e8cd58efdd5ade2d5b9bd7148cba92cc074aeb4b217b8860a2b0b9c45bd15088f9ac0244c87b0d81a33e5c7b9381705b3e0e04e456343e2375b6968f2d15f147bb4faa265ad299e505965b398552c5e38e8d73f14471d7411b2992f6a8707bbf72129420acc01da956f340f1276b859fc89861b5f0e1449a32660dbc4b319fb6332aad6e22cc9a93b73108fa39812e3d58b43f2038049f2d675625c2c273242f015dd1bda444e6e539197b382e7112fc00e9d415765e43f25dc344aa04bf83b1671969f41e8f5e9467dc0d2319a390f2602918b0654d8a91400932fec4159db76bfa2ca1ed8e8a0be7fe10de8a31516f5c3ab85454a6d2303eef2a1cc0c924710fcd8c2575f67432b39162fd9a8de56d7ef1eb34568e9868fe255eb6ac3c41c7f61ac42fc3a74648a5ab5a397ccfe90ef52c925fdfdda93291bc15f5d9d13e014edd1fcad2dcc75bdd5d1253c92ceda569277161c8ad937a174b848ce417045573fcef69aa4d4d96d4c804f8a0eb8be6b714666c26390008cf8bb8ea8bcb657aa9e1d389fb9c3cd171e84854e3bd24475760c98a36ed7d21e1f917bbf53ae15e07b91700a19679251f120a7aaba243a70f8b2e34bc2ad5caf6c0c7d8a7421a4e4df947ff5e328e4c496a5e96c0171232e21750b642f6e89e4aeb7ed9802a96746c129b253baef11b98557d9c0c8a3d04725f70c6c63ae4a2d3510faa6c9cf1a59edb5b270f5e18a3f4b13b1c3f6856a1624ac5311b4c2437b4acded81141f691fcd8f6b38bcb94096a2ec6c249812c7787918c7e35931a9419dae31b918bb5bff67c2ff9feac4a8844beb892817810e20a2e38a0eb714f88e44974507a8dd2d662b2174ebca6caff15ee50013786e30ba06f4800e522bdf0578e9c60c9f1647592b9592ed733cab3472bf75c7bfc16a378aed639ce29cfb2880877757ae4f4ef86f187246cc0d282b84d32ad0ebb1e6fdb7bba5b7288e7845ea218a2eb2761c5c9a3abdb04c9c43cce47b1ff342ce1e2e6afbf48e092dcb0b25716a9d85fdd555d8f857372ed8a9fcf43d5b86aae57ef289b42d339dacc5871ce18401f30b93e52440d150bbd101dbc4e893e1b8f99028f62f0c18553406677495b4fcbb319bdbacc4ee3c069d08c03b1dfe88ba23466bb15996bf1166cd402ad1d8ae7d7489861a4436a0cbfaf02923ab97d4cf2fb01eabed07490d0ec79777ecb796ba5e910bf8653aea76fb4031a47471ede6ffb41c85df66ddd550fc92464a50c4d895ed916649f1ba82b7b539bb1c80920a2f06992351938fc80666c6f5d11c12da9fd65808879a90695859d0f9a5c3092689a5e16f8535fc1f04ae9de4cca16c40310926cbad554a8c01fbc5c53aab98e671e18ea200fd20414d293b877223dbaa9978bc4ba39aad51d644ea8fabc0a570c9724c62719bc50f00f7c98d70fcae34c0c5f983f9bf479a30fdb7a7c38c3f252d7c8c97088b94fe17806de8417207035cdd6fbd7524f04039f99c0c5e02b56edf60bd50b7281daa9082b67829b500312169079564ac50ae222053980492a1524ebbae7e27b19a4e1527263a1d5161a4e9889ed45e5dfd2b984e12aa28b0ad1b2474b6b84c76eeacb9768afe91f5850c4f1f82acf018239615e79e7eb36ee9d79f0d67a92e2c4aec2cf853e8ecd6994e662f6d5c22f17d53708bb1b27ffa3394e9bf783b939652a561e69e673fad6be753f0d002e470ff69cef50c82e5e019da71ec101b4bbca7756b0774ae8c464baf2eca0d2434ed705cec819bfbfd39e39d15d103a9af3f7c4a4dfec57107036ef4bec2e165d4b768d2372c7b9cb840e8601bbd7db429b1e7d51275e8d832f13eb5428a16c654b8d83041e365e80734b5d6218a476ab1042d1d0b451f0e77fb88b2443439b5a7ef57f5548d77f4d4af60e5af13f3bbc2974afc74a93c351c0585ace533e0ee4f786c6b4ff1eb0ecdff0a5a34127ecde076b23232ffc2a85e256bdfb700207aa6887d8cb57ab1a8fd19afa852bbd1db42b029896455116f5762ec5d602528abe0cef744dc551cfe80c0a5c8fe85db5a646cfe8b1a08029e6a15b49225f5b8dd767d0c4de5938a12d92c936b9b7075af69c1465065603b56d3aab8afc70252590c063f5f2aa5c2902f1e517ab5c7ee5fb7c4b577c2b3776c18101483736dd98b443fa9d4a31df86b341129f8999f31669bd1d76c81d410483e2481196942892b0a733de9d0d83b2283cbd8af97d02d16c375fa25597d6bd70ce3df4e4eded6eb055f560462f5d5cbce1c6b51249096aa516dfe58ec1d1be7f082e420aba997ed7a0a317afa2b51ffc15b2bb32872cbe87ae37783ecbdd92c81d5026738a4cff4f1d1b6ec2bcf0c21ab14934a3f7451d8a3c3330d0e6cf2da5dfd4bd1125a503588925f4ba9b8ed1502f8b43a190fa34f5c7a1c0d6b038f3a50e1658f519c5939b8619797d92db32a4e1831d906dbae0553642ac6c470921b075e39e28a1d1c65c78c575b3704dfefc5bc8157bc2eac808656f26b587e8dae66c86cb7aa23241050351726027466f6674ca4fe43eba96d2196e50bbb42853718a0f87de86aa215d79a3aa6618d57f52958fef2057a5dd5e7b1e8a8f04586c769ce7b067aa5f5610434d2e6a7f4786811ef80f41f5187862a82a9a3032867dcce3d112a1306f56b62b940358468bad328d9e3ffde285ec19e62df44efe20383f100116d3d3f3820a15214b86651a5e16136ab24f2800f81f81fefc2324bdd831d33c6d77f792af9c7fab9879a8660c68abee2fbe5061613cdd28fd3f4e5ed0a1b87a49a6ef9fef3c7c8e66cfe57115c395a3c99a1d06a3aaf6b93ca969cd5124fbaf7e8da2755548ed1f1df4075188f35b7078c9d5bf95f16f016bcb148743651b11ae27de4d98d4f7e9bcfc0747c0d6f0c916b3d857d887c4fc0322f0412d00c1cdec9f3fcc81fea2ee4cb9e45545e64ab0c93ed5d1a0bd71eeba0069de42aa0e107c6f558d369db2611134db3d5b6e6bb4930ce6904ac26baab959a1e6190792573f361f9ddccc6d4574dc0fb939bedf835abca456d903d3926c10a95b0f8f7a9f24c4168536834dc4bb01c2a05874fc9b0a83e6a55fc959b786e36d229b2c44085f902c96b14e04e2451b70716aca08884eb6716237b66c552a5a5b56d51496ede8ea47df3901dfe4d89fe45e5af66463acd0c3ae178d73e4cd329d88493313cc1743d70c45c0b6558bf99a3bd8126e205375d2b00f918c1df004b3250768d80891ae6ee9181f1753cc0749f5e762e05ec34f1213436086b8b07d24faeccefd49be20896be36e914e69a5fe22f60e83ef5e5a5a1021c8415f4a83b31615cbd9d8e96b10ac3e1982f7922a5e68caae72139c3f4a1d95ac0ce916991db623c7e5372f453f27954e13ee1ad090015c8dc1d23b6de0b66fe62abdf128f4633ac3ce5761d156d5b442b78e0874f618bd950f69cf8c69f3d3b1a1d843cf5a3f26e56cacf2b4d33cc5a3068821f63ae3b3aa14435a54b8a4f96968af2277a1ee3e5e9b1b398f15d828635a7fbd70e5f89952a2c6dbdb6023e92f2fc433c6c02c9d6b077b4780c455a83cbecf7b325cfb9e5cadd61b4f44cf1bd7bfa278a0b7726dab4edba84b08724c7f3d2497a86acf9da346f7b6e20fc015e53804830a661aa7afdd39f5a2eef15fcfeeed88a5ee4ace8272c6e3cb372d16ea17ddf7d3635f47e1ae026d00dfaf690ed76f5341e54c19713c4292cf2aa69d9d2afeb2b6b191cde5c0204b7a8ce2f28d85c9e52de0de9d24810beb079d17af6a4a27010b11bd022e5bbe717b3a62a512c47767e57e4a497584879647a307832631718e624348c2bbb57bc92519a0919612b31d2efcb59d8299ffb9e9452e0f214dbfd1c3ec53fb4601537969f2856", 0x1000}, {&(0x7f00000023c0)="d8b2230ebad1dd1f5d7ede5eeebfc05b69066cbf57803f1d79af250a6a736e3ead5f67718919a06020f2e36241f01e445a2d854e817d2650d7637d6061d20c9f4cdf912124c76339d8229bd4028b8d4677ee30f3fd424813fe20ec138d1e5da00947768b1010c038a0ac940f68ed3b4bc20162e278de24e9a0abac77ceddd4fa3d7820f4b61b611f1783fb0df30f52cd7641676fcb4e179dde101a842c5b4e0f6f5fcaca8f4be34836f5d9dc043794646371a28cdad9a6e3f3c6473808640b8a3cd0f2e17bb960daa08cb9b5c2af6721f0b2b0b8406135e6df2b6e3d121161dc39becdb1df744df51bb1342bf5", 0xed}, {&(0x7f00000002c0)="95c2ae5107d82b9c944f900ea7c130f589061c548e1cd284cb15a10527b9c04a0067f956baf6b6533d73eb3aa31a37a0e2b968f798a877db16404e62458491f37aa2035ae0e0e46f8c6e26b0bc7258a064bddcc08823c15bf522eeccf6f85cfec7c7fe75060e7917d1ca801d5a3733891d864db989276fb6d0b4222ba5801ba0dd764a4061c18874b1acf1ef9234d932fee7d009a61bc842bb859d95f89e3549d8fc8448f047cf7f081ca4c80a20d4e7e19b47fced604affbe930cfe0d1be27fdb973f15c175448d1f83a365e5eed903266ceec1564e7401051520a63818a6aae2ea077306e75f969987abad87af46b0255c550f07", 0xf5}, {&(0x7f00000025c0)="265f12d1d5d817e4c04d08a5d7ea8f3b7751acc37f6353cd26864673d0972350e8e94d0e210b054b64a1063b21ed7673d8ba9b7fbccc57540137c8574c9ded133f30b8b7a3646c0631508707edf42254ff336e67", 0x54}], 0x7, &(0x7f00000026c0)=[@cred={{0x1c, 0x1, 0x2, {r11, r13}}}], 0x20}}, {{&(0x7f0000002700)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000003b80)=[{&(0x7f0000002780)="30e8d9b9d865621cf91d6e33457301996141a9900339a73174102a5cf69e33dca14b00166d1cb5ff6c009f38919b54b289f988e229f9a97a71bd0a180b479bd6ea49d2cea207c049a85dfb41c7e99bfb74d57e312164edea50890570a9ddbbf5038babeec4cd06c583ac04ed795c8ec36cc3e88e1b9a4737315e7d097f471dca3241a3b1fae78fbbdc3c6cf7a29ee2ec081a109ad14240a5e8039bb26526", 0x9e}, {&(0x7f0000002840)="aa103168303cb831be85d902dbc87ecafd6853d7dee8a309e7d3566b02bd93ca9a0b2d6c497c0336dd555ae07ead6550f42603aaa654454704739072d597eaa939e740ae151276de8a1355d3ff692ac3ef90f608ef5ea2fb5306aa669f9857f6978ab347e2642d02237445308cfa6b923bc95ea0ba6b8874aca2791c1b5af48ca18a47c383728176b051b98af92d6f0c9ec328c06170cb5e64ba4719c536c9b22b9c4b48f7b37b55", 0xa8}, {&(0x7f0000002900)="08e9330d3767c7661564d3283bf280ed0cd90d685f61319c3ce5a107e950026198e1bcde0b032a943a4d7b0ea09c52528a0df5c7fdb2e0dbbef779ee743896574581b3c63fd532b38521bf7a1cbf0ff2758e7474dab3f9ba3693e0cf5a1a8ff9cd1cf1d838f1a1bc54186704324851e225b5730254a8e84a05aeeefe1b9dba8e78e7", 0x82}, {&(0x7f00000029c0)="b6bf08d9bd42e2639638709cf47478ee69f210fd9e20bd6d2353ef132b8b57171064b36531e3a23d7bf4601e45005633f526b20333bda61d049170543d0cf6984a317460db03dada0728cb3a244020f7ea1c375404393575a32fa7a265d5252315cbea25f169d9e480adc535d126b55e4dc95baeada053f45812825b3bd87ce5787b768348d841efa894594b388864f61120a0cb7781cc46aa26c5600d736eaa08f235d5e317151813acf900cbbe5e2a0c1997b0ef4c", 0xb6}, {&(0x7f0000002a80)="d4e3eddebf7fc186940ad46772eaab7f51a19fe0579e0f11a3d4ba466a68d81701d6db1089e84958e41a1e237d31585f8a39d68812f463e4e065895addebb13735cb3eb479e0c63d3704e44ce5205d99a739d596b289325a67b9ef69791e1fcf8eda0e7fe07c92fe03c3523e4309c008d5b815bc6533012741cce4a2ea1461c355f63be6c4cb539c48fe91ebd7c68df15bfc7311d1d791a4789dbedddf39b83062084ae78991151deec7dea84a8039e834a17d394f7f5e0a567aff38684864f7d681c49ffceaa4ee43d14a0c4f9ba6fa027821f493cf14702bc258e875da6563edc5e645a41b9fbf6fc15b3600f679e82343e1ba02ff0f3450b5b847658dc669cd36f32e3bcafced35daf921bbaa4dc987eea924a771aa5ed2dd0288e3c8444901598ad3ee8f05d778b9398d6fa65b58050db0e878e94a7af52100c02b66815bc1231b92671ef78e781bb305687d870389bfd8347c7793a618f5fb5e3a5959f3f1ecba895cf15e650deddaafe395de2fc1036982f3bb308cb83a56320d9e245001a3d506949d25a2e496e54ba61d5db2a57bacaee918733ce64dac7feaf264487fd4e4ca03888d50ac515b00c042d0f1a1fefcbe5f77fa072deb65ff65b7a38dd748cc0891678fc3bebbabe2daa5c35857f5c6c5f530e0cba0460408b36da0376a57b62eeb2b1945e48c9d5bc350e28d2f28ea27659b05bcf7c4c5946b7599a890c6a8b7e02515db1f76a72221490e742e02081ae39918c549e3879974af035f4be32981a18dea25d45525dacad270d8a34c921337e4a025774331bb59b550811d661b235622f23cafca0517d5437a2d55c2eedaf0912a1126290affee76bd5ce7779e97b33dfd28b1ed5d6e48e6d8aa9490cd12276c030239c7344518bcaddf069d14f36b3c1414a6d75dd36466feaf8ad82ce7fbf88206086ef0c2365754927de42f258faf55aa40cb9a91a0478c0b81556a965336e2f50a9cbad41fe0115eccb07ddd3bf276feca802aa90826c07945ed04313b928fd18fa25d95f73b68184e93dc8b9048cc28c93232dccf405efc34dd6988057dcf91e2a36a7c957b814495790f73b87ab8f383d56c1015a55ecd490dfff8363e306b561eae0f6a8641e5f5f3a2050588875b9794f0d7341ba906d86dd7bc50b5fd16e82c3e9bb52f365e9e8a91362ed6a310e7d37a32b1d29e74c5ff211d23665742f168126ba59bac486449f12aa5ed7f5fec1f4ac5aa3b40454a909b45085e9bcf05b37540368c30da041f63bba12d437bbb7355a4eb7314b2edb6858cddb6b70936a697883ae5c2c0d2a66a9305f286fa21bc745940bd5bde525518ab9c23566ea03c29d4ebf93a7df83cdec788b29bf0e3e44c9e69fd0fd362363271986b7e2f3821b337472d76c21d1af399cf6135746775ed04b254ee0d93fa42c5a30385b37575b11ccf3389ded018a76d1093cd7be33da42bbf656c224392386febb382e6dfe8d4d2c7b933361516169060c601ee27010189b42ede99dabcb89735e55328a29c9ca444d552145e8f9cc3e86afae2a3868801ec97bc658688b1f7d233929ad4ad68e6a74a7b2e3a6db60142384176b8998b33b5b40fdb4a6d63d5c3bdb3c84374b8bf75ad9b8b2873123cd3f38470252b8e3f12a665d32697329a9f4153bbbeec2eae593bf5321808d9dcaecff267d33bbe6dccb5131882c1805b253004ac242cbb62d0fe194355f0eccce99a4b075bfdaa72bbc4a3cf0dc54e06348bb4d5b71829645a16dd167076299eaeac80250695f5179e46dc019a4902ee9152673ee25837235c07e76bf2c320d174f9aec57f100752645b3f0b343baffba3f289d8179e12c30bd0c439d2c16f736261b14d660a92ddf8883379231a485223f09791908597f8c51d462d2cb74748e0020d1d5ad5786be5a3d186f2c817a240b7fcdd850d031d7d6ddc52df95fc69728a27166f41bd7d8b0618c43c3966ed4072a4989467a8f6baf69905ceed72685e4b194a5d344bedda1eb473f9003063f1d0096c9c64c6436f4805045eb7cd607142523a8f391edf81f8afba313925fc420611e4cfe5a7630878fd776174eb2548a590f1cc6ff2669d104463d3f136f52a856a51bad13de1ffeb9ea8ee7080f03378066f480cbc15d76fc9caccf603075565b5b6cc9e1e30fc6106aea705dd07e1184d88fa57b178e0b7e53ac00a6fbdf4ca674e01a9e4f24b9fd83747120337ad3ee36dbd633d7bc11ba4266f053208dfe090e96e1942da0a6e4a509417b318b35964ff067d894a4db32ada286e7ceb4c65b583920cf2479f6e82a19f9a3527350e33e01b2938c283ea8f1fe51805e71df47107fe44138437bf3c2ddb52cac6b34261cb9a96f05d24989074c18685a74eb174bbe7fad890c22d32120395c319cdecb2acf22565b2db2cae8b8d0fae9f9404dd26e7f71fc62afd27ea28e83b6835847cca7d5b195c17185348e4c549aee3fb6ed365842e6714399c6dd7e52e09e8aef5907c4811508765bfc43f200b1f328634c55c77bb1650cda1e2d3a5d2b1d647cc89f28b0beae50f79896f27600337e6c571b4b6b98177fafa3a2badd7585740d1c24cab1ca0b6ef6ee5fd961837c262139a85e6c898929e31159d99a4e0b45f06977f6331e020e670e4999606456a1a9747573ea1e551341e1d9e4940f1e4fb2b3493995e56a3de79b6dc4e95d81abfe64b7e2ded4493472362e0558c6749ce41d71191220b0c6a385f4823a4edb64bd4f150318fb57a6bc6bd2b09cf65aa5bcfcf905f65be3393b425da1a3704d1cac938baf542e320b77e8d208979202abc1a4d67a474abcd42c163238fd67bdbd91c11312651d353b11d2235572ea7f9fc46cb08b1710985c8ac956d084920daf21b92f4438c80988c691d7c0d817d6284c0c3fe7b563d0e0087d31bf8a215b8e82c9c6f99ee1363e387dbfd5a4da9a8c7d891e0a61c5791bb5ece2c61a302ddc2918c93898c1b8b54975c567d874cafc9d25ba742fba0075c69fe0ba0a0f9456a16d3359e932d41269417e9779de75db8a2929e09b7829d376edf280d0634bb4b492cde788caaf57b16c1c8e0864316fd2ca3afbba9ae5f376e9267135d6b48dab8aff1536b2c7a57bacc76fb3c58471b4bda6fda7cdc69a546ee2ca7f41ccb5fdf61db83a7052cb63554bf0f426d1204aae462f3b8c5cdafd664a6257196159bc319927a29ac6a09709db6ee5589bd3ca5b6a72283756ce325dfa9baff7c596db82dc5e1413437b8dbb02a3122170c8c9f0eb759f667ac4718f72d2bad168140aba7ba1e42813a35eab0bc5761d79934b3a9f789f5062cb72c6ca0470930a5169b3e160f0d30902d2836b45a6b8bb1d3520ed5a4d914814a19d77d629db9d2e48e2ed363584c6da93e3ca4de52764112f4085e4089793dbbaf043f4a7ad5ce22295748578a2e7d9772998cff655e748d0d95d8fa18429963611357e11748a52a98b18a77543c4d914c0b2b0cf312cb4e71381322348c13ea3b54627c40a772de62a21911bfce1088c2e4376d98d817f79472fb3ad94be4a56c12a355e85d2cf85029114f374b0df112b6b9328cbb655673d5aab4853616a269b8c15bdc0cd5912ef6e836d8fee132a150e97820a9d8283c488d2b9f75c8ecddb5ca6135f3e1d5c55904fa3d161e2bd53980a64bd7d29b8d124c2fc90fc4fc990e3f92d23cb0b646e5cf485c49b74ad961c4cfee022dece1a3ef881993f83dc3963ffd7a457ecc654651612472a1eb6895e4ffdf003d93a78daa2aa0674cf47d5a3546f30a5f6dae63a24d54ec5cc596ad5f8cf4229ca7b40afd65af1ce9db669efb2f014320061aa01f6516a49731c0b891df2ec711778640f386185c98b78f58accc05397ce122a7d6a75076b2a70125cbff649e5f157100abd0935c057e67eaf13ea25423612372eb87e4cfc6fb6735f22998ff5b589b00e5bbfe97837b8479c9169ed5951d06652916e0008dd16ee0b4fdb32327206c9ed0641241a32721cef8dd95ec08b78a18cc3530cc2bfd409cc50dce48f88bba274dbcbf0bc6f48f7b5ef23c617396b41f8d75db3319349950fc941c9079566ded0753bec92cdd29821cc34c4870e51aa78531bc514bd3ededc8611486d21dda1ca047c9d1bab9e295c092156040e93b61abedabdb9c37a53ab1961d8d3f1217a6ec985380a3883237f468bd9a3938e5ca1a0b953f4a12111af867bbb2167314ef45f97997efb1083d1a2e9801aba0a659a34cd28505d6f33336fe42464b70ea80e860208e3162ac407046d533c0896cba5836ff10f47818f3ea579c17e231f6fb6d04ca7e32280ebf170a713e29f40a267839f74b29cf87af85bd286923075519885da2f3eac826d05df5a426028ac386af8f3223ca660c583b91b6ace39d2a8553a58015729710e3f1ae6bfa4048b5cc768507ccfcd8ab48aeebada2b7e76b5fd313abf2d582ed5babd8a1f221a74c5524e051a0fbce2d13fb3d6c2471ad2ea7d325a6843d2889b84ffe54f65c9777de16dd5ee7fc8ff2623c0c6ae7fccefc879174fd6fd83645e4cc83d3ce4385f7e6ee49e10bca7deaf606e36bea861bdcd452349e8e7c0da8511872ac3a7f7bb965516a6c1b825746ed3dfa2fd694522d518344b31f7a8331297a2a09a2b3fad48dcd3c4d7d53c8100bcd646971da74936a1f0753e9ec5a161423ec9abd1dfcd1166183a862aff3e0a09e45d183b5af34feac90958f03b928337b8bf6a54b45ae2cc1d8d3559bebeef1d0c193033b738b6f5743ec38a23151fd97dde5da0d0710160d38744710d9cd020c8aadc753dc489a87741d8a488052755e4dc042bfbe4d9475b41338c44462a1585ffbc9128e451cb93722f5c71d9c26f1902a75dcfbc6fadd04f1d2827ec54fc61d464c8116bfc49bd6e824dc8b0a5155796ddd7db0ee89fd6da716a471864279e9134c24b073ff3aad130ee9f4ff07b9522bdbd0a0c261060e85e9626afb70b22cf97f575a985aad1a3b26d564ed077f525a70bfd0b4d93e2e2050571fbde2bf98b748b4cba0c02521bdf10685ff04738afea2a9bf3fae75b5479dfbfe750f7bdf9eb13131ec170fdb1a9713b831fbcf36467d235c08d84a7f159b66f6ec5f32bed2421635c6978ce16705b7472c5e38a5f5548da82de4a55654e0b0ba253b5434f4c80b04037d1ad7b6a76f1f98e40c7ec8d6bb5d02c0d37fc0465acf30d83387b6e44a15d8d5f217a8fe01ea14bf96fd85fd54d615f5abec5aec5bd475d7b7a73d0e130781199f5d19636a9261b7fd3118879537e23549a2a3e4fc88d4b93d021b25c5e90fc29da85f7d9991cd321b1adb35f3700597e08b4e0fdd1708fa4526779c89fe489686ad93c312eb224a6f06225517cf39af370b0237b5c7c72914e93a563ebb58464d3b9df8869d038a669366facdacb28f0a072d886ef17b06e7de7585bd869491e21343c4aaa34f8d8128191e2dea973e817bf69cef5aa66ef5fe0ddbd051ad8b1dfe9f8f1f972066893b60863deac294d3d95fbbcdc753f9c2a117cfc920134debf93f403bc7ce4827eff111c5dd1a6400c339669a50bf3629de017e85f05caf51690fc3ff8202ab63292c022af94299aec66c43e9efdce5812901c171df456c389725fc1dacd10db59c824a15231d8e5114a5293d37956e41aaf86c63ded16aaa662deb654ffe3206fe45dae3127d8476b1e124c1fb32269116e4eec4398dbfcf0281162c793df98b6f9b54984ff8259a777f1641d73be868b553a46bd693d485202fdfc3c0191ca281c7b7072d4555b3f551426a0ddf7c", 0x1000}, {&(0x7f0000003a80)="8bab41acec3d1d16167d6df9355913ba452580e79aa068fda52ea51401ba7aa77078c6444559bda2cb01dc6225c0506eccac842aecb93d4ef6afdc7adfff40841551ddabe8b591ca6641ccccc684c143c18f08cf880233963b3fb0d64a27c6a12243b2f42a3f1a5a4d1fcb4c8e6d705b25da8dc8a72e660475baece2346a356c4338f190cf7b15cb248b154e148a767e8e6a9ec3ebc38c78d6b743e82641a9658d4f18a0386608bc1549d51ba1ec0981b4ca669fa4e96bad87bb952731babde38ff0bce8709c1eafe30ed6bbc923171438c4d92e38ac29efdceaa251f4a1c8", 0xdf}], 0x6, &(0x7f0000003c00), 0x0, 0x4000000}}, {{0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000003c40)="813ce8db4e0cdd7729052c679779571fbda78da117efe3fe1373", 0x1a}, {&(0x7f0000003c80)="3ffa974eb0d3fcb0d98c788b2cf32d85683e5bd0b043446e166e48332b0f9150f08308ddd0be3fb2757c505bf55793c905760ffba7ad88", 0x37}, {&(0x7f0000003cc0)="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", 0x1000}], 0x3, &(0x7f0000004d40)=[@cred={{0x1c, 0x1, 0x2, {r14, r16, r17}}}, @rights={{0x18, 0x1, 0x1, [r18, r3]}}], 0x38, 0x4004815}}], 0x7, 0x8801) (async) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)) 15:27:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 44) 15:27:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) write$tun(r0, &(0x7f0000000240)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="9398e1179ca1", @val={@void, {0x8100, 0x4, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x2, 0x6, "c71229", 0x24f, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@hopopts={0x3c, 0x24, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @pad1, @generic={0xc3, 0xea, "f987bf12d7c77edc74653c67f5cc52a136426c0d2306d37bb0c74a6fbdc5c5fcb4b31ba48c55c23d3975170d2baa134cbf82f1b3984f8fc850771f50c04a448ba4901a536c9caf63867545de3edb2d02c9e2d98eaa163f36a9b4fda35ca989a7af6aaa91a669c41b38c0f98548a546bbae74b8a021bbfabf72f9d2304d0a198fef80548818e9320e1a9e02ea16ec8a003308b60640d3c43dcfe0e5b2cd90b5e308257a4782cc2597d35a570433a41d49b333ef83dc14a3d328f67dfde38c884bc0ed2721337696735d554651d9263b436d63012f7568e6849de052615300c7cbc4e698d8822730f79272"}, @enc_lim, @pad1, @hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x2, [0x0, 0x0]}]}], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x11, 0x4, 0x6, 0x0, 0xc5e9, {[@eol, @fastopen={0x22, 0xe, "b4c9c3414dcd6844ea9ed938"}, @mptcp=@syn={0x1e, 0xc, 0x5, 0x1, 0x1, 0xd7, 0x400}, @sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x24, 0x2}, @window={0x3, 0x3, 0x24}, @fastopen={0x22, 0x4, "b9a9"}]}}, {"5da6092e7d0eea737120e5e5136576cf02efb017352e538625468cf18ac6708a42a152e9542a79eda8bff83134f3ae87f0af84f44639561716371cc92e56d9502795ff20a743d307a2b130e7568d8033b7f1efa9eb02ba7e74f1325f3aa3b51036bcc6cda6f91177d41da5d16793c80cb381fad9f127ea87216c332a5561127d2f7748848ee71589266de74305c9c93e65d88f707e5774baac4bdb34e8502bec2841a5cca0aced2b3adeb2694abc6edfa80371714e803547846cdc46a7e5d7604312277b33233ad5ea3ee60844aebf1bdba13d182789460f48d431bf22ac5801882c88"}}}}}}}}, 0x289) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) 15:27:20 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x248) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x0, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) 15:27:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = inotify_init1(0x0) syz_open_procfs(0x0, 0x0) (async) r3 = syz_open_procfs(0x0, 0x0) memfd_create(0x0, 0x0) (async) r4 = memfd_create(0x0, 0x0) r5 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f0000000140)) write(r4, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) (async) write(r4, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x200) r6 = dup3(r3, r4, 0x0) r7 = socket$inet_dccp(0x2, 0x6, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000c00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x4, [@enum={0x8, 0x7, 0x0, 0x6, 0x4, [{0xf, 0x1}, {0xc, 0x5c63}, {0x5, 0x80}, {0xe, 0xc4}, {0x6, 0x1f}, {0x6, 0x1}, {0x7, 0x7fffffff}]}, @union={0x2, 0x4, 0x0, 0x5, 0x1, 0x1, [{0xa, 0x4, 0x7}, {0x1, 0x3, 0x400}, {0x8, 0x0, 0x5}, {0xa, 0x1, 0x7}]}, @typedef={0xa, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000cc0)=""/63, 0xa8, 0x3f, 0x1}, 0x20) r9 = io_uring_setup(0x1e32, &(0x7f0000000f40)={0x0, 0xb076, 0x200, 0x2, 0x1d8, 0x0, r6}) r10 = timerfd_create(0x3, 0x80800) r11 = syz_clone3(&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_open(r11, 0x0) (async) pidfd_open(r11, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r12 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r13) syz_clone3(&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r14 = syz_clone3(&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_open(r14, 0x0) r15 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r16) (async) setuid(r16) r17 = getgid() bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000004d00)={r3, r3, 0x14}, 0x10) (async) r18 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000004d00)={r3, r3, 0x14}, 0x10) sendmmsg$unix(r3, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)}], 0x1, &(0x7f0000004f40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120, 0x4000114}}, {{&(0x7f0000000540)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000b40)=[{&(0x7f00000005c0)="3ed34e3f62fed5c37bb1252bbd72d13bec1ddc320a121fbce37871adbe2f9c49840829f1ca88f22b2b02bd2f2f5cb5c72da540f6eaa9772512a7c9b512c8d7a5f13286a36546903b0c96efdede301f2e58d3fe7df0e418c08ee8118c379c45f8cd87f5", 0x63}, {&(0x7f0000000640)="1705f26d4f08ccde9435ef178729004da986a24c09717434a4fc7e7018e50a3c4017b9c615812d1dd1e4614fb02a97abbe5e5debfe08c8fbb6eb04f43ac3c8c34b8b447a464dbde9ee165071e205313686fe585f74ba1216a37bec81c970973eff06d02f716a580e5f6deef714b51d47f7b4914d84c855c696da3914ed39313a66cae0cc1604393193b7611a3c0f29d7cdd12a883a200fbd4efdcd0884e1eaa615622527819ab67d1b0dc489176ac214bc", 0xb1}, {&(0x7f0000000700)="eb267e780108f91fef896c70232286eb9627e2d876ebd6fa9c8c84d88d1c1ca0b1e6e915dc90083ed9a6f33724111fbe4e89f7123ea608f390b4ab40ca7943835a", 0x41}, {&(0x7f0000000780)="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", 0xfb}, {&(0x7f0000000880)="e058757d795632f3b28104452a68ae18eb36379cb4fd5e9e7b5544b178c81e284171098968a4148df3c28fffc36231f107995de7321f1ff81d48079e72a1639d672a6c82bf3686a15ecb4e8a605f3a0d4658140629678db123c21bfadb215d1a29245983301ffac0658c8c5b7ffe6d58542212c417a4c65290db7c4587e5849aa2104c2ce3a862ba83984ee975249fb6cd1368ef1e06ff5f4d1c0edfc8c6b2c376cc09fb7432698f0f8314a76ffb21b840e4adc15ee5d3c1bdf2297d148052e5a66881443a9100f8592d0bbd68e1363e0781b9a9ddfb53d9c8314525b7a233b4076bce78db9bec82", 0xe8}, {&(0x7f0000000980)="7d7873da485cf084dc1e5c188797ad9f38b75cfffd1083ff69f8a437252a989ade9b043b4965fb66390691c1f5076f973287168f2d90ed3e31bca386cb0f9f77cb", 0x41}, {&(0x7f0000000a00)="0000b85ddf830530986581deaca075491b07e32965250cc6132f4159275cc02a5bafa6d174754fea31e22945910dbbd89f08f7ef3532bccfc239f1c2726a453333da2d85d4a6f28ac924394d315e41a950ee0eaef1ec251896351ca554f21284d861339dfc0e1fc09dcd0161be45a43bd79d7a68d1ffde45a8bab9101eb0ab5492242c7533a9b4e7dd177895c30bfa71af9515e4ca5eb02805b75f2c05903aefbe3554db11c1ead8573089dc1bdbf29177c2954f0e7da49db1894a0e0dd0b31d49d3ffeac61da3e7240bca35f75173cad0dfcddd87aaaee484b2bc62acd08aecc403683cc7f95abf652b18d10aa981fd", 0xf0}, {&(0x7f0000000b00)="e14dd7c211fa869cd9b69de6586321ceb4ece40ed06142ac4ad5a0ac394dcd", 0x1f}], 0x8, &(0x7f0000000d40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r5, r3, 0xffffffffffffffff, r3, r5]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r5, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, r3, r8]}}], 0xc0, 0x1}}, {{&(0x7f0000000e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000e80)="96fd6a5c7e4ff826ef4014184988d5566dd89fdc0617ad8bec7cf3561a44361d0b63af82ed162330437aa4016523c36d7777578fdbe93821c3a4cd8a1a6707a0805e6aec4ae901ec7ea84bc6a06400ace39507b69af2e01c76b04ef17f5b459b781858cc8124bcde31e9c679ed87", 0x6e}], 0x1, &(0x7f0000000fc0)=[@rights={{0x1c, 0x1, 0x1, [r9, r10, r0]}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38, 0x4002000}}, {{&(0x7f0000001000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001180)=[{&(0x7f0000001080)="5c6bf47e10dd70f3d41f2a824b28343ef9f91d611f13cc75a6162cda1af81c064702e8ef46c23efe0184a933ad6f91efab87e3615f9567baa7c3c12f676873e8a45b36e70a5552f8df217294c2d38932ea9aa3be5ff2ea8212a723360deaa0731ff225d76d3f1c25154153a13b04193b9a62d8138756fb5b9654924502e54d2a5fecd037838ac6fd62198de75d8f99f19281ca0b2241545c21e317e9123443ff61987df77a899721b629ca14d813ebe68ff08fb4e156d086f3192528e9fa3bd22ae6e378db9db551318d", 0xca}], 0x1, 0x0, 0x0, 0x48000}}, {{&(0x7f00000011c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002640)=[{&(0x7f0000001240)="e2128eca4952ab03c21a0efbef699a46f75f1e0b69e1a96c5ad1026eb35ff32cbd2836a934d97e2447c3850d029610b802", 0x31}, {&(0x7f0000001280)="0f1a0445e144f9ace313cb2a3a4bf71b44de2793825e335ca2751051f02780b93e4e267bf014b75b4e34d30cb3a500f4e95f608c204465126ede53203f9a3495b2082d74779fbaf3ecafc6f7957b40a5a4e80bcf9e411efd5c80303d5eca28f8a9ddb817a179869e73d3efb1b199c8630e", 0x71}, {&(0x7f0000001300)="4d03f468c6046bfec83c5154d406f1816e6a022de6e622e63b4b1f899393adecab817ee4f831e2e7578dcac0bca8f39c29e370d057061e7772756bc36113939fab0ba0570c867bcb1e149bea8848c7f977838ac0741624e260791e1963818abe5d27302064a339e8395c8f4fae6477e67a0d639374520b7e793038167d2990fb3a5922b9e0dd1ed889ca3436170f55b14162fa76da124ed0ed40d675692b6cc91e0002de28987b8b61dc5a7d", 0xac}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f00000023c0)="d8b2230ebad1dd1f5d7ede5eeebfc05b69066cbf57803f1d79af250a6a736e3ead5f67718919a06020f2e36241f01e445a2d854e817d2650d7637d6061d20c9f4cdf912124c76339d8229bd4028b8d4677ee30f3fd424813fe20ec138d1e5da00947768b1010c038a0ac940f68ed3b4bc20162e278de24e9a0abac77ceddd4fa3d7820f4b61b611f1783fb0df30f52cd7641676fcb4e179dde101a842c5b4e0f6f5fcaca8f4be34836f5d9dc043794646371a28cdad9a6e3f3c6473808640b8a3cd0f2e17bb960daa08cb9b5c2af6721f0b2b0b8406135e6df2b6e3d121161dc39becdb1df744df51bb1342bf5", 0xed}, {&(0x7f00000002c0)="95c2ae5107d82b9c944f900ea7c130f589061c548e1cd284cb15a10527b9c04a0067f956baf6b6533d73eb3aa31a37a0e2b968f798a877db16404e62458491f37aa2035ae0e0e46f8c6e26b0bc7258a064bddcc08823c15bf522eeccf6f85cfec7c7fe75060e7917d1ca801d5a3733891d864db989276fb6d0b4222ba5801ba0dd764a4061c18874b1acf1ef9234d932fee7d009a61bc842bb859d95f89e3549d8fc8448f047cf7f081ca4c80a20d4e7e19b47fced604affbe930cfe0d1be27fdb973f15c175448d1f83a365e5eed903266ceec1564e7401051520a63818a6aae2ea077306e75f969987abad87af46b0255c550f07", 0xf5}, {&(0x7f00000025c0)="265f12d1d5d817e4c04d08a5d7ea8f3b7751acc37f6353cd26864673d0972350e8e94d0e210b054b64a1063b21ed7673d8ba9b7fbccc57540137c8574c9ded133f30b8b7a3646c0631508707edf42254ff336e67", 0x54}], 0x7, &(0x7f00000026c0)=[@cred={{0x1c, 0x1, 0x2, {r11, r13}}}], 0x20}}, {{&(0x7f0000002700)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000003b80)=[{&(0x7f0000002780)="30e8d9b9d865621cf91d6e33457301996141a9900339a73174102a5cf69e33dca14b00166d1cb5ff6c009f38919b54b289f988e229f9a97a71bd0a180b479bd6ea49d2cea207c049a85dfb41c7e99bfb74d57e312164edea50890570a9ddbbf5038babeec4cd06c583ac04ed795c8ec36cc3e88e1b9a4737315e7d097f471dca3241a3b1fae78fbbdc3c6cf7a29ee2ec081a109ad14240a5e8039bb26526", 0x9e}, {&(0x7f0000002840)="aa103168303cb831be85d902dbc87ecafd6853d7dee8a309e7d3566b02bd93ca9a0b2d6c497c0336dd555ae07ead6550f42603aaa654454704739072d597eaa939e740ae151276de8a1355d3ff692ac3ef90f608ef5ea2fb5306aa669f9857f6978ab347e2642d02237445308cfa6b923bc95ea0ba6b8874aca2791c1b5af48ca18a47c383728176b051b98af92d6f0c9ec328c06170cb5e64ba4719c536c9b22b9c4b48f7b37b55", 0xa8}, {&(0x7f0000002900)="08e9330d3767c7661564d3283bf280ed0cd90d685f61319c3ce5a107e950026198e1bcde0b032a943a4d7b0ea09c52528a0df5c7fdb2e0dbbef779ee743896574581b3c63fd532b38521bf7a1cbf0ff2758e7474dab3f9ba3693e0cf5a1a8ff9cd1cf1d838f1a1bc54186704324851e225b5730254a8e84a05aeeefe1b9dba8e78e7", 0x82}, {&(0x7f00000029c0)="b6bf08d9bd42e2639638709cf47478ee69f210fd9e20bd6d2353ef132b8b57171064b36531e3a23d7bf4601e45005633f526b20333bda61d049170543d0cf6984a317460db03dada0728cb3a244020f7ea1c375404393575a32fa7a265d5252315cbea25f169d9e480adc535d126b55e4dc95baeada053f45812825b3bd87ce5787b768348d841efa894594b388864f61120a0cb7781cc46aa26c5600d736eaa08f235d5e317151813acf900cbbe5e2a0c1997b0ef4c", 0xb6}, {&(0x7f0000002a80)="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", 0x1000}, {&(0x7f0000003a80)="8bab41acec3d1d16167d6df9355913ba452580e79aa068fda52ea51401ba7aa77078c6444559bda2cb01dc6225c0506eccac842aecb93d4ef6afdc7adfff40841551ddabe8b591ca6641ccccc684c143c18f08cf880233963b3fb0d64a27c6a12243b2f42a3f1a5a4d1fcb4c8e6d705b25da8dc8a72e660475baece2346a356c4338f190cf7b15cb248b154e148a767e8e6a9ec3ebc38c78d6b743e82641a9658d4f18a0386608bc1549d51ba1ec0981b4ca669fa4e96bad87bb952731babde38ff0bce8709c1eafe30ed6bbc923171438c4d92e38ac29efdceaa251f4a1c8", 0xdf}], 0x6, &(0x7f0000003c00), 0x0, 0x4000000}}, {{0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000003c40)="813ce8db4e0cdd7729052c679779571fbda78da117efe3fe1373", 0x1a}, {&(0x7f0000003c80)="3ffa974eb0d3fcb0d98c788b2cf32d85683e5bd0b043446e166e48332b0f9150f08308ddd0be3fb2757c505bf55793c905760ffba7ad88", 0x37}, {&(0x7f0000003cc0)="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", 0x1000}], 0x3, &(0x7f0000004d40)=[@cred={{0x1c, 0x1, 0x2, {r14, r16, r17}}}, @rights={{0x18, 0x1, 0x1, [r18, r3]}}], 0x38, 0x4004815}}], 0x7, 0x8801) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)) [ 920.915685][ T3187] usb usb6-port1: unable to enumerate USB device [ 920.944228][ T9497] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:27:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) write$tun(r0, &(0x7f0000000240)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="9398e1179ca1", @val={@void, {0x8100, 0x4, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x2, 0x6, "c71229", 0x24f, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@hopopts={0x3c, 0x24, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @pad1, @generic={0xc3, 0xea, "f987bf12d7c77edc74653c67f5cc52a136426c0d2306d37bb0c74a6fbdc5c5fcb4b31ba48c55c23d3975170d2baa134cbf82f1b3984f8fc850771f50c04a448ba4901a536c9caf63867545de3edb2d02c9e2d98eaa163f36a9b4fda35ca989a7af6aaa91a669c41b38c0f98548a546bbae74b8a021bbfabf72f9d2304d0a198fef80548818e9320e1a9e02ea16ec8a003308b60640d3c43dcfe0e5b2cd90b5e308257a4782cc2597d35a570433a41d49b333ef83dc14a3d328f67dfde38c884bc0ed2721337696735d554651d9263b436d63012f7568e6849de052615300c7cbc4e698d8822730f79272"}, @enc_lim, @pad1, @hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x2, [0x0, 0x0]}]}], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x11, 0x4, 0x6, 0x0, 0xc5e9, {[@eol, @fastopen={0x22, 0xe, "b4c9c3414dcd6844ea9ed938"}, @mptcp=@syn={0x1e, 0xc, 0x5, 0x1, 0x1, 0xd7, 0x400}, @sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x24, 0x2}, @window={0x3, 0x3, 0x24}, @fastopen={0x22, 0x4, "b9a9"}]}}, {"5da6092e7d0eea737120e5e5136576cf02efb017352e538625468cf18ac6708a42a152e9542a79eda8bff83134f3ae87f0af84f44639561716371cc92e56d9502795ff20a743d307a2b130e7568d8033b7f1efa9eb02ba7e74f1325f3aa3b51036bcc6cda6f91177d41da5d16793c80cb381fad9f127ea87216c332a5561127d2f7748848ee71589266de74305c9c93e65d88f707e5774baac4bdb34e8502bec2841a5cca0aced2b3adeb2694abc6edfa80371714e803547846cdc46a7e5d7604312277b33233ad5ea3ee60844aebf1bdba13d182789460f48d431bf22ac5801882c88"}}}}}}}}, 0x289) (async, rerun: 32) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)) (rerun: 32) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) [ 920.973794][ T9495] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 920.992715][ T9494] syzkaller1: entered promiscuous mode [ 920.998362][ T9494] syzkaller1: entered allmulticast mode [ 921.017301][ T9497] 8021q: adding VLAN 0 to HW filter on device batadv119 [ 921.027846][ T9497] bond56: (slave batadv119): Enslaving as a backup interface with an up link [ 921.058752][ T9495] 8021q: adding VLAN 0 to HW filter on device batadv270 [ 921.066676][ T9517] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN 15:27:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) write$tun(r0, &(0x7f0000000240)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="9398e1179ca1", @val={@void, {0x8100, 0x4, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x2, 0x6, "c71229", 0x24f, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@hopopts={0x3c, 0x24, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @pad1, @generic={0xc3, 0xea, "f987bf12d7c77edc74653c67f5cc52a136426c0d2306d37bb0c74a6fbdc5c5fcb4b31ba48c55c23d3975170d2baa134cbf82f1b3984f8fc850771f50c04a448ba4901a536c9caf63867545de3edb2d02c9e2d98eaa163f36a9b4fda35ca989a7af6aaa91a669c41b38c0f98548a546bbae74b8a021bbfabf72f9d2304d0a198fef80548818e9320e1a9e02ea16ec8a003308b60640d3c43dcfe0e5b2cd90b5e308257a4782cc2597d35a570433a41d49b333ef83dc14a3d328f67dfde38c884bc0ed2721337696735d554651d9263b436d63012f7568e6849de052615300c7cbc4e698d8822730f79272"}, @enc_lim, @pad1, @hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x2, [0x0, 0x0]}]}], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x11, 0x4, 0x6, 0x0, 0xc5e9, {[@eol, @fastopen={0x22, 0xe, "b4c9c3414dcd6844ea9ed938"}, @mptcp=@syn={0x1e, 0xc, 0x5, 0x1, 0x1, 0xd7, 0x400}, @sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x24, 0x2}, @window={0x3, 0x3, 0x24}, @fastopen={0x22, 0x4, "b9a9"}]}}, {"5da6092e7d0eea737120e5e5136576cf02efb017352e538625468cf18ac6708a42a152e9542a79eda8bff83134f3ae87f0af84f44639561716371cc92e56d9502795ff20a743d307a2b130e7568d8033b7f1efa9eb02ba7e74f1325f3aa3b51036bcc6cda6f91177d41da5d16793c80cb381fad9f127ea87216c332a5561127d2f7748848ee71589266de74305c9c93e65d88f707e5774baac4bdb34e8502bec2841a5cca0aced2b3adeb2694abc6edfa80371714e803547846cdc46a7e5d7604312277b33233ad5ea3ee60844aebf1bdba13d182789460f48d431bf22ac5801882c88"}}}}}}}}, 0x289) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)) (async) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) [ 921.079896][ T9495] bond76: (slave batadv270): Enslaving as a backup interface with an up link [ 921.099351][ T9497] bond56 (unregistering): (slave batadv119): Releasing backup interface [ 921.133483][ T9497] bond56 (unregistering): Released all slaves [ 921.141551][ T9497] FAULT_INJECTION: forcing a failure. [ 921.141551][ T9497] name failslab, interval 1, probability 0, space 0, times 0 [ 921.154635][ T9497] CPU: 1 PID: 9497 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 921.165217][ T9497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 921.176134][ T9497] Call Trace: [ 921.179428][ T9497] [ 921.182394][ T9497] dump_stack_lvl+0xda/0x130 [ 921.187406][ T9497] dump_stack+0x15/0x20 [ 921.191607][ T9497] should_fail_ex+0x21f/0x230 [ 921.196323][ T9497] __should_failslab+0x92/0xa0 [ 921.201145][ T9497] should_failslab+0x9/0x20 [ 921.205721][ T9497] slab_pre_alloc_hook+0x38/0x180 [ 921.210898][ T9497] kmem_cache_alloc_node+0x54/0x240 [ 921.216213][ T9497] ? __alloc_skb+0x109/0x2e0 [ 921.220930][ T9497] __alloc_skb+0x109/0x2e0 [ 921.225565][ T9497] alloc_uevent_skb+0x5b/0x120 [ 921.230498][ T9497] kobject_uevent_net_broadcast+0xf6/0x3f0 [ 921.237487][ T9497] kobject_uevent_env+0x467/0x5b0 [ 921.243072][ T9497] kobject_uevent+0x1c/0x20 [ 921.247657][ T9497] __kobject_del+0x8e/0x1a0 [ 921.252280][ T9497] kobject_put+0x119/0x170 [ 921.256893][ T9497] net_rx_queue_update_kobjects+0x3d5/0x410 [ 921.263094][ T9497] ? nlmsg_notify+0x127/0x170 [ 921.267898][ T9497] netdev_unregister_kobject+0xba/0x120 [ 921.273641][ T9497] unregister_netdevice_many_notify+0xc64/0x1070 [ 921.280216][ T9497] ? unregister_netdevice_queue+0x116/0x200 [ 921.286331][ T9497] ? list_netdevice+0x2a0/0x2a0 [ 921.291304][ T9497] rtnl_dellink+0x384/0x580 [ 921.295864][ T9497] ? __list_del_entry_valid+0x5f/0xe0 [ 921.301768][ T9497] ? _raw_spin_unlock+0x26/0x40 [ 921.306711][ T9497] ? __mutex_lock+0x21c/0x8d0 [ 921.311621][ T9497] ? rtnl_newlink+0x1600/0x1600 [ 921.316911][ T9497] rtnetlink_rcv_msg+0x807/0x8c0 [ 921.321911][ T9497] ? slab_post_alloc_hook+0x8c/0x340 [ 921.328464][ T9497] ? kmem_cache_alloc+0x10f/0x220 [ 921.333800][ T9497] ? xas_load+0x37c/0x390 [ 921.338841][ T9497] ? skb_release_data+0x542/0x560 [ 921.344084][ T9497] ? kmem_cache_free+0x1db/0x3a0 [ 921.349152][ T9497] ? __kfree_skb+0x104/0x140 [ 921.353821][ T9497] ? nlmon_xmit+0x4b/0x60 [ 921.358180][ T9497] ? __kfree_skb+0x104/0x140 [ 921.363322][ T9497] ? consume_skb+0x57/0x180 [ 921.368648][ T9497] ? nlmon_xmit+0x4b/0x60 [ 921.373013][ T9497] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 921.378384][ T9497] ? ref_tracker_free+0x3a1/0x400 [ 921.383668][ T9497] ? __dev_queue_xmit+0xabb/0x1d10 [ 921.388808][ T9497] netlink_rcv_skb+0x126/0x220 [ 921.393665][ T9497] ? rtnetlink_bind+0x60/0x60 [ 921.398386][ T9497] rtnetlink_rcv+0x1c/0x20 [ 921.403086][ T9497] netlink_unicast+0x56f/0x640 [ 921.407988][ T9497] netlink_sendmsg+0x665/0x770 [ 921.412812][ T9497] ? netlink_getsockopt+0x3e0/0x3e0 [ 921.418061][ T9497] ____sys_sendmsg+0x37c/0x4d0 [ 921.422881][ T9497] __sys_sendmsg+0x1e9/0x270 [ 921.427579][ T9497] __x64_sys_sendmsg+0x46/0x50 [ 921.432780][ T9497] do_syscall_64+0x41/0xc0 [ 921.437497][ T9497] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 921.443433][ T9497] RIP: 0033:0x7f6f42996ae9 [ 921.448059][ T9497] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 921.469260][ T9497] RSP: 002b:00007f6f41d190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 921.477818][ T9497] RAX: ffffffffffffffda RBX: 00007f6f42ab5f80 RCX: 00007f6f42996ae9 [ 921.486188][ T9497] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 921.494364][ T9497] RBP: 00007f6f41d19120 R08: 0000000000000000 R09: 0000000000000000 [ 921.502369][ T9497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 921.510416][ T9497] R13: 000000000000000b R14: 00007f6f42ab5f80 R15: 00007ffc381e1498 [ 921.518425][ T9497] 15:27:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 45) 15:27:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) setresuid(0x0, 0xee00, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[], 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='H\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="0000000000000000050000000d0001006d61746368616c6c00000000140002000800030001"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2307000000000000000067000000080017010000000008000300", @ANYRES32=0x0, @ANYBLOB="14b3dffb739a0ac652e59278f1aa3281b7da8698fa8aa9157dd2091d63c9e7414ea091807da677d578c40de0d0a2c56ec5f2aa9cae2fa066dfd27b384790ef806d0cd2e88f3b5ed37b3bbf1fe20800000000000000000000000000000000a8962bf067a6ff39d6dcd7713bce33b93e1292a0449eca85220692868aed9ddee46c3b26c4127e7c0905053971ba758e33c623a8c5963752b4b3bafff45b31e73ff988ee4afab6ab6c336c6be10c7334d5de40b9866e72979fa6cb61961ce01a33c5ee974593c69f02a84a114ee06edab1055c406748c08b298e4c"], 0x24}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:crash_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:dhcpd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000041}, 0x4040000) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xdc77, 0x2b}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "7fc987fe223a83be2b87bb994b8a9355"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "8eb1cb0c116775591985d52d28abe40b"}, @NL80211_ATTR_PMK={0x14, 0xfe, "3f33711a82cfce241447a08b59817392"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x4010) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r8, 0x400454d4, &(0x7f0000000040)=0x1) [ 921.537321][ T9510] bond76 (unregistering): (slave batadv270): Releasing backup interface [ 921.558295][ T9510] bond76 (unregistering): Released all slaves 15:27:21 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = inotify_init1(0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = memfd_create(0x0, 0x0) r3 = syz_usbip_server_init(0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00'}) preadv(r4, &(0x7f0000000540)=[{&(0x7f0000000400)=""/218, 0xda}, {&(0x7f00000001c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/52, 0x34}], 0x3, 0x101, 0x7fffffff) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000140)) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r5 = accept4(0xffffffffffffffff, &(0x7f0000000580)=@ax25={{0x3, @bcast}, [@rose, @remote, @rose, @bcast, @remote, @netrom, @netrom, @rose]}, &(0x7f0000000600)=0x80, 0x98d53207a7691851) recvmsg$kcm(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000640)=""/92, 0x5c}, {&(0x7f00000006c0)=""/73, 0x49}, {&(0x7f0000000740)=""/224, 0xe0}], 0x3, &(0x7f0000000880)=""/109, 0x6d}, 0x22) dup3(r1, r2, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x80000094) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendto$inet(r10, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000106d7569d8137f7fadde9ce1b4d579bf", @ANYRES32=r11, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104fd0008000fa1bb74000000000228d8322d4baf62b654dd07bf15e2e781aad2be37137dcba2b0020675a9ad8877e7eec335e38a5f378ac37037228a5fbd5b621bcd360f701037a0f7eff0d488a84d4b8df98d5f8274435a2356295fdf8047dc0c1ba88a8b28ec87a2c92b", @ANYRES32=r7, @ANYBLOB="001d82000000000008000a00", @ANYRES32=r11], 0x28}}, 0x0) r12 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x20202, 0x0) inotify_add_watch(r12, &(0x7f0000000280)='./file0\x00', 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @local}, 0x57, r11}) [ 921.604631][ T9534] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 921.655026][ T9537] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 921.665958][ T9534] 8021q: adding VLAN 0 to HW filter on device batadv120 [ 921.678189][ T9537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27920 sclass=netlink_route_socket pid=9537 comm=syz-executor.0 [ 921.693355][ T9534] bond56: (slave batadv120): Enslaving as a backup interface with an up link [ 921.705016][ T9538] bond56 (unregistering): (slave batadv120): Releasing backup interface [ 921.725626][ T9538] bond56 (unregistering): Released all slaves [ 921.735145][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 922.925909][ T3187] usb usb6-port1: attempt power cycle 15:27:24 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x12, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x10, 0x0, 0x1000f4) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000480)={0x9, &(0x7f00000003c0)="dcca4458bedf6b498daf5f10f6597fcfa612634377528105b63b9488648d9a664a97b35a0ce42f9c4ca7b761046ba2b8dd47f39f87370c9102bbaaa5065aec05f7b10b444b2099937578a3563ad40cbd230a9e15b1ee8f77b9c1c6a5d5c291a7139c1cb95fcdde05627f4943c27c383e3ab968f78e562d4268d33c088e52b27290626862af2f26528662d4ed46470ccd3f065d7bebbdc67d8ec7fdb4af7a9d4b1ae53cd9848df387fcedc911817d55de3bfe043a551e4a5e35621c0fbc"}) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80}) r2 = socket$l2tp6(0xa, 0x2, 0x73) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000000)=""/186, 0xba}, {&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/115, 0x73}], 0x4, 0x1caf, 0x7fff) 15:27:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = socket$netlink(0x10, 0x3, 0x0) setresuid(0x0, 0xee00, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[], 0x20}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='H\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="0000000000000000050000000d0001006d61746368616c6c00000000140002000800030001"], 0x48}}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2307000000000000000067000000080017010000000008000300", @ANYRES32=0x0, @ANYBLOB="14b3dffb739a0ac652e59278f1aa3281b7da8698fa8aa9157dd2091d63c9e7414ea091807da677d578c40de0d0a2c56ec5f2aa9cae2fa066dfd27b384790ef806d0cd2e88f3b5ed37b3bbf1fe20800000000000000000000000000000000a8962bf067a6ff39d6dcd7713bce33b93e1292a0449eca85220692868aed9ddee46c3b26c4127e7c0905053971ba758e33c623a8c5963752b4b3bafff45b31e73ff988ee4afab6ab6c336c6be10c7334d5de40b9866e72979fa6cb61961ce01a33c5ee974593c69f02a84a114ee06edab1055c406748c08b298e4c"], 0x24}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:crash_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:dhcpd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000041}, 0x4040000) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xdc77, 0x2b}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "7fc987fe223a83be2b87bb994b8a9355"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "8eb1cb0c116775591985d52d28abe40b"}, @NL80211_ATTR_PMK={0x14, 0xfe, "3f33711a82cfce241447a08b59817392"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x4010) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETSNDBUF(r8, 0x400454d4, &(0x7f0000000040)=0x1) 15:27:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x8000000, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:27:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 46) 15:27:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x248) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x0, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) 15:27:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) r0 = inotify_init1(0x0) r1 = syz_open_procfs(0x0, 0x0) (async) r2 = memfd_create(0x0, 0x0) (async) r3 = syz_usbip_server_init(0x0) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00'}) preadv(r4, &(0x7f0000000540)=[{&(0x7f0000000400)=""/218, 0xda}, {&(0x7f00000001c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/52, 0x34}], 0x3, 0x101, 0x7fffffff) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000140)) (async) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async, rerun: 64) r5 = accept4(0xffffffffffffffff, &(0x7f0000000580)=@ax25={{0x3, @bcast}, [@rose, @remote, @rose, @bcast, @remote, @netrom, @netrom, @rose]}, &(0x7f0000000600)=0x80, 0x98d53207a7691851) (rerun: 64) recvmsg$kcm(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000640)=""/92, 0x5c}, {&(0x7f00000006c0)=""/73, 0x49}, {&(0x7f0000000740)=""/224, 0xe0}], 0x3, &(0x7f0000000880)=""/109, 0x6d}, 0x22) (async) dup3(r1, r2, 0x0) (async, rerun: 64) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x80000094) (async, rerun: 64) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendto$inet(r10, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000106d7569d8137f7fadde9ce1b4d579bf", @ANYRES32=r11, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104fd0008000fa1bb74000000000228d8322d4baf62b654dd07bf15e2e781aad2be37137dcba2b0020675a9ad8877e7eec335e38a5f378ac37037228a5fbd5b621bcd360f701037a0f7eff0d488a84d4b8df98d5f8274435a2356295fdf8047dc0c1ba88a8b28ec87a2c92b", @ANYRES32=r7, @ANYBLOB="001d82000000000008000a00", @ANYRES32=r11], 0x28}}, 0x0) r12 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x20202, 0x0) inotify_add_watch(r12, &(0x7f0000000280)='./file0\x00', 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @local}, 0x57, r11}) 15:27:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = inotify_init1(0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = memfd_create(0x0, 0x0) syz_usbip_server_init(0x0) (async) r3 = syz_usbip_server_init(0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00'}) preadv(r4, &(0x7f0000000540)=[{&(0x7f0000000400)=""/218, 0xda}, {&(0x7f00000001c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/52, 0x34}], 0x3, 0x101, 0x7fffffff) (async) preadv(r4, &(0x7f0000000540)=[{&(0x7f0000000400)=""/218, 0xda}, {&(0x7f00000001c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/52, 0x34}], 0x3, 0x101, 0x7fffffff) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000140)) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r5 = accept4(0xffffffffffffffff, &(0x7f0000000580)=@ax25={{0x3, @bcast}, [@rose, @remote, @rose, @bcast, @remote, @netrom, @netrom, @rose]}, &(0x7f0000000600)=0x80, 0x98d53207a7691851) recvmsg$kcm(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000640)=""/92, 0x5c}, {&(0x7f00000006c0)=""/73, 0x49}, {&(0x7f0000000740)=""/224, 0xe0}], 0x3, &(0x7f0000000880)=""/109, 0x6d}, 0x22) dup3(r1, r2, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x80000094) socket$l2tp(0x2, 0x2, 0x73) (async) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) sendto$inet(r10, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000106d7569d8137f7fadde9ce1b4d579bf", @ANYRES32=r11, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104fd0008000fa1bb74000000000228d8322d4baf62b654dd07bf15e2e781aad2be37137dcba2b0020675a9ad8877e7eec335e38a5f378ac37037228a5fbd5b621bcd360f701037a0f7eff0d488a84d4b8df98d5f8274435a2356295fdf8047dc0c1ba88a8b28ec87a2c92b", @ANYRES32=r7, @ANYBLOB="001d82000000000008000a00", @ANYRES32=r11], 0x28}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104fd0008000fa1bb74000000000228d8322d4baf62b654dd07bf15e2e781aad2be37137dcba2b0020675a9ad8877e7eec335e38a5f378ac37037228a5fbd5b621bcd360f701037a0f7eff0d488a84d4b8df98d5f8274435a2356295fdf8047dc0c1ba88a8b28ec87a2c92b", @ANYRES32=r7, @ANYBLOB="001d82000000000008000a00", @ANYRES32=r11], 0x28}}, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x20202, 0x0) (async) r12 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x20202, 0x0) inotify_add_watch(r12, &(0x7f0000000280)='./file0\x00', 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @local}, 0x57, r11}) (async) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @local}, 0x57, r11}) [ 924.885699][ T3187] usb usb6-port1: unable to enumerate USB device [ 924.925228][ T9550] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:27:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) setresuid(0x0, 0xee00, 0x0) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[], 0x20}}, 0x0) (async, rerun: 64) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='H\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="0000000000000000050000000d0001006d61746368616c6c00000000140002000800030001"], 0x48}}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2307000000000000000067000000080017010000000008000300", @ANYRES32=0x0, @ANYBLOB="14b3dffb739a0ac652e59278f1aa3281b7da8698fa8aa9157dd2091d63c9e7414ea091807da677d578c40de0d0a2c56ec5f2aa9cae2fa066dfd27b384790ef806d0cd2e88f3b5ed37b3bbf1fe20800000000000000000000000000000000a8962bf067a6ff39d6dcd7713bce33b93e1292a0449eca85220692868aed9ddee46c3b26c4127e7c0905053971ba758e33c623a8c5963752b4b3bafff45b31e73ff988ee4afab6ab6c336c6be10c7334d5de40b9866e72979fa6cb61961ce01a33c5ee974593c69f02a84a114ee06edab1055c406748c08b298e4c"], 0x24}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:crash_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:dhcpd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000041}, 0x4040000) (async) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xdc77, 0x2b}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "7fc987fe223a83be2b87bb994b8a9355"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "8eb1cb0c116775591985d52d28abe40b"}, @NL80211_ATTR_PMK={0x14, 0xfe, "3f33711a82cfce241447a08b59817392"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x4010) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETSNDBUF(r8, 0x400454d4, &(0x7f0000000040)=0x1) [ 924.952162][ T9555] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 924.968263][ T9561] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 924.968553][ T9562] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 924.991284][ T9550] 8021q: adding VLAN 0 to HW filter on device batadv121 [ 925.016168][ T9550] bond56: (slave batadv121): Enslaving as a backup interface with an up link [ 925.033819][ T9555] 8021q: adding VLAN 0 to HW filter on device batadv271 [ 925.042022][ T9561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27920 sclass=netlink_route_socket pid=9561 comm=syz-executor.0 15:27:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x2, 0x1, 0x80, 0x8}]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00'}) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x6) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@void, @val={0x3, 0x4, 0x8000, 0x8, 0x81, 0x6}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @broadcast, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @link_local, @local}}, 0x3e) 15:27:25 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x12, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x10, 0x0, 0x1000f4) (async) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000480)={0x9, &(0x7f00000003c0)="dcca4458bedf6b498daf5f10f6597fcfa612634377528105b63b9488648d9a664a97b35a0ce42f9c4ca7b761046ba2b8dd47f39f87370c9102bbaaa5065aec05f7b10b444b2099937578a3563ad40cbd230a9e15b1ee8f77b9c1c6a5d5c291a7139c1cb95fcdde05627f4943c27c383e3ab968f78e562d4268d33c088e52b27290626862af2f26528662d4ed46470ccd3f065d7bebbdc67d8ec7fdb4af7a9d4b1ae53cd9848df387fcedc911817d55de3bfe043a551e4a5e35621c0fbc"}) (async) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80}) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000000)=""/186, 0xba}, {&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/115, 0x73}], 0x4, 0x1caf, 0x7fff) [ 925.057870][ T9555] bond76: (slave batadv271): Enslaving as a backup interface with an up link [ 925.069947][ T9565] syzkaller1: entered promiscuous mode [ 925.076521][ T9565] syzkaller1: entered allmulticast mode [ 925.093117][ T9567] bond56 (unregistering): (slave batadv121): Releasing backup interface [ 925.142322][ T9567] bond56 (unregistering): Released all slaves [ 925.157279][ T9567] FAULT_INJECTION: forcing a failure. [ 925.157279][ T9567] name failslab, interval 1, probability 0, space 0, times 0 [ 925.170375][ T9567] CPU: 0 PID: 9567 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 925.181364][ T9567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 925.191572][ T9567] Call Trace: [ 925.195154][ T9567] [ 925.198096][ T9567] dump_stack_lvl+0xda/0x130 [ 925.203584][ T9567] dump_stack+0x15/0x20 [ 925.207910][ T9567] should_fail_ex+0x21f/0x230 [ 925.212624][ T9567] ? kobject_uevent_env+0x1a1/0x5b0 [ 925.217872][ T9567] __should_failslab+0x92/0xa0 [ 925.222755][ T9567] should_failslab+0x9/0x20 [ 925.227336][ T9567] slab_pre_alloc_hook+0x38/0x180 [ 925.232496][ T9567] ? kobject_uevent_env+0x1a1/0x5b0 [ 925.237833][ T9567] __kmem_cache_alloc_node+0x48/0x1d0 [ 925.243689][ T9567] ? kobject_uevent_env+0x1a1/0x5b0 [ 925.248931][ T9567] kmalloc_trace+0x2a/0xa0 [ 925.253440][ T9567] kobject_uevent_env+0x1a1/0x5b0 [ 925.258674][ T9567] ? sysfs_remove_group+0x17a/0x190 [ 925.263946][ T9567] kobject_uevent+0x1c/0x20 [ 925.268588][ T9567] __kobject_del+0x8e/0x1a0 [ 925.273232][ T9567] kobject_put+0x119/0x170 [ 925.277935][ T9567] net_rx_queue_update_kobjects+0x3d5/0x410 [ 925.283886][ T9567] ? nlmsg_notify+0x127/0x170 [ 925.288951][ T9567] netdev_unregister_kobject+0xba/0x120 [ 925.294718][ T9567] unregister_netdevice_many_notify+0xc64/0x1070 [ 925.301097][ T9567] ? unregister_netdevice_queue+0x116/0x200 [ 925.307321][ T9567] ? list_netdevice+0x2a0/0x2a0 [ 925.312233][ T9567] rtnl_dellink+0x384/0x580 [ 925.317607][ T9567] ? __list_del_entry_valid+0x5f/0xe0 [ 925.323823][ T9567] ? _raw_spin_unlock+0x26/0x40 [ 925.328753][ T9567] ? __mutex_lock+0x21c/0x8d0 [ 925.333539][ T9567] ? rtnl_newlink+0x1600/0x1600 [ 925.339313][ T9567] rtnetlink_rcv_msg+0x807/0x8c0 [ 925.344306][ T9567] ? slab_post_alloc_hook+0x8c/0x340 [ 925.349720][ T9567] ? kmem_cache_alloc+0x10f/0x220 [ 925.354958][ T9567] ? xas_load+0x37c/0x390 [ 925.359497][ T9567] ? skb_release_data+0x542/0x560 [ 925.364681][ T9567] ? kmem_cache_free+0x1db/0x3a0 [ 925.369733][ T9567] ? __kfree_skb+0x104/0x140 [ 925.374926][ T9567] ? nlmon_xmit+0x4b/0x60 [ 925.379329][ T9567] ? __kfree_skb+0x104/0x140 [ 925.384059][ T9567] ? consume_skb+0x57/0x180 [ 925.388797][ T9567] ? nlmon_xmit+0x4b/0x60 [ 925.393461][ T9567] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 925.399833][ T9567] ? ref_tracker_free+0x3a1/0x400 [ 925.409674][ T9567] ? __dev_queue_xmit+0xabb/0x1d10 [ 925.415377][ T9567] netlink_rcv_skb+0x126/0x220 [ 925.420272][ T9567] ? rtnetlink_bind+0x60/0x60 [ 925.425528][ T9567] rtnetlink_rcv+0x1c/0x20 [ 925.430098][ T9567] netlink_unicast+0x56f/0x640 [ 925.434998][ T9567] netlink_sendmsg+0x665/0x770 [ 925.441287][ T9567] ? netlink_getsockopt+0x3e0/0x3e0 [ 925.446742][ T9567] ____sys_sendmsg+0x37c/0x4d0 [ 925.452600][ T9567] __sys_sendmsg+0x1e9/0x270 [ 925.458195][ T9567] __x64_sys_sendmsg+0x46/0x50 [ 925.463319][ T9567] do_syscall_64+0x41/0xc0 [ 925.468689][ T9567] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 925.475317][ T9567] RIP: 0033:0x7f6f42996ae9 [ 925.479877][ T9567] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 925.501076][ T9567] RSP: 002b:00007f6f41cf80c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 925.510037][ T9567] RAX: ffffffffffffffda RBX: 00007f6f42ab6050 RCX: 00007f6f42996ae9 [ 925.518044][ T9567] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 925.526094][ T9567] RBP: 00007f6f41cf8120 R08: 0000000000000000 R09: 0000000000000000 [ 925.534191][ T9567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 925.542299][ T9567] R13: 000000000000006e R14: 00007f6f42ab6050 R15: 00007ffc381e1498 [ 925.550443][ T9567] [ 925.565192][ T9563] bond76 (unregistering): (slave batadv271): Releasing backup interface [ 925.586384][ T9563] bond76 (unregistering): Released all slaves 15:27:25 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0), 0x12, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x10, 0x0, 0x1000f4) (async) fallocate(r0, 0x10, 0x0, 0x1000f4) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000480)={0x9, &(0x7f00000003c0)="dcca4458bedf6b498daf5f10f6597fcfa612634377528105b63b9488648d9a664a97b35a0ce42f9c4ca7b761046ba2b8dd47f39f87370c9102bbaaa5065aec05f7b10b444b2099937578a3563ad40cbd230a9e15b1ee8f77b9c1c6a5d5c291a7139c1cb95fcdde05627f4943c27c383e3ab968f78e562d4268d33c088e52b27290626862af2f26528662d4ed46470ccd3f065d7bebbdc67d8ec7fdb4af7a9d4b1ae53cd9848df387fcedc911817d55de3bfe043a551e4a5e35621c0fbc"}) (async) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000480)={0x9, &(0x7f00000003c0)="dcca4458bedf6b498daf5f10f6597fcfa612634377528105b63b9488648d9a664a97b35a0ce42f9c4ca7b761046ba2b8dd47f39f87370c9102bbaaa5065aec05f7b10b444b2099937578a3563ad40cbd230a9e15b1ee8f77b9c1c6a5d5c291a7139c1cb95fcdde05627f4943c27c383e3ab968f78e562d4268d33c088e52b27290626862af2f26528662d4ed46470ccd3f065d7bebbdc67d8ec7fdb4af7a9d4b1ae53cd9848df387fcedc911817d55de3bfe043a551e4a5e35621c0fbc"}) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80}) r2 = socket$l2tp6(0xa, 0x2, 0x73) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000000)=""/186, 0xba}, {&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/115, 0x73}], 0x4, 0x1caf, 0x7fff) 15:27:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 47) 15:27:25 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = inotify_init1(0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = memfd_create(0x0, 0x0) r5 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f0000000140)) write(r4, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) dup3(r3, r4, 0x0) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, r1, 0x0) 15:27:25 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) socket$l2tp(0x2, 0x2, 0x73) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x2, 0x1, 0x80, 0x8}]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00'}) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x6) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@void, @val={0x3, 0x4, 0x8000, 0x8, 0x81, 0x6}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @broadcast, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @link_local, @local}}, 0x3e) 15:27:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x9000000, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 925.596630][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 925.606807][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 925.668843][ T9590] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 925.679581][ T9593] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 925.700139][ T9596] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 925.725045][ T9593] 8021q: adding VLAN 0 to HW filter on device batadv122 [ 925.734344][ T9593] bond56: (slave batadv122): Enslaving as a backup interface with an up link [ 925.751104][ T9596] 8021q: adding VLAN 0 to HW filter on device batadv272 [ 925.763235][ T9596] bond76: (slave batadv272): Enslaving as a backup interface with an up link 15:27:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async, rerun: 64) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async, rerun: 64) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x2, 0x1, 0x80, 0x8}]}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00'}) (async) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x6) (async) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@void, @val={0x3, 0x4, 0x8000, 0x8, 0x81, 0x6}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @broadcast, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @link_local, @local}}, 0x3e) [ 925.781194][ T9593] bond56 (unregistering): (slave batadv122): Releasing backup interface [ 925.826397][ T9593] bond56 (unregistering): Released all slaves [ 925.833165][ T9593] FAULT_INJECTION: forcing a failure. [ 925.833165][ T9593] name failslab, interval 1, probability 0, space 0, times 0 [ 925.849647][ T9593] CPU: 1 PID: 9593 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 925.861163][ T9593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 925.873150][ T9593] Call Trace: [ 925.877594][ T9593] [ 925.880737][ T9593] dump_stack_lvl+0xda/0x130 [ 925.886388][ T9593] dump_stack+0x15/0x20 [ 925.891204][ T9593] should_fail_ex+0x21f/0x230 [ 925.896669][ T9593] ? kobject_get_path+0x85/0x160 [ 925.901820][ T9593] __should_failslab+0x92/0xa0 [ 925.907704][ T9593] should_failslab+0x9/0x20 [ 925.912399][ T9593] slab_pre_alloc_hook+0x38/0x180 [ 925.917699][ T9593] ? kobject_get_path+0x85/0x160 [ 925.923252][ T9593] ? kobject_get_path+0x85/0x160 [ 925.929165][ T9593] __kmem_cache_alloc_node+0x48/0x1d0 [ 925.935000][ T9593] ? kobject_get_path+0x85/0x160 [ 925.940193][ T9593] __kmalloc+0x95/0x1a0 [ 925.944847][ T9593] kobject_get_path+0x85/0x160 [ 925.950865][ T9593] kobject_uevent_env+0x1b6/0x5b0 [ 925.958374][ T9593] ? sysfs_remove_group+0x17a/0x190 [ 925.964043][ T9593] kobject_uevent+0x1c/0x20 [ 925.969131][ T9593] __kobject_del+0x8e/0x1a0 [ 925.974764][ T9593] kobject_put+0x119/0x170 [ 925.979583][ T9593] net_rx_queue_update_kobjects+0x3d5/0x410 [ 925.985988][ T9593] ? nlmsg_notify+0x127/0x170 [ 925.990917][ T9593] netdev_unregister_kobject+0xba/0x120 [ 925.997797][ T9593] unregister_netdevice_many_notify+0xc64/0x1070 [ 926.004741][ T9593] ? unregister_netdevice_queue+0x116/0x200 [ 926.013649][ T9593] ? list_netdevice+0x2a0/0x2a0 [ 926.018888][ T9593] rtnl_dellink+0x384/0x580 [ 926.024864][ T9593] ? __list_del_entry_valid+0x5f/0xe0 [ 926.031797][ T9593] ? _raw_spin_unlock+0x26/0x40 [ 926.037490][ T9593] ? __mutex_lock+0x21c/0x8d0 [ 926.043550][ T9593] ? rtnl_newlink+0x1600/0x1600 [ 926.049023][ T9593] rtnetlink_rcv_msg+0x807/0x8c0 [ 926.055969][ T9593] ? slab_post_alloc_hook+0x8c/0x340 [ 926.063951][ T9593] ? kmem_cache_alloc+0x10f/0x220 [ 926.069818][ T9593] ? xas_load+0x37c/0x390 [ 926.075433][ T9593] ? skb_release_data+0x542/0x560 [ 926.081921][ T9593] ? kmem_cache_free+0x1db/0x3a0 [ 926.087177][ T9593] ? __kfree_skb+0x104/0x140 [ 926.092249][ T9593] ? nlmon_xmit+0x4b/0x60 [ 926.096889][ T9593] ? __kfree_skb+0x104/0x140 [ 926.103039][ T9593] ? consume_skb+0x57/0x180 [ 926.108331][ T9593] ? nlmon_xmit+0x4b/0x60 [ 926.115730][ T9593] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 926.121245][ T9593] ? ref_tracker_free+0x3a1/0x400 [ 926.129087][ T9593] ? __dev_queue_xmit+0xabb/0x1d10 [ 926.134905][ T9593] netlink_rcv_skb+0x126/0x220 [ 926.139899][ T9593] ? rtnetlink_bind+0x60/0x60 [ 926.144669][ T9593] rtnetlink_rcv+0x1c/0x20 [ 926.150332][ T9593] netlink_unicast+0x56f/0x640 [ 926.155231][ T9593] netlink_sendmsg+0x665/0x770 [ 926.160349][ T9593] ? netlink_getsockopt+0x3e0/0x3e0 [ 926.166475][ T9593] ____sys_sendmsg+0x37c/0x4d0 [ 926.174528][ T9593] __sys_sendmsg+0x1e9/0x270 [ 926.180204][ T9593] __x64_sys_sendmsg+0x46/0x50 [ 926.185169][ T9593] do_syscall_64+0x41/0xc0 [ 926.189626][ T9593] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 926.195665][ T9593] RIP: 0033:0x7f6f42996ae9 [ 926.200420][ T9593] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 926.222924][ T9593] RSP: 002b:00007f6f41d190c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 926.231938][ T9593] RAX: ffffffffffffffda RBX: 00007f6f42ab5f80 RCX: 00007f6f42996ae9 [ 926.240939][ T9593] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 926.251043][ T9593] RBP: 00007f6f41d19120 R08: 0000000000000000 R09: 0000000000000000 [ 926.260100][ T9593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 926.269692][ T9593] R13: 000000000000000b R14: 00007f6f42ab5f80 R15: 00007ffc381e1498 [ 926.278182][ T9593] [ 926.294251][ T9596] bond76 (unregistering): (slave batadv272): Releasing backup interface [ 926.315807][ T9596] bond76 (unregistering): Released all slaves 15:27:26 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000f38bb23dd23f44100000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff010000001d00000000000000000065727370616e300000000000000000006272696467653000400000000000bb976768aefd37190000b43b24af61af8e2f000000000000000065716c00000000000000000000000000ffffffffffff000000000000aaaaaaaaaa000000000000000000a000000010010000380100006d61726b5f6d00000000000000000000000000000000000000000000000000000c0000000400000001000000000100006e666c6f670000000000000000000000000000000000000000000000000000004c0000006d8000000900090000000000b80eba8ec4468a05f7d0c08be35638ee0eed5dd9119d918668afa6c019b085be3837595dc113ccf27499f7202a2b59394b26193cf57ec99b9abb99943198532b0b7bdd0f61e572656469726563740000000000000000000000000000000000000000000000000400"]}, 0x248) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x0, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) 15:27:26 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x40000) r1 = dup2(r0, r0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x8}) 15:27:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 48) 15:27:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r1, 0x8208200) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1) 15:27:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0xa000000, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:27:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r1, 0x8208200) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) creat(&(0x7f0000000440)='./bus\x00', 0x0) (async) ftruncate(r1, 0x8208200) (async) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1) (async) 15:27:26 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x40000) r1 = dup2(r0, r0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x8}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x40000) (async) dup2(r0, r0) (async) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x8}) (async) [ 926.433389][ T9619] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 926.470899][ T9620] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 926.491960][ T9622] syzkaller1: entered promiscuous mode [ 926.498852][ T9622] syzkaller1: entered allmulticast mode [ 926.518010][ T9619] 8021q: adding VLAN 0 to HW filter on device batadv123 [ 926.529317][ T9619] bond56: (slave batadv123): Enslaving as a backup interface with an up link 15:27:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async, rerun: 64) r1 = creat(&(0x7f0000000440)='./bus\x00', 0x0) (rerun: 64) ftruncate(r1, 0x8208200) (async, rerun: 64) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1) (rerun: 64) 15:27:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) inotify_init1(0x0) (async) r2 = inotify_init1(0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = memfd_create(0x0, 0x0) r5 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f0000000140)) write(r4, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) (async) write(r4, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) dup3(r3, r4, 0x0) (async) dup3(r3, r4, 0x0) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, r1, 0x0) [ 926.552524][ T9620] 8021q: adding VLAN 0 to HW filter on device batadv273 [ 926.567477][ T9620] bond76: (slave batadv273): Enslaving as a backup interface with an up link [ 926.587608][ T9637] bond76 (unregistering): (slave batadv273): Releasing backup interface [ 926.616120][ T9643] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 926.648835][ T9637] bond76 (unregistering): Released all slaves 15:27:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0xb000000, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 926.671632][ T9636] bond56 (unregistering): (slave batadv123): Releasing backup interface [ 926.698569][ T9636] bond56 (unregistering): Released all slaves [ 926.721353][ T9636] FAULT_INJECTION: forcing a failure. [ 926.721353][ T9636] name failslab, interval 1, probability 0, space 0, times 0 [ 926.735934][ T9636] CPU: 1 PID: 9636 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 926.746949][ T9636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 926.760929][ T9636] Call Trace: [ 926.766257][ T9636] [ 926.769218][ T9636] dump_stack_lvl+0xda/0x130 [ 926.774930][ T9636] dump_stack+0x15/0x20 [ 926.780973][ T9636] should_fail_ex+0x21f/0x230 [ 926.787884][ T9636] __should_failslab+0x92/0xa0 [ 926.794191][ T9636] should_failslab+0x9/0x20 [ 926.800575][ T9636] slab_pre_alloc_hook+0x38/0x180 [ 926.807059][ T9636] kmem_cache_alloc_node+0x54/0x240 [ 926.815047][ T9636] ? __alloc_skb+0x109/0x2e0 [ 926.819846][ T9636] __alloc_skb+0x109/0x2e0 [ 926.824865][ T9636] alloc_uevent_skb+0x5b/0x120 [ 926.833466][ T9636] kobject_uevent_net_broadcast+0xf6/0x3f0 [ 926.839770][ T9636] kobject_uevent_env+0x467/0x5b0 [ 926.847082][ T9636] kobject_uevent+0x1c/0x20 [ 926.852645][ T9636] __kobject_del+0x8e/0x1a0 [ 926.859012][ T9636] kobject_put+0x119/0x170 [ 926.865063][ T9636] net_rx_queue_update_kobjects+0x3d5/0x410 [ 926.874988][ T9636] ? nlmsg_notify+0x127/0x170 [ 926.880724][ T9636] netdev_unregister_kobject+0xba/0x120 [ 926.887058][ T9636] unregister_netdevice_many_notify+0xc64/0x1070 [ 926.894110][ T9636] ? unregister_netdevice_queue+0x116/0x200 [ 926.901165][ T9636] ? list_netdevice+0x2a0/0x2a0 [ 926.907025][ T9636] rtnl_dellink+0x384/0x580 [ 926.912146][ T9636] ? __list_del_entry_valid+0x5f/0xe0 [ 926.918466][ T9636] ? _raw_spin_unlock+0x26/0x40 [ 926.924114][ T9636] ? __mutex_lock+0x21c/0x8d0 [ 926.930057][ T9636] ? rtnl_newlink+0x1600/0x1600 [ 926.936561][ T9636] rtnetlink_rcv_msg+0x807/0x8c0 [ 926.944931][ T9636] ? slab_post_alloc_hook+0x8c/0x340 [ 926.951673][ T9636] ? kmem_cache_alloc+0x10f/0x220 [ 926.957406][ T9636] ? xas_load+0x37c/0x390 [ 926.963017][ T9636] ? skb_release_data+0x542/0x560 [ 926.968995][ T9636] ? kmem_cache_free+0x1db/0x3a0 [ 926.975057][ T9636] ? __kfree_skb+0x104/0x140 [ 926.980651][ T9636] ? nlmon_xmit+0x4b/0x60 [ 926.989110][ T9636] ? __kfree_skb+0x104/0x140 [ 926.995788][ T9636] ? consume_skb+0x57/0x180 [ 927.002260][ T9636] ? nlmon_xmit+0x4b/0x60 [ 927.012739][ T9636] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 927.024586][ T9636] ? ref_tracker_free+0x3a1/0x400 [ 927.031631][ T9636] ? __dev_queue_xmit+0xabb/0x1d10 [ 927.039315][ T9636] netlink_rcv_skb+0x126/0x220 [ 927.045373][ T9636] ? rtnetlink_bind+0x60/0x60 [ 927.054574][ T9636] rtnetlink_rcv+0x1c/0x20 [ 927.059331][ T9636] netlink_unicast+0x56f/0x640 [ 927.064931][ T9636] netlink_sendmsg+0x665/0x770 [ 927.072315][ T9636] ? netlink_getsockopt+0x3e0/0x3e0 [ 927.082444][ T9636] ____sys_sendmsg+0x37c/0x4d0 [ 927.090983][ T9636] __sys_sendmsg+0x1e9/0x270 [ 927.096743][ T9636] __x64_sys_sendmsg+0x46/0x50 [ 927.106703][ T9636] do_syscall_64+0x41/0xc0 [ 927.113791][ T9636] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 927.120348][ T9636] RIP: 0033:0x7f6f42996ae9 [ 927.125251][ T9636] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 927.150062][ T9636] RSP: 002b:00007f6f41cf80c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 927.163375][ T9636] RAX: ffffffffffffffda RBX: 00007f6f42ab6050 RCX: 00007f6f42996ae9 [ 927.175300][ T9636] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 927.187432][ T9636] RBP: 00007f6f41cf8120 R08: 0000000000000000 R09: 0000000000000000 [ 927.197352][ T9636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 927.208656][ T9636] R13: 000000000000006e R14: 00007f6f42ab6050 R15: 00007ffc381e1498 [ 927.219109][ T9636] 15:27:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000001c0)={'bridge0\x00', @random="a75c0ff0bc6c"}) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0xffff, 0xd80) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x200}) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'bridge_slave_0\x00', 0x4822}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000100)={0x8}) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r3, 0x8208200) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'virt_wifi0\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) [ 927.237472][ T9649] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 15:27:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 927.282888][ T9649] 8021q: adding VLAN 0 to HW filter on device batadv274 [ 927.293940][ T9649] bond76: (slave batadv274): Enslaving as a backup interface with an up link 15:27:27 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x248) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x0, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) [ 927.340826][ T9649] bond76 (unregistering): (slave batadv274): Releasing backup interface [ 927.358319][ T9649] bond76 (unregistering): Released all slaves [ 927.370709][ T9654] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:27:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0xc000000, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:27:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000001c0)={'bridge0\x00', @random="a75c0ff0bc6c"}) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0xffff, 0xd80) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x200}) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'bridge_slave_0\x00', 0x4822}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000100)={0x8}) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r3, 0x8208200) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'virt_wifi0\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000001c0)={'bridge0\x00', @random="a75c0ff0bc6c"}) (async) syz_open_dev$vcsu(&(0x7f0000000080), 0xffff, 0xd80) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x200}) (async) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'bridge_slave_0\x00', 0x4822}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000100)={0x8}) (async) pipe2$watch_queue(&(0x7f0000000140), 0x80) (async) creat(&(0x7f0000000440)='./bus\x00', 0x0) (async) ftruncate(r3, 0x8208200) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'virt_wifi0\x00', 0x1000}) (async) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) (async) [ 927.410104][ T9656] 8021q: adding VLAN 0 to HW filter on device batadv124 [ 927.426670][ T9656] bond56: (slave batadv124): Enslaving as a backup interface with an up link [ 927.448109][ T9659] syzkaller1: entered promiscuous mode [ 927.454796][ T9659] syzkaller1: entered allmulticast mode [ 927.474402][ T9662] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 927.506499][ T9662] 8021q: adding VLAN 0 to HW filter on device batadv275 [ 927.515722][ T9662] bond76: (slave batadv275): Enslaving as a backup interface with an up link 15:27:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000001c0)={'bridge0\x00', @random="a75c0ff0bc6c"}) (async, rerun: 32) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0xffff, 0xd80) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x200}) (async, rerun: 32) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'bridge_slave_0\x00', 0x4822}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000100)={0x8}) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) r3 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r3, 0x8208200) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'virt_wifi0\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) [ 927.527520][ T9654] bond56 (unregistering): (slave batadv124): Releasing backup interface [ 927.548540][ T9654] bond56 (unregistering): Released all slaves [ 927.566052][ T9662] bond76 (unregistering): (slave batadv275): Releasing backup interface 15:27:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x8000005) 15:27:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xa00, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 927.591579][ T9662] bond76 (unregistering): Released all slaves [ 927.647234][ T9687] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 927.680583][ T9687] 8021q: adding VLAN 0 to HW filter on device batadv125 [ 927.689967][ T9687] bond56: (slave batadv125): Enslaving as a backup interface with an up link [ 927.703543][ T9687] bond56 (unregistering): (slave batadv125): Releasing backup interface [ 927.725739][ T9687] bond56 (unregistering): Released all slaves [ 928.375882][T26358] usb usb6-port1: attempt power cycle [ 930.335753][T26358] usb usb6-port1: unable to enumerate USB device [ 930.342760][ T9627] ================================================================== [ 930.350879][ T9627] BUG: KCSAN: data-race in usb_set_device_state / usbdev_open [ 930.358393][ T9627] [ 930.360732][ T9627] write to 0xffff888102736018 of 4 bytes by task 26358 on cpu 0: [ 930.368481][ T9627] usb_set_device_state+0x202/0x360 [ 930.373713][ T9627] hcd_bus_suspend+0x1b1/0x2c0 [ 930.378505][ T9627] usb_generic_driver_suspend+0x55/0xd0 [ 930.384102][ T9627] usb_suspend_both+0x2a8/0x980 [ 930.388976][ T9627] usb_runtime_suspend+0x4a/0xd0 [ 930.393940][ T9627] __rpm_callback+0x296/0x720 [ 930.398685][ T9627] rpm_suspend+0x79f/0x1260 [ 930.403214][ T9627] __pm_runtime_suspend+0xf1/0x200 [ 930.408361][ T9627] usb_runtime_idle+0x42/0x50 [ 930.413066][ T9627] rpm_idle+0x52b/0x890 [ 930.417272][ T9627] pm_runtime_work+0x101/0x120 [ 930.422069][ T9627] process_one_work+0x434/0x860 [ 930.426954][ T9627] worker_thread+0x5f2/0xa10 [ 930.431574][ T9627] kthread+0x1d7/0x210 [ 930.435677][ T9627] ret_from_fork+0x2e/0x40 [ 930.440121][ T9627] ret_from_fork_asm+0x11/0x20 [ 930.444912][ T9627] [ 930.447258][ T9627] read to 0xffff888102736018 of 4 bytes by task 9627 on cpu 1: [ 930.454823][ T9627] usbdev_open+0xe2/0x480 [ 930.459192][ T9627] chrdev_open+0x34f/0x3c0 [ 930.463643][ T9627] do_dentry_open+0x5cd/0xaf0 [ 930.468874][ T9627] vfs_open+0x4a/0x50 [ 930.472900][ T9627] path_openat+0x17f2/0x1d10 [ 930.477536][ T9627] do_filp_open+0xf6/0x200 [ 930.481975][ T9627] do_sys_openat2+0xab/0x110 [ 930.486611][ T9627] __x64_sys_openat+0xf3/0x120 [ 930.491410][ T9627] do_syscall_64+0x41/0xc0 [ 930.495849][ T9627] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 930.501773][ T9627] [ 930.504105][ T9627] value changed: 0x00000007 -> 0x00000008 [ 930.509832][ T9627] [ 930.512171][ T9627] Reported by Kernel Concurrency Sanitizer on: [ 930.518326][ T9627] CPU: 1 PID: 9627 Comm: syz-executor.2 Not tainted 6.5.0-rc7-syzkaller-00018-g89bf6209cad6 #0 [ 930.528760][ T9627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 930.538836][ T9627] ================================================================== [ 932.545794][ T3166] usb usb6-port1: attempt power cycle 15:27:34 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x40000) dup2(r0, r0) (async) r1 = dup2(r0, r0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x8}) 15:27:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = inotify_init1(0x0) (async, rerun: 32) r3 = syz_open_procfs(0x0, 0x0) (rerun: 32) r4 = memfd_create(0x0, 0x0) (async) r5 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f0000000140)) (async, rerun: 32) write(r4, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) (async, rerun: 32) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async, rerun: 32) dup3(r3, r4, 0x0) (async, rerun: 32) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, r1, 0x0) 15:27:34 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x8000005) 15:27:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0xd000000, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:27:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x2500, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:27:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x248) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x0, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) [ 934.515655][ T3166] usb usb6-port1: unable to enumerate USB device [ 934.543928][ T9697] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 934.553822][ T9700] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN 15:27:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = inotify_init1(0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = memfd_create(0x0, 0x0) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) syz_usbip_server_init(0x3) dup3(r2, r3, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x0) [ 934.571880][ T9695] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 934.590408][ T9708] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 934.605417][ T9692] syzkaller1: entered promiscuous mode [ 934.611027][ T9692] syzkaller1: entered allmulticast mode 15:27:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x8000005) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x8000005) (async) [ 934.625651][ T9708] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(8) [ 934.632207][ T9708] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 934.639872][ T9708] vhci_hcd vhci_hcd.0: Device attached [ 934.654735][ T9697] 8021q: adding VLAN 0 to HW filter on device batadv126 [ 934.668780][ T9697] bond56: (slave batadv126): Enslaving as a backup interface with an up link [ 934.688185][ T9710] 8021q: adding VLAN 0 to HW filter on device batadv276 [ 934.697015][ T9710] bond76: (slave batadv276): Enslaving as a backup interface with an up link [ 934.708629][ T9711] vhci_hcd: connection closed [ 934.708948][ T3107] vhci_hcd: stop threads [ 934.718057][ T3107] vhci_hcd: release socket [ 934.722502][ T3107] vhci_hcd: disconnect device [ 934.732872][ T9715] bond56 (unregistering): (slave batadv126): Releasing backup interface [ 934.754730][ T9715] bond56 (unregistering): Released all slaves 15:27:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r1, 0x8208200) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) 15:27:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 934.769356][ T9695] bond76 (unregistering): (slave batadv276): Releasing backup interface [ 934.793762][ T9695] bond76 (unregistering): Released all slaves 15:27:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0xe000000, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:27:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) r1 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r1, 0x8208200) (async, rerun: 32) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) (async, rerun: 32) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) [ 934.854400][ T9728] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 934.884132][ T9730] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 934.907475][ T9728] 8021q: adding VLAN 0 to HW filter on device batadv127 [ 934.916236][ T9728] bond56: (slave batadv127): Enslaving as a backup interface with an up link [ 934.928507][ T9728] bond56 (unregistering): (slave batadv127): Releasing backup interface [ 934.947902][ T9728] bond56 (unregistering): Released all slaves [ 934.966259][ T9730] 8021q: adding VLAN 0 to HW filter on device batadv277 [ 934.976024][ T9730] bond76: (slave batadv277): Enslaving as a backup interface with an up link [ 934.987703][ T9738] bond76 (unregistering): (slave batadv277): Releasing backup interface [ 935.019939][ T9738] bond76 (unregistering): Released all slaves [ 936.585712][ T3166] usb usb6-port1: attempt power cycle 15:27:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0xc3, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x78, 0x30, 0x17b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_bpf={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{}, {0x1d}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) 15:27:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r1, 0x8208200) (async) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) 15:27:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7402, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:27:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0xf000000, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:27:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = inotify_init1(0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = memfd_create(0x0, 0x0) (async) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) (async) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async) syz_usbip_server_init(0x3) (async) dup3(r2, r3, 0x0) (async) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) (async) close_range(r0, 0xffffffffffffffff, 0x0) 15:27:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x248) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) [ 938.586017][ T3166] usb usb6-port1: unable to enumerate USB device [ 938.616177][ T9745] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 938.617942][ T9747] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN 15:27:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = inotify_init1(0x0) (async) r2 = syz_open_procfs(0x0, 0x0) (async) r3 = memfd_create(0x0, 0x0) (async) r4 = syz_usbip_server_init(0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) (async) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) syz_usbip_server_init(0x3) dup3(r2, r3, 0x0) (async) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x0) 15:27:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x200}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'veth1_macvtap\x00', @broadcast}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$tun(r2, &(0x7f0000000140)={@val={0x0, 0x86dd}, @val={0x3, 0x1, 0x754a, 0x1, 0x0, 0x7fff}, @llc={@snap={0xaa, 0x0, "f614", "97d48d", 0xf8, "738f651e9e3de55d88f649f592c692eefff7a04e8c524668d68026556e2b9ca3f29fbd529058d5820953b4c3ca26d032af30a946f8990d429e957d45e0a121b3"}}}, 0x57) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1', "98d8f3b1928d32e528b7a5c7c5c3352edfa45c91c25e1e066d7d5cb5c37c2cf750b9605ed5aec85cc46edf0290707ba2e32b86ab1d7257c3f4"}, 0x3d) 15:27:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0xc3, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x78, 0x30, 0x17b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_bpf={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{}, {0x1d}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0xc3, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x78, 0x30, 0x17b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_bpf={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{}, {0x1d}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) (async) [ 938.649705][ T9749] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 938.673702][ T9748] syzkaller1: entered promiscuous mode [ 938.679884][ T9748] syzkaller1: entered allmulticast mode 15:27:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = inotify_init1(0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = memfd_create(0x0, 0x0) r4 = syz_usbip_server_init(0x0) syz_usbip_server_init(0x5) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) dup3(r2, r3, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000094) close_range(r0, 0xffffffffffffffff, 0x0) [ 938.723860][ T9745] 8021q: adding VLAN 0 to HW filter on device batadv278 [ 938.743964][ T9745] bond76: (slave batadv278): Enslaving as a backup interface with an up link [ 938.764236][ T9749] 8021q: adding VLAN 0 to HW filter on device batadv128 [ 938.766025][ T9772] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 938.782308][ T9772] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 938.789135][ T9772] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 938.792135][ T9749] bond56: (slave batadv128): Enslaving as a backup interface with an up link [ 938.799728][ T9772] vhci_hcd vhci_hcd.0: Device attached [ 938.801805][ T9773] vhci_hcd: connection closed [ 938.817212][ T9758] bond76 (unregistering): (slave batadv278): Releasing backup interface [ 938.831858][ T3764] vhci_hcd: stop threads [ 938.836714][ T3764] vhci_hcd: release socket [ 938.841361][ T3764] vhci_hcd: disconnect device [ 938.858347][ T9758] bond76 (unregistering): Released all slaves 15:27:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x200}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'veth1_macvtap\x00', @broadcast}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x1) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$tun(r2, &(0x7f0000000140)={@val={0x0, 0x86dd}, @val={0x3, 0x1, 0x754a, 0x1, 0x0, 0x7fff}, @llc={@snap={0xaa, 0x0, "f614", "97d48d", 0xf8, "738f651e9e3de55d88f649f592c692eefff7a04e8c524668d68026556e2b9ca3f29fbd529058d5820953b4c3ca26d032af30a946f8990d429e957d45e0a121b3"}}}, 0x57) (async) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1', "98d8f3b1928d32e528b7a5c7c5c3352edfa45c91c25e1e066d7d5cb5c37c2cf750b9605ed5aec85cc46edf0290707ba2e32b86ab1d7257c3f4"}, 0x3d) 15:27:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x10000000, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:27:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x200}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'veth1_macvtap\x00', @broadcast}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$tun(r2, &(0x7f0000000140)={@val={0x0, 0x86dd}, @val={0x3, 0x1, 0x754a, 0x1, 0x0, 0x7fff}, @llc={@snap={0xaa, 0x0, "f614", "97d48d", 0xf8, "738f651e9e3de55d88f649f592c692eefff7a04e8c524668d68026556e2b9ca3f29fbd529058d5820953b4c3ca26d032af30a946f8990d429e957d45e0a121b3"}}}, 0x57) (async) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1', "98d8f3b1928d32e528b7a5c7c5c3352edfa45c91c25e1e066d7d5cb5c37c2cf750b9605ed5aec85cc46edf0290707ba2e32b86ab1d7257c3f4"}, 0x3d) [ 938.878193][ T9767] bond56 (unregistering): (slave batadv128): Releasing backup interface [ 938.899831][ T9767] bond56 (unregistering): Released all slaves 15:27:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7403, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:27:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r1, 0x8208200) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000000c0)) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000000)=0x9) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@deltaction={0x3c, 0x31, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24}, 0x4000800) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) [ 938.953393][ T9791] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 15:27:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) r1 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r1, 0x8208200) (async, rerun: 64) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000000c0)) (async, rerun: 64) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000000)=0x9) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@deltaction={0x3c, 0x31, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24}, 0x4000800) (async, rerun: 32) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (rerun: 32) [ 939.006068][ T9791] 8021q: adding VLAN 0 to HW filter on device batadv279 [ 939.015388][ T9791] bond76: (slave batadv279): Enslaving as a backup interface with an up link [ 939.027178][ T9798] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 939.061236][ T9791] bond76 (unregistering): (slave batadv279): Releasing backup interface [ 939.082946][ T9791] bond76 (unregistering): Released all slaves [ 939.100543][ T9798] 8021q: adding VLAN 0 to HW filter on device batadv129 15:27:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) (async) r1 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r1, 0x8208200) (async, rerun: 32) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000000c0)) (rerun: 32) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000000)=0x9) (async, rerun: 32) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) (rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@deltaction={0x3c, 0x31, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24}, 0x4000800) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) [ 939.112220][ T9798] bond56: (slave batadv129): Enslaving as a backup interface with an up link [ 939.125863][ T9806] bond56 (unregistering): (slave batadv129): Releasing backup interface [ 939.161348][ T9806] bond56 (unregistering): Released all slaves 15:27:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x0, 0x6, 0x20, 0xcaa0, 0x6}, @ipv6=@udp={0xc, 0x6, "ac5d24", 0x69, 0x11, 0xff, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x67, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x1, [0x3, 0x3600000000000000, 0x6, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}], {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "9e2de54c295570594c1e4002b8cbc5db9a"}}}}}, 0x9b) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x248) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x8, 0x1, 0x10000, 0x6, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x3, 0xf8}, @timestamp_addr={0x44, 0x4, 0xf8, 0x1, 0xa}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x7, [{@multicast1, 0x3f}, {@broadcast, 0x6}, {@loopback, 0x2}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x2, [{@broadcast, 0x9}, {@private=0xa010102, 0x8}, {@empty, 0xf7c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa89}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x6, [0x4, 0x1, 0x80000001]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x9, [{@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x5, [{@multicast2, 0xffff64af}, {@multicast1, 0x101}, {@multicast1, 0x4}, {@remote, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xf, 0x42, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r4}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000580)={0x55d, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff, r8, r5]}, 0x4) 15:27:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x11000000, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 15:27:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7404, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 939.531253][ T9813] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 939.553905][ T9813] 8021q: adding VLAN 0 to HW filter on device batadv130 [ 939.562381][ T9813] bond56: (slave batadv130): Enslaving as a backup interface with an up link [ 939.585807][ T9813] bond56 (unregistering): (slave batadv130): Releasing backup interface [ 939.606482][ T9813] bond56 (unregistering): Released all slaves [ 939.616475][ T9815] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 939.637165][ T9817] syzkaller1: entered promiscuous mode [ 939.644290][ T9817] syzkaller1: entered allmulticast mode [ 939.660973][ T9819] 8021q: adding VLAN 0 to HW filter on device batadv280 [ 939.671605][ T9819] bond76: (slave batadv280): Enslaving as a backup interface with an up link [ 939.687473][ T9815] bond76 (unregistering): (slave batadv280): Releasing backup interface [ 939.708170][ T9815] bond76 (unregistering): Released all slaves