8147395932c18636e2e39fe075da5e627e7b50f788bbb2c34373029d16cee0fcb2dd34b1806ca1a537acecb79a06493128f8c9191f2bed02fcc805b8494850219f8b2488f8fdcbe5384a156d99b1a667848584b81f3a31be2d2463e515d0d1c4596a1e947302d7a7bedc27b596c2bb48bcc3dfae2265e7edd66f0f95420"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x421}}, &(0x7f0000000200)={0x0, 0xf, 0x24, {0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x30, 0x3, 0x0, 0x8, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "e5f94257ca0f906298e48e2f2ae4d7cf"}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd8, 0x2, 0x6, 0x7e, "71a9befc", "58722abc"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x80, 0x40, 0x5, 0x7f, 0x36, 0x3}}}, &(0x7f0000000740)={0x84, &(0x7f0000000340)={0x40, 0x18, 0x2a, "7616ec7c00646f68fc9598ad020606ad8f24aec8e514388737fd12f41885f66699e354179ae420e2ba7d"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000500)={0x40, 0xb, 0x2, "7b99"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x12}, &(0x7f0000000580)={0x40, 0x13, 0x6, @random="00000000f3fd"}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000600)={0x40, 0x19, 0x2, "30ab"}, &(0x7f0000000640)={0x40, 0x1a, 0x2}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x2}}) (async) r1 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x84, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xd9, 0xc0, 0x3f, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x1, 0x58, {0x9, 0x21, 0x2, 0x3, 0x1, {0x22, 0xda4}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x1, 0x6e}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x40, 0x3, 0x9}}]}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x40, 0x2, 0x1f, 0x8, 0x3}, 0x15, &(0x7f00000001c0)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0xf01e, 0x0, [0xff00c0]}]}, 0x4, [{0x3e, &(0x7f0000000400)=@string={0x3e, 0x3, "ebce0495cd0ec7cb6eb4039fe1b01674d1b4f977eae779da19fd1b78d2bdf8ad68be2c6cc70c433bad716ce55166151f16006389c2466a6f278a19c5"}}, {0x59, &(0x7f0000000840)=@string={0x59, 0x3, "8957244765e91d40280725e0135219149aa0a5fdfc407a1cd2f91611ff218422fcbfd207eab8747b63956daeb9b61727f90c1b210de21bac7735653432da29fc2c19c8795798b86c00d57e608dbcd967ca40c9e6242232"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x412}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000ac0)={0x24, &(0x7f00000009c0)={0x40, 0x11, 0x1f, {0x1f, 0x22, "4beccf481706b97eec806333ed8f1277dbd39cc04932c00a98342ba95d"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc1a}}, &(0x7f0000000a40)={0x0, 0x22, 0x14, {[@local=@item_012={0x2, 0x2, 0x3, "a0e6"}, @local=@item_4={0x3, 0x2, 0x2, "d1052d33"}, @main=@item_012={0x0, 0x0, 0xb}, @local=@item_012={0x2, 0x2, 0x9, "82b9"}, @global=@item_4={0x3, 0x1, 0x0, "a703a801"}, @main=@item_012={0x1, 0x0, 0xc, "fc"}, @global=@item_012={0x0, 0x1, 0x6}]}}, &(0x7f0000000a80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7f, 0x2, 0x1, {0x22, 0x679}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b00)={0x0, 0xe, 0x6d, "c23cb74e4d2c82b7f177e44a61b7d408e05dd8072f9258fa478659b13bb6be41f76987af2261caf92d6cb67b9858df4fab22d95c692b502eb391fbef8e21d747e9aa30587b32150f554fae5f1bb1fc3d6d981f034c9922101e57e9b726576b68050a08e1f2a89c63b0dae2792e"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000c00)={0x20, 0x1, 0x3e, "1a4ad520dc7db05cbc2d565be552699a8f0c0b65bc9417908b16e1e92d4668fa800a3872e4d2ae1c58fdf746e4a2efa790a84aa16357c839f1a4940330c8"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x1}}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (rerun: 32) 21:53:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000001c0)={0x0, 0x6}) 21:53:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5601}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x7a}, 0x0) 21:53:02 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440), 0x4) 21:53:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000940)={'rose0\x00', 0x1}) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000000)) [ 1726.468690][T27565] bond93: entered promiscuous mode [ 1726.485992][T27566] bond1576: entered promiscuous mode 21:53:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1726.514965][T27567] bond1920: entered promiscuous mode [ 1726.523955][T27565] 8021q: adding VLAN 0 to HW filter on device batadv1037 [ 1726.526526][T27565] batadv1037: entered promiscuous mode [ 1726.530048][T27565] bond93: (slave batadv1037): Enslaving as an active interface with an up link [ 1726.534523][T27575] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1726.549907][T27575] 8021q: adding VLAN 0 to HW filter on device batadv1729 [ 1726.552393][T27575] batadv1729: entered promiscuous mode [ 1726.554804][T27575] bond1920: (slave batadv1729): Enslaving as an active interface with an up link 21:53:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5602}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1726.577878][T27577] bond1577: entered promiscuous mode [ 1726.587062][T27578] bond93 (unregistering): (slave batadv1037): Releasing backup interface 21:53:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe01000000000000ff", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1726.619351][T27578] batadv1037: left promiscuous mode [ 1726.627542][T27578] bond93 (unregistering): Released all slaves [ 1726.646505][T27581] bond1921: entered promiscuous mode [ 1726.658370][T27583] bond1578: entered promiscuous mode 21:53:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1726.682083][T27584] 8021q: adding VLAN 0 to HW filter on device batadv1730 [ 1726.687747][T27584] batadv1730: entered promiscuous mode [ 1726.690216][T27584] bond1921: (slave batadv1730): Enslaving as an active interface with an up link 21:53:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x300}, 0x0) [ 1726.712973][T27588] bond1579: entered promiscuous mode 21:53:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5603}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1726.735898][T27592] bond93: entered promiscuous mode 21:53:02 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000025c0)={0x6, 0x1, &(0x7f0000002400)=@raw=[@exit], &(0x7f0000002440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000024c0), 0x8}, 0x90) 21:53:02 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20) 21:53:02 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x11, &(0x7f00000005c0)=@ringbuf={{}, {}, {}, [@btf_id]}, &(0x7f0000000680)='syzkaller\x00', 0x5, 0x9b, &(0x7f00000006c0)=""/155}, 0x90) [ 1726.772777][T27595] bond1922: entered promiscuous mode 21:53:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) [ 1726.791029][T27597] bond1580: entered promiscuous mode 21:53:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1726.808074][T27592] 8021q: adding VLAN 0 to HW filter on device batadv1038 [ 1726.810403][T27592] batadv1038: entered promiscuous mode [ 1726.812491][T27592] bond93: (slave batadv1038): Enslaving as an active interface with an up link [ 1726.823189][T27605] 8021q: adding VLAN 0 to HW filter on device batadv1731 [ 1726.825418][T27605] batadv1731: entered promiscuous mode [ 1726.827833][T27605] bond1922: (slave batadv1731): Enslaving as an active interface with an up link 21:53:02 executing program 3: bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000025c0)={0x6, 0x1, &(0x7f0000002400)=@raw=[@exit], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000024c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000002580)=[{}]}, 0x90) [ 1726.844343][T27611] bond1581: entered promiscuous mode 21:53:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5700}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1726.855124][T27612] bond93 (unregistering): (slave batadv1038): Releasing backup interface 21:53:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe01000000000000ff", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:02 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, 0x0, &(0x7f0000000840)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002100)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000c80)=@raw=[@ldst={0x0, 0x2, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0xffffffffffffffff}], &(0x7f0000000cc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000000d00)=""/4096}, 0x90) 21:53:02 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000100)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) [ 1726.899534][T27612] batadv1038: left promiscuous mode [ 1726.908178][T27612] bond93 (unregistering): Released all slaves 21:53:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000940)={'rose0\x00', 0x1}) ioctl$TUNGETSNDBUF(r0, 0x400454da, 0x0) [ 1726.941778][T27618] bond1923: entered promiscuous mode [ 1726.951052][T27620] bond1582: entered promiscuous mode 21:53:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x500}, 0x0) 21:53:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe01000000000000ff", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1726.985306][T27626] 8021q: adding VLAN 0 to HW filter on device batadv1732 [ 1726.989738][T27626] batadv1732: entered promiscuous mode [ 1726.992193][T27626] bond1923: (slave batadv1732): Enslaving as an active interface with an up link 21:53:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5701}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1727.006704][T27634] bond93: entered promiscuous mode [ 1727.021914][T27637] bond1583: entered promiscuous mode 21:53:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe01000000000000ff", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1727.041915][T27634] 8021q: adding VLAN 0 to HW filter on device batadv1039 [ 1727.045884][T27634] batadv1039: entered promiscuous mode [ 1727.052429][T27634] bond93: (slave batadv1039): Enslaving as an active interface with an up link 21:53:03 executing program 3: bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000000300)}, 0x800) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) [ 1727.075167][T27641] bond1924: entered promiscuous mode 21:53:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) [ 1727.087174][T27643] bond1584: entered promiscuous mode [ 1727.097430][T27634] bond93 (unregistering): (slave batadv1039): Releasing backup interface 21:53:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe01000000000000ff", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1727.128975][T27634] batadv1039: left promiscuous mode [ 1727.135188][T27634] bond93 (unregistering): Released all slaves [ 1727.150232][T27641] 8021q: adding VLAN 0 to HW filter on device batadv1733 [ 1727.152683][T27641] batadv1733: entered promiscuous mode [ 1727.154916][T27641] bond1924: (slave batadv1733): Enslaving as an active interface with an up link [ 1727.171911][T27651] bond1585: entered promiscuous mode 21:53:05 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000000)={0x20, 0x2, 0x77, {0x77, 0xd, "7efd10b8afc8a576362e3835a55dd1ee935d1d1faf81719e8945cf3bd694a8b8f33e03a2ccdd58f7cc117269cc3920b8867c1e0e90ced8034620c253489056bbb7dc03e03aebe28a4f2d55bbac31e24e65c05f3d361e392c6b26ed040d9e74b3c59870dd6f9361122629eed4c349dae63f17ab0881"}}, &(0x7f0000000080)={0x0, 0x3, 0xf, @string={0xf, 0x3, "df5e35ea7db12a2693d6243deb"}}, &(0x7f00000000c0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xb}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x81, 0xf7, 0x1, {0x22, 0x5}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x20, 0x10, 0xe7, "dc373175cea40c8e64dd35f0d3b684f6aff65fde40376e15227cc94a7ffacd1c3aedc39cc23c9bbb612b1323577f5729cc07a442cf0df4571ccaf24454684d785902c59ab6a26a31b6b953783140b282b4fc46dd8a2331755e1652f167803cdb5ff6deb645ce2d33a88193578cc2b63e1b73a8bf52bad2a488658f8098f1e209fc73ab7e1a6b8e0737f1eb34784d4dbf1cb69b8f97e24aa1d2530bb4eabf7556b3fd2899d89d59d8739ea9c699c7773445167c12349ab946ff5525cd65004f2e1f66fce9c1488bb8cdf1b59062d86f8b572d528117c90b308ce87b79a1b8486a1e0ee71b74c3c9"}, &(0x7f0000000180)={0x0, 0xa, 0x1}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000380)={0x20, 0x1, 0x3b, "bcc63fdf5c15b1f66d8bcc26f8501d0b7ea3a48af6e92f174f345c6f7dcf97fe94218a0a4089fcf7ed005a168b74103bfd64c57108cf33e50e06d8"}, &(0x7f0000000200)={0x20, 0x3, 0x1, 0x7f}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 21:53:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe01000000000000ff", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5702}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:05 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002e80)={0x11, 0x5, &(0x7f0000002c00)=@framed={{}, [@jmp, @exit]}, &(0x7f0000002c80)='syzkaller\x00'}, 0x90) 21:53:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x600}, 0x0) [ 1729.478140][T27660] validate_nla: 36 callbacks suppressed [ 1729.478155][T27660] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 21:53:05 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000b00)="81", 0x1}], 0x1, &(0x7f0000000c80)=[@ip_tos_u8={{0x11}}], 0x18}, 0x0) [ 1729.496522][T27660] bond93: entered promiscuous mode [ 1729.498247][T27663] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:53:05 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002e80)={0x11, 0x9, &(0x7f0000002c00)=@framed={{}, [@jmp, @map_fd, @exit, @map_idx_val]}, &(0x7f0000002c80)='syzkaller\x00'}, 0x90) [ 1729.518440][T27663] bond1586: entered promiscuous mode [ 1729.520145][T27658] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 21:53:05 executing program 3: socketpair(0x3, 0x0, 0x101, &(0x7f0000000900)) 21:53:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe01000000000000ff", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1729.556944][T27658] bond1925: entered promiscuous mode [ 1729.565492][T27660] 8021q: adding VLAN 0 to HW filter on device batadv1040 [ 1729.570674][T27660] batadv1040: entered promiscuous mode [ 1729.573192][T27660] bond93: (slave batadv1040): Enslaving as an active interface with an up link [ 1729.575844][T27670] __nla_validate_parse: 4 callbacks suppressed [ 1729.575853][T27670] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:05 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000), 0xf) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={0x0, r0}, 0x18) [ 1729.600362][T27670] 8021q: adding VLAN 0 to HW filter on device batadv1734 [ 1729.605033][T27670] batadv1734: entered promiscuous mode [ 1729.610502][T27670] bond1925: (slave batadv1734): Enslaving as an active interface with an up link [ 1729.620318][T27672] bond93 (unregistering): (slave batadv1040): Releasing backup interface 21:53:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000940)={'rose0\x00', 0x1}) ioctl$TUNGETSNDBUF(r0, 0x400454de, 0x0) 21:53:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5703}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1729.669398][T27672] batadv1040: left promiscuous mode [ 1729.676095][T27672] bond93 (unregistering): Released all slaves [ 1729.684524][T27675] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1729.695806][T27675] bond1587: entered promiscuous mode [ 1729.697439][T27682] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 21:53:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1729.712971][T27682] bond1926: entered promiscuous mode [ 1729.716221][T27685] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1729.730012][T27685] 8021q: adding VLAN 0 to HW filter on device batadv1735 [ 1729.732479][T27685] batadv1735: entered promiscuous mode [ 1729.735972][T27685] bond1926: (slave batadv1735): Enslaving as an active interface with an up link 21:53:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x608}, 0x0) [ 1729.745723][T27688] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:53:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5800}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1729.767974][T27688] bond1588: entered promiscuous mode [ 1729.769651][T27691] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 21:53:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000088", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:05 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002e80)={0x11, 0x3, &(0x7f0000002c00)=@framed, 0x0}, 0x90) [ 1729.786047][T27691] bond93: entered promiscuous mode [ 1729.787595][T27693] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 21:53:05 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='.\x00'}, 0x18) [ 1729.806534][T27693] bond1927: entered promiscuous mode 21:53:05 executing program 3: bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000a40)=@o_path={0x0}, 0x18) [ 1729.815885][T27691] 8021q: adding VLAN 0 to HW filter on device batadv1041 [ 1729.819476][T27691] batadv1041: entered promiscuous mode [ 1729.821799][T27691] bond93: (slave batadv1041): Enslaving as an active interface with an up link [ 1729.824816][T27698] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1729.836054][T27698] bond1589: entered promiscuous mode [ 1729.845183][T27691] bond93 (unregistering): (slave batadv1041): Releasing backup interface 21:53:05 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ac0)={0x6, 0xf, &(0x7f0000001840)=@ringbuf, &(0x7f00000018c0)='syzkaller\x00', 0x8}, 0x90) 21:53:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe010000000000007f", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:05 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) 21:53:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000940)={'rose0\x00', 0x1}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'vcan0\x00', @broadcast}) [ 1729.899315][T27691] batadv1041: left promiscuous mode [ 1729.907222][T27691] bond93 (unregistering): Released all slaves [ 1729.914537][T27693] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1729.926621][T27693] 8021q: adding VLAN 0 to HW filter on device batadv1736 [ 1729.929447][T27693] batadv1736: entered promiscuous mode [ 1729.931890][T27693] bond1927: (slave batadv1736): Enslaving as an active interface with an up link [ 1729.934572][T27708] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:53:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5801}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1729.964010][T27708] bond1590: entered promiscuous mode 21:53:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x700}, 0x0) [ 1729.980374][T27716] bond1928: entered promiscuous mode 21:53:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe01000000000000d9", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1729.988973][T27716] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1730.004917][T27716] 8021q: adding VLAN 0 to HW filter on device batadv1737 [ 1730.007812][T27716] batadv1737: entered promiscuous mode [ 1730.010395][T27716] bond1928: (slave batadv1737): Enslaving as an active interface with an up link 21:53:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5802}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1730.023546][T27719] bond93: entered promiscuous mode [ 1730.042389][T27721] bond1591: entered promiscuous mode 21:53:06 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002e80)={0x11, 0x5, &(0x7f0000002c00)=@framed={{}, [@map_idx_val]}, &(0x7f0000002c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002dc0)}, 0x90) [ 1730.054699][T27719] 8021q: adding VLAN 0 to HW filter on device batadv1042 [ 1730.057184][T27719] batadv1042: entered promiscuous mode 21:53:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe01000000000000ea", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:06 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) syz_clone(0x0, &(0x7f0000000f00), 0x0, 0x0, 0x0, &(0x7f0000001080)) [ 1730.072273][T27719] bond93: (slave batadv1042): Enslaving as an active interface with an up link [ 1730.103652][T27725] bond1929: entered promiscuous mode 21:53:06 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@ptr, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3a, 0x0, 0x1}, 0x20) 21:53:06 executing program 3: bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000012c0)={@map, 0xffffffffffffffff, 0xd, 0x18, 0xffffffffffffffff, @prog_id}, 0x20) [ 1730.130696][T27729] bond1592: entered promiscuous mode [ 1730.134776][T27719] bond93 (unregistering): (slave batadv1042): Releasing backup interface [ 1730.179509][T27719] batadv1042: left promiscuous mode [ 1730.188104][T27719] bond93 (unregistering): Released all slaves [ 1730.193197][T27734] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1730.204396][T27734] 8021q: adding VLAN 0 to HW filter on device batadv1738 [ 1730.206645][T27734] batadv1738: entered promiscuous mode [ 1730.209746][T27734] bond1929: (slave batadv1738): Enslaving as an active interface with an up link 21:53:08 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000000)={0x20, 0x2, 0x77, {0x77, 0xd, "7efd10b8afc8a576362e3835a55dd1ee935d1d1faf81719e8945cf3bd694a8b8f33e03a2ccdd58f7cc117269cc3920b8867c1e0e90ced8034620c253489056bbb7dc03e03aebe28a4f2d55bbac31e24e65c05f3d361e392c6b26ed040d9e74b3c59870dd6f9361122629eed4c349dae63f17ab0881"}}, &(0x7f0000000080)={0x0, 0x3, 0xf, @string={0xf, 0x3, "df5e35ea7db12a2693d6243deb"}}, &(0x7f00000000c0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xb}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x81, 0xf7, 0x1, {0x22, 0x5}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x20, 0x10, 0xe7, "dc373175cea40c8e64dd35f0d3b684f6aff65fde40376e15227cc94a7ffacd1c3aedc39cc23c9bbb612b1323577f5729cc07a442cf0df4571ccaf24454684d785902c59ab6a26a31b6b953783140b282b4fc46dd8a2331755e1652f167803cdb5ff6deb645ce2d33a88193578cc2b63e1b73a8bf52bad2a488658f8098f1e209fc73ab7e1a6b8e0737f1eb34784d4dbf1cb69b8f97e24aa1d2530bb4eabf7556b3fd2899d89d59d8739ea9c699c7773445167c12349ab946ff5525cd65004f2e1f66fce9c1488bb8cdf1b59062d86f8b572d528117c90b308ce87b79a1b8486a1e0ee71b74c3c9"}, &(0x7f0000000180)={0x0, 0xa, 0x1}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000380)={0x20, 0x1, 0x3b, "bcc63fdf5c15b1f66d8bcc26f8501d0b7ea3a48af6e92f174f345c6f7dcf97fe94218a0a4089fcf7ed005a168b74103bfd64c57108cf33e50e06d8"}, &(0x7f0000000200)={0x20, 0x3, 0x1, 0x7f}}) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 21:53:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe01000000000000ed", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:08 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @func_proto]}}, 0x0, 0x32}, 0x20) 21:53:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5803}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x806}, 0x0) [ 1732.519748][T27747] bond1930: entered promiscuous mode 21:53:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000017c0)="c1", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) [ 1732.531767][T27748] bond93: entered promiscuous mode [ 1732.542498][T27746] bond1593: entered promiscuous mode [ 1732.546360][T27747] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:08 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000b00)="81", 0x1}], 0x1}, 0x0) 21:53:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe01000000000000f0", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1732.566457][T27747] 8021q: adding VLAN 0 to HW filter on device batadv1739 [ 1732.572288][T27747] batadv1739: entered promiscuous mode [ 1732.577935][T27747] bond1930: (slave batadv1739): Enslaving as an active interface with an up link 21:53:08 executing program 3: r0 = socket(0x11, 0x3, 0x60) sendto$unix(r0, &(0x7f00000000c0)="b1000504600000000000000001000000331c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d036073705ae04be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d026ba8af630037282102000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba0900000008e371a3f8343712051eadb71d89e000040781e4b2fff800ff00", 0xb1, 0x0, 0x0, 0x0) [ 1732.589442][T27748] 8021q: adding VLAN 0 to HW filter on device batadv1043 [ 1732.591853][T27748] batadv1043: entered promiscuous mode [ 1732.594265][T27748] bond93: (slave batadv1043): Enslaving as an active interface with an up link 21:53:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5900}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:08 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000000)={0x0, 0x8}, 0x10) [ 1732.626769][T27759] bond1594: entered promiscuous mode [ 1732.632423][T27761] bond93 (unregistering): (slave batadv1043): Releasing backup interface 21:53:08 executing program 3: r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2202", @ANYRES64], 0x10) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000180)="d2392c68bb8da3e5454c3a7f1815e3e023d694522ed41d9ea6ce724ab37d472e0ec385e32e46b203a913ede049a3e0d546e94d69fa51ef5a0facd749b607ecd19992df3dde9690be9cca5b46f6ea5894a11c3f8bfcde1f2be4b3bc94c91fe814f9cf2903d744d8aa", 0x68}, {&(0x7f0000000f80)="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", 0xb21}], 0x2) 21:53:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe01000000000000f3", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1732.649496][T27761] batadv1043: left promiscuous mode [ 1732.661946][T27761] bond93 (unregistering): Released all slaves 21:53:08 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x3, 0x6) connect$unix(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="7b02011429"], 0x10) write(r0, &(0x7f0000000200)="fc23780000000000000028a8790308fc29b2ddebcc9f2fbec154d6eb", 0x1c) 21:53:08 executing program 3: r0 = msgget$private(0x0, 0x2) msgsnd(r0, &(0x7f00000004c0)=ANY=[@ANYRES32=r0], 0x401, 0x0) msgsnd(r0, &(0x7f00000005c0)=ANY=[@ANYRESDEC], 0x401, 0x0) msgrcv(r0, &(0x7f0000000400)={0x0, ""/137}, 0xaf, 0x0, 0x1800) [ 1732.695673][T27767] bond1931: entered promiscuous mode [ 1732.705571][T27772] bond1595: entered promiscuous mode [ 1732.707230][T27775] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe01000000000000fe", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x900}, 0x0) [ 1732.735399][T27775] 8021q: adding VLAN 0 to HW filter on device batadv1740 [ 1732.737867][T27775] batadv1740: entered promiscuous mode [ 1732.740158][T27775] bond1931: (slave batadv1740): Enslaving as an active interface with an up link 21:53:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5901}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1732.765271][T27781] bond1596: entered promiscuous mode [ 1732.772303][T27783] bond93: entered promiscuous mode 21:53:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1732.790810][T27787] bond1932: entered promiscuous mode [ 1732.800786][T27783] 8021q: adding VLAN 0 to HW filter on device batadv1044 [ 1732.804550][T27783] batadv1044: entered promiscuous mode [ 1732.809821][T27783] bond93: (slave batadv1044): Enslaving as an active interface with an up link [ 1732.812554][T27787] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1732.831845][T27787] 8021q: adding VLAN 0 to HW filter on device batadv1741 [ 1732.835458][T27787] batadv1741: entered promiscuous mode [ 1732.840207][T27787] bond1932: (slave batadv1741): Enslaving as an active interface with an up link 21:53:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5902}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:08 executing program 3: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@random="a730ad713575", @broadcast, @val, {@ipv4}}, 0x0) [ 1732.868962][T27791] bond1597: entered promiscuous mode [ 1732.877830][T27783] bond93 (unregistering): (slave batadv1044): Releasing backup interface 21:53:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:08 executing program 3: r0 = socket(0x2, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7b02011ca2"], 0x10) write(r0, 0x0, 0x0) [ 1732.908875][T27783] batadv1044: left promiscuous mode [ 1732.916633][T27783] bond93 (unregistering): Released all slaves 21:53:08 executing program 3: r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000880)="b1000504600000000000000001000000334513fecea10500fef96ecfff00d3357ae320b37b070000003fbbbfd8616ad2af4900cb6ea9a1cf0000000005ae04be38164991f7c8cf5f762b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d006ba8af6300372800720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba0681c0f76606a98da53408e371a3f8343712051eadb71d89e000040781e4", 0xfffffef4, 0xf8924f354c3d539a, 0x0, 0x0) [ 1732.938012][T27900] bond1933: entered promiscuous mode [ 1732.956431][T27903] bond1598: entered promiscuous mode 21:53:08 executing program 3: r0 = socket(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1023, 0x0, 0x0) [ 1732.962540][T27900] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0xa00}, 0x0) [ 1732.990918][T27900] 8021q: adding VLAN 0 to HW filter on device batadv1742 [ 1732.993698][T27900] batadv1742: entered promiscuous mode 21:53:08 executing program 3: syz_emit_ethernet(0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa48e92f9e71d386dd60524722002c06000000000000000000000000000000000000014e204e2000089078fb56ab13bcd8535ad299d0a29d1e4d24c01f7182"], 0x0) [ 1732.997181][T27900] bond1933: (slave batadv1742): Enslaving as an active interface with an up link [ 1733.014268][T27914] bond1599: entered promiscuous mode 21:53:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5903}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:09 executing program 3: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1733.030421][T27916] bond93: entered promiscuous mode [ 1733.041086][T27916] 8021q: adding VLAN 0 to HW filter on device batadv1045 [ 1733.045892][T27916] batadv1045: entered promiscuous mode [ 1733.048928][T27916] bond93: (slave batadv1045): Enslaving as an active interface with an up link 21:53:09 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003c00)={@ifindex, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 1733.070992][T27923] bond1600: entered promiscuous mode [ 1733.096739][T27924] bond1934: entered promiscuous mode [ 1733.101271][T27916] bond93 (unregistering): (slave batadv1045): Releasing backup interface [ 1733.149055][T27916] batadv1045: left promiscuous mode [ 1733.156835][T27916] bond93 (unregistering): Released all slaves [ 1733.161886][T27924] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1733.173857][T27924] 8021q: adding VLAN 0 to HW filter on device batadv1743 [ 1733.177141][T27924] batadv1743: entered promiscuous mode [ 1733.179947][T27924] bond1934: (slave batadv1743): Enslaving as an active interface with an up link 21:53:11 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000000)={0x20, 0x2, 0x77, {0x77, 0xd, "7efd10b8afc8a576362e3835a55dd1ee935d1d1faf81719e8945cf3bd694a8b8f33e03a2ccdd58f7cc117269cc3920b8867c1e0e90ced8034620c253489056bbb7dc03e03aebe28a4f2d55bbac31e24e65c05f3d361e392c6b26ed040d9e74b3c59870dd6f9361122629eed4c349dae63f17ab0881"}}, &(0x7f0000000080)={0x0, 0x3, 0xf, @string={0xf, 0x3, "df5e35ea7db12a2693d6243deb"}}, &(0x7f00000000c0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xb}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x81, 0xf7, 0x1, {0x22, 0x5}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x20, 0x10, 0xe7, "dc373175cea40c8e64dd35f0d3b684f6aff65fde40376e15227cc94a7ffacd1c3aedc39cc23c9bbb612b1323577f5729cc07a442cf0df4571ccaf24454684d785902c59ab6a26a31b6b953783140b282b4fc46dd8a2331755e1652f167803cdb5ff6deb645ce2d33a88193578cc2b63e1b73a8bf52bad2a488658f8098f1e209fc73ab7e1a6b8e0737f1eb34784d4dbf1cb69b8f97e24aa1d2530bb4eabf7556b3fd2899d89d59d8739ea9c699c7773445167c12349ab946ff5525cd65004f2e1f66fce9c1488bb8cdf1b59062d86f8b572d528117c90b308ce87b79a1b8486a1e0ee71b74c3c9"}, &(0x7f0000000180)={0x0, 0xa, 0x1}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000380)={0x20, 0x1, 0x3b, "bcc63fdf5c15b1f66d8bcc26f8501d0b7ea3a48af6e92f174f345c6f7dcf97fe94218a0a4089fcf7ed005a168b74103bfd64c57108cf33e50e06d8"}, &(0x7f0000000200)={0x20, 0x3, 0x1, 0x7f}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000440)=ANY=[], 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000000)={0x20, 0x2, 0x77, {0x77, 0xd, "7efd10b8afc8a576362e3835a55dd1ee935d1d1faf81719e8945cf3bd694a8b8f33e03a2ccdd58f7cc117269cc3920b8867c1e0e90ced8034620c253489056bbb7dc03e03aebe28a4f2d55bbac31e24e65c05f3d361e392c6b26ed040d9e74b3c59870dd6f9361122629eed4c349dae63f17ab0881"}}, &(0x7f0000000080)={0x0, 0x3, 0xf, @string={0xf, 0x3, "df5e35ea7db12a2693d6243deb"}}, &(0x7f00000000c0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xb}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x81, 0xf7, 0x1, {0x22, 0x5}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x20, 0x10, 0xe7, "dc373175cea40c8e64dd35f0d3b684f6aff65fde40376e15227cc94a7ffacd1c3aedc39cc23c9bbb612b1323577f5729cc07a442cf0df4571ccaf24454684d785902c59ab6a26a31b6b953783140b282b4fc46dd8a2331755e1652f167803cdb5ff6deb645ce2d33a88193578cc2b63e1b73a8bf52bad2a488658f8098f1e209fc73ab7e1a6b8e0737f1eb34784d4dbf1cb69b8f97e24aa1d2530bb4eabf7556b3fd2899d89d59d8739ea9c699c7773445167c12349ab946ff5525cd65004f2e1f66fce9c1488bb8cdf1b59062d86f8b572d528117c90b308ce87b79a1b8486a1e0ee71b74c3c9"}, &(0x7f0000000180)={0x0, 0xa, 0x1}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000380)={0x20, 0x1, 0x3b, "bcc63fdf5c15b1f66d8bcc26f8501d0b7ea3a48af6e92f174f345c6f7dcf97fe94218a0a4089fcf7ed005a168b74103bfd64c57108cf33e50e06d8"}, &(0x7f0000000200)={0x20, 0x3, 0x1, 0x7f}}) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) 21:53:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000003540)=ANY=[], 0x0, 0xed}, 0x20) 21:53:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5a00}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0xb00}, 0x0) [ 1735.544345][T27937] validate_nla: 21 callbacks suppressed [ 1735.544360][T27937] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 21:53:11 executing program 3: r0 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000000), 0x4) 21:53:11 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) setsockopt$sock_int(r1, 0xffff, 0x1002, &(0x7f0000000000)=0x7fffffff, 0x4) [ 1735.582710][T27937] bond1935: entered promiscuous mode [ 1735.586448][T27940] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 21:53:11 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003880)={@map, 0xffffffffffffffff, 0x1b, 0x0, 0x0, @link_id}, 0x20) [ 1735.599469][T27940] bond93: entered promiscuous mode [ 1735.601107][T27943] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1735.613571][T27943] bond1601: entered promiscuous mode [ 1735.615187][T27937] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1735.630533][T27937] 8021q: adding VLAN 0 to HW filter on device batadv1744 [ 1735.633026][T27937] batadv1744: entered promiscuous mode [ 1735.635509][T27937] bond1935: (slave batadv1744): Enslaving as an active interface with an up link 21:53:11 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@cgroup, 0xffffffffffffffff, 0x37}, 0x20) [ 1735.644329][T27940] 8021q: adding VLAN 0 to HW filter on device batadv1046 [ 1735.648084][T27940] batadv1046: entered promiscuous mode 21:53:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5a01}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1735.655274][T27940] bond93: (slave batadv1046): Enslaving as an active interface with an up link [ 1735.662698][T27954] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:53:11 executing program 3: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x48) [ 1735.696907][T27954] bond1602: entered promiscuous mode 21:53:11 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x2, &(0x7f0000000080)=@raw=[@map_fd], &(0x7f00000000c0)='syzkaller\x00', 0x3}, 0x90) [ 1735.714429][T27940] bond93 (unregistering): (slave batadv1046): Releasing backup interface 21:53:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:11 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x0, 0x18}, 0xc) 21:53:11 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00), 0x10}, 0x90) 21:53:11 executing program 3: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) [ 1735.771257][T27940] batadv1046: left promiscuous mode [ 1735.778927][T27940] bond93 (unregistering): Released all slaves [ 1735.788057][T27960] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 21:53:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000940)={'rose0\x00', 0x1}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000380)) [ 1735.816057][T27960] bond1936: entered promiscuous mode [ 1735.818151][T27966] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1735.833692][T27966] bond1603: entered promiscuous mode 21:53:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0xc00}, 0x0) [ 1735.839762][T27967] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1735.858645][T27967] 8021q: adding VLAN 0 to HW filter on device batadv1745 [ 1735.860890][T27967] batadv1745: entered promiscuous mode [ 1735.863647][T27967] bond1936: (slave batadv1745): Enslaving as an active interface with an up link 21:53:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1735.872985][T27982] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 21:53:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5a02}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1735.893886][T27982] bond93: entered promiscuous mode [ 1735.902060][T27987] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1735.913078][T27987] bond1604: entered promiscuous mode [ 1735.921448][T27982] 8021q: adding VLAN 0 to HW filter on device batadv1047 [ 1735.923890][T27982] batadv1047: entered promiscuous mode [ 1735.926281][T27982] bond93: (slave batadv1047): Enslaving as an active interface with an up link 21:53:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1735.934946][T27989] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 21:53:11 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) [ 1735.953592][T27989] bond1937: entered promiscuous mode 21:53:11 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) [ 1735.966229][T27982] bond93 (unregistering): (slave batadv1047): Releasing backup interface [ 1736.018793][T27982] batadv1047: left promiscuous mode [ 1736.026509][T27982] bond93 (unregistering): Released all slaves [ 1736.034118][T27996] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1736.046925][T27996] 8021q: adding VLAN 0 to HW filter on device batadv1746 [ 1736.049580][T27996] batadv1746: entered promiscuous mode [ 1736.052870][T27996] bond1937: (slave batadv1746): Enslaving as an active interface with an up link [ 1736.055513][T27995] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:53:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5a03}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1736.083509][T27995] bond1605: entered promiscuous mode 21:53:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0xd00}, 0x0) 21:53:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1736.121254][T28006] bond1938: entered promiscuous mode [ 1736.133051][T28007] bond93: entered promiscuous mode [ 1736.145485][T28012] bond1606: entered promiscuous mode [ 1736.147303][T28006] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1736.170681][T28006] 8021q: adding VLAN 0 to HW filter on device batadv1747 [ 1736.175168][T28006] batadv1747: entered promiscuous mode [ 1736.178215][T28006] bond1938: (slave batadv1747): Enslaving as an active interface with an up link [ 1736.194922][T28007] 8021q: adding VLAN 0 to HW filter on device batadv1048 [ 1736.198680][T28007] batadv1048: entered promiscuous mode 21:53:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5b00}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1736.206050][T28007] bond93: (slave batadv1048): Enslaving as an active interface with an up link [ 1736.221897][T28016] bond1607: entered promiscuous mode [ 1736.225482][T28017] bond93 (unregistering): (slave batadv1048): Releasing backup interface 21:53:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1736.259073][T28017] batadv1048: left promiscuous mode [ 1736.267366][T28017] bond93 (unregistering): Released all slaves [ 1736.283208][T28019] bond1939: entered promiscuous mode [ 1736.296117][T28023] bond1608: entered promiscuous mode [ 1736.298302][T28024] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1736.311869][T28024] 8021q: adding VLAN 0 to HW filter on device batadv1748 21:53:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1736.318764][T28024] batadv1748: entered promiscuous mode [ 1736.326753][T28024] bond1939: (slave batadv1748): Enslaving as an active interface with an up link 21:53:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0xe00}, 0x0) [ 1736.358468][T28028] bond1609: entered promiscuous mode [ 1736.369859][T28032] bond93: entered promiscuous mode [ 1736.378402][T28032] 8021q: adding VLAN 0 to HW filter on device batadv1049 [ 1736.380706][T28032] batadv1049: entered promiscuous mode [ 1736.383000][T28032] bond93: (slave batadv1049): Enslaving as an active interface with an up link [ 1736.389254][T28032] bond93 (unregistering): (slave batadv1049): Releasing backup interface [ 1736.429360][T28032] batadv1049: left promiscuous mode [ 1736.433561][T28032] bond93 (unregistering): Released all slaves 21:53:14 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090587e3"], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="95bbc3f2dc75663a"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 21:53:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5b01}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0xf00}, 0x0) 21:53:14 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0xf, &(0x7f0000000080)=@ringbuf, &(0x7f0000000140)='syzkaller\x00', 0x6, 0x53, &(0x7f0000000180)=""/83}, 0x90) 21:53:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x26}, 0x20) [ 1738.587229][T28044] bond1610: entered promiscuous mode 21:53:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:14 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x0, 0x0, 0xfff}, 0x48) [ 1738.615391][T28041] bond1940: entered promiscuous mode [ 1738.618429][T28041] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1738.631426][T28041] 8021q: adding VLAN 0 to HW filter on device batadv1749 [ 1738.634151][T28041] batadv1749: entered promiscuous mode [ 1738.636473][T28041] bond1940: (slave batadv1749): Enslaving as an active interface with an up link 21:53:14 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000780)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) 21:53:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5b02}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1738.658947][T28043] bond93: entered promiscuous mode 21:53:14 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@kfunc]}, &(0x7f0000000340)='GPL\x00', 0x8, 0xaf, &(0x7f0000000180)=""/175}, 0x90) [ 1738.672718][T28052] 8021q: adding VLAN 0 to HW filter on device batadv1050 [ 1738.680339][T28052] batadv1050: entered promiscuous mode 21:53:14 executing program 3: r0 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f00000000c0)=0x7fff, 0x4) connect$unix(r0, &(0x7f0000000080)=@abs={0x0, 0x0, 0x1}, 0x8) [ 1738.686103][T28052] bond93: (slave batadv1050): Enslaving as an active interface with an up link 21:53:14 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x7) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000040)) [ 1738.705962][T28051] bond1611: entered promiscuous mode [ 1738.721937][ T6170] usb 1-1: no suitable firmware found! 21:53:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1738.728065][ T6170] usb 1-1: ath9k_htc: Failed to get firmware htc_9271.fw [ 1738.732279][T20957] usb 1-1: ath9k_htc: USB layer deinitialized 21:53:14 executing program 3: r0 = socket(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1738.748709][T28058] bond1941: entered promiscuous mode [ 1738.754680][T28043] bond93 (unregistering): (slave batadv1050): Releasing backup interface 21:53:14 executing program 3: syz_emit_ethernet(0x52, &(0x7f0000000040)={@local, @local, @val, {@ipv4}}, 0x0) 21:53:14 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000040)={@broadcast, @empty, @val, {@ipv4}}, 0x0) 21:53:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xda}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa7}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x60}}, 0x0) 21:53:14 executing program 3: socketpair(0x0, 0x353bfdbbb27e48d8, 0x0, 0x0) [ 1738.799080][T28043] batadv1050: left promiscuous mode [ 1738.806891][T28043] bond93 (unregistering): Released all slaves [ 1738.819786][T28065] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:14 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x5421, 0x0) [ 1738.836897][T28065] 8021q: adding VLAN 0 to HW filter on device batadv1750 [ 1738.839944][T28065] batadv1750: entered promiscuous mode [ 1738.842382][T28065] bond1941: (slave batadv1750): Enslaving as an active interface with an up link 21:53:14 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0x2b, &(0x7f0000000380), 0xc) 21:53:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5b03}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1738.865345][T28069] bond1612: entered promiscuous mode 21:53:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x1100}, 0x0) 21:53:14 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[{0x10}], 0x10}, 0x0) 21:53:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1738.910510][T28086] bond1942: entered promiscuous mode 21:53:14 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r0, 0x29, 0x4c, 0x0, 0x0) [ 1738.918736][T28086] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:14 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000080)="d6", 0x1}], 0x1}, 0x0) [ 1738.935759][T28086] 8021q: adding VLAN 0 to HW filter on device batadv1751 [ 1738.939660][T28086] batadv1751: entered promiscuous mode [ 1738.943336][T28086] bond1942: (slave batadv1751): Enslaving as an active interface with an up link [ 1738.958539][T28088] bond93: entered promiscuous mode 21:53:14 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000240)='GPL\x00', 0x6, 0x77, &(0x7f0000000280)=""/119}, 0x90) 21:53:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5c00}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1738.979886][T28093] bond1613: entered promiscuous mode 21:53:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:14 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x8919, 0x0) [ 1738.997943][T28096] 8021q: adding VLAN 0 to HW filter on device batadv1051 [ 1739.002963][T28096] batadv1051: entered promiscuous mode [ 1739.005599][T28096] bond93: (slave batadv1051): Enslaving as an active interface with an up link 21:53:15 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x891b, 0x0) [ 1739.027728][T28104] bond1943: entered promiscuous mode [ 1739.035191][T28088] bond93 (unregistering): (slave batadv1051): Releasing backup interface [ 1739.069221][T28088] batadv1051: left promiscuous mode [ 1739.074586][T28088] bond93 (unregistering): Released all slaves [ 1739.087322][T20957] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1739.094468][T28106] bond1614: entered promiscuous mode [ 1739.096117][T28104] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1739.108536][T28104] 8021q: adding VLAN 0 to HW filter on device batadv1752 [ 1739.111057][T28104] batadv1752: entered promiscuous mode [ 1739.113432][T28104] bond1943: (slave batadv1752): Enslaving as an active interface with an up link [ 1739.447363][T20957] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1739.450167][T20957] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1739.567768][T20957] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1739.570166][T20957] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1739.572188][T20957] usb 1-1: Manufacturer: syz [ 1739.573376][T20957] usb 1-1: SerialNumber: syz [ 1740.028250][T20957] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 1740.030320][T20957] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input264 [ 1740.637342][ T9022] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1741.577877][ T6170] usb 1-1: USB disconnect, device number 62 [ 1741.597332][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -2 21:53:18 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090587e3"], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="95bbc3f2dc75663a"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 21:53:18 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) 21:53:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5c01}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x1200}, 0x0) [ 1742.104465][T28119] validate_nla: 19 callbacks suppressed [ 1742.104478][T28119] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 21:53:18 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) [ 1742.140356][T28119] bond1944: entered promiscuous mode [ 1742.142012][T28117] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 21:53:18 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x3, &(0x7f00000004c0)=@framed, &(0x7f0000000180)='GPL\x00', 0x7, 0xa, &(0x7f0000000400)=""/10}, 0x90) [ 1742.159869][T28117] bond93: entered promiscuous mode [ 1742.161722][T28122] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:53:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000500)=ANY=[@ANYBLOB="ff00000000000000010000000100000004"]) 21:53:18 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x541b, 0x0) [ 1742.184931][T28122] bond1615: entered promiscuous mode [ 1742.189764][T28119] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:18 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}]}, 0x2c}}, 0x0) 21:53:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1742.222774][T28119] 8021q: adding VLAN 0 to HW filter on device batadv1753 [ 1742.228870][T28119] batadv1753: entered promiscuous mode 21:53:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 1742.232809][T28119] bond1944: (slave batadv1753): Enslaving as an active interface with an up link [ 1742.243550][T28117] 8021q: adding VLAN 0 to HW filter on device batadv1052 [ 1742.245831][T28117] batadv1052: entered promiscuous mode 21:53:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5c02}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1742.263831][T28117] bond93: (slave batadv1052): Enslaving as an active interface with an up link [ 1742.270005][T28139] bond93 (unregistering): (slave batadv1052): Releasing backup interface [ 1742.289486][T28139] batadv1052: left promiscuous mode [ 1742.296923][T28139] bond93 (unregistering): Released all slaves [ 1742.305234][T28141] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1742.319088][T28141] bond1616: entered promiscuous mode [ 1742.320936][T28143] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1742.323640][T28145] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1742.326047][T28143] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 21:53:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1742.365998][T28145] bond1945: entered promiscuous mode 21:53:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x16cd}, 0x0) [ 1742.371493][T28147] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1742.387547][ T6170] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1742.394741][T28147] 8021q: adding VLAN 0 to HW filter on device batadv1754 [ 1742.398090][T28147] batadv1754: entered promiscuous mode [ 1742.400403][T28147] bond1945: (slave batadv1754): Enslaving as an active interface with an up link [ 1742.402869][T28150] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:53:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5c03}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1742.434229][T28150] bond1617: entered promiscuous mode 21:53:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1742.452632][T28152] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1742.462542][T28152] bond93: entered promiscuous mode [ 1742.464290][T28155] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1742.480529][T28155] bond1946: entered promiscuous mode [ 1742.482228][T28158] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1742.497926][T28158] bond1618: entered promiscuous mode [ 1742.499659][T28161] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1742.511803][T28161] 8021q: adding VLAN 0 to HW filter on device batadv1755 [ 1742.514318][T28161] batadv1755: entered promiscuous mode [ 1742.516764][T28161] bond1946: (slave batadv1755): Enslaving as an active interface with an up link 21:53:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1742.523561][T28152] bond93 (unregistering): Released all slaves [ 1742.537712][T28164] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:53:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5d00}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1742.554734][T28164] bond1619: entered promiscuous mode 21:53:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x1800}, 0x0) [ 1742.595914][T28167] bond1947: entered promiscuous mode [ 1742.611005][T28169] bond1620: entered promiscuous mode [ 1742.612700][T28167] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1742.631480][T28167] 8021q: adding VLAN 0 to HW filter on device batadv1756 [ 1742.636949][T28167] batadv1756: entered promiscuous mode [ 1742.641798][T28167] bond1947: (slave batadv1756): Enslaving as an active interface with an up link [ 1742.660568][T28172] bond93: entered promiscuous mode 21:53:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5d01}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1742.680777][T28175] bond1621: entered promiscuous mode 21:53:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1742.688028][T28177] 8021q: adding VLAN 0 to HW filter on device batadv1053 [ 1742.690517][T28177] batadv1053: entered promiscuous mode [ 1742.692818][T28177] bond93: (slave batadv1053): Enslaving as an active interface with an up link [ 1742.710750][T28180] bond1948: entered promiscuous mode [ 1742.716498][T28172] bond93 (unregistering): (slave batadv1053): Releasing backup interface [ 1742.767391][ T6170] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1742.771846][T28172] batadv1053: left promiscuous mode [ 1742.773585][ T6170] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1742.778331][T28172] bond93 (unregistering): Released all slaves [ 1742.799576][T28182] bond1622: entered promiscuous mode [ 1742.801237][T28180] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1742.821856][T28180] 8021q: adding VLAN 0 to HW filter on device batadv1757 [ 1742.825163][T28180] batadv1757: entered promiscuous mode [ 1742.829336][T28180] bond1948: (slave batadv1757): Enslaving as an active interface with an up link 21:53:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x2000}, 0x0) 21:53:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5d02}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1742.861656][T28186] bond1623: entered promiscuous mode 21:53:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1742.884769][T28189] bond1949: entered promiscuous mode [ 1742.887675][ T6170] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1742.895851][ T6170] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1742.902579][ T6170] usb 1-1: Manufacturer: syz [ 1742.905154][ T6170] usb 1-1: SerialNumber: syz [ 1742.912678][T28191] bond93: entered promiscuous mode [ 1742.915207][T28189] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1742.929572][T28189] 8021q: adding VLAN 0 to HW filter on device batadv1758 [ 1742.932117][T28189] batadv1758: entered promiscuous mode [ 1742.934599][T28189] bond1949: (slave batadv1758): Enslaving as an active interface with an up link 21:53:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5d03}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1742.957014][T28195] bond1624: entered promiscuous mode 21:53:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1742.982680][T28196] 8021q: adding VLAN 0 to HW filter on device batadv1054 [ 1742.989856][T28196] batadv1054: entered promiscuous mode [ 1742.993799][T28196] bond93: (slave batadv1054): Enslaving as an active interface with an up link [ 1743.011818][T28200] bond1950: entered promiscuous mode [ 1743.017219][T28191] bond93 (unregistering): (slave batadv1054): Releasing backup interface [ 1743.070238][T28191] batadv1054: left promiscuous mode [ 1743.075695][T28191] bond93 (unregistering): Released all slaves [ 1743.107174][T28202] bond1625: entered promiscuous mode 21:53:19 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0x14, &(0x7f0000000300)={&(0x7f0000000280)='l', 0x1}}, 0x0) recvmmsg(r0, &(0x7f0000005440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 1743.111354][T28200] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1743.142980][T28200] 8021q: adding VLAN 0 to HW filter on device batadv1759 [ 1743.145233][T28200] batadv1759: entered promiscuous mode [ 1743.148230][T28200] bond1950: (slave batadv1759): Enslaving as an active interface with an up link [ 1743.172035][T28208] bond1626: entered promiscuous mode [ 1743.378232][ T6170] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 1743.380287][ T6170] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input265 [ 1745.199952][ T6169] usb 1-1: USB disconnect, device number 63 [ 1745.217285][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -2 21:53:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5e00}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x2100}, 0x0) 21:53:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:21 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090587e3"], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="95bbc3f2dc75663a"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 21:53:21 executing program 3: socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x52, &(0x7f0000000380)={@dev, @local, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "ed4b3a", 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 21:53:21 executing program 3: syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x201}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x11}}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}}, 0x0) [ 1745.760512][T28215] bond1951: entered promiscuous mode [ 1745.780577][T28220] bond93: entered promiscuous mode [ 1745.792311][T28219] bond1627: entered promiscuous mode [ 1745.793780][T28215] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1745.809660][T28215] 8021q: adding VLAN 0 to HW filter on device batadv1760 [ 1745.813455][T28215] batadv1760: entered promiscuous mode [ 1745.815824][T28215] bond1951: (slave batadv1760): Enslaving as an active interface with an up link [ 1745.823409][T28223] vlan0: entered allmulticast mode 21:53:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5e01}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1745.848436][T28220] 8021q: adding VLAN 0 to HW filter on device batadv1055 [ 1745.850741][T28220] batadv1055: entered promiscuous mode [ 1745.852989][T28220] bond93: (slave batadv1055): Enslaving as an active interface with an up link [ 1745.864088][T28227] bond1628: entered promiscuous mode 21:53:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 1745.893695][T28229] bond1952: entered promiscuous mode [ 1745.905721][T28234] bond1629: entered promiscuous mode 21:53:21 executing program 3: r0 = socket(0x1, 0x1, 0x0) sendmsg$qrtr(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="580000000000000003010000400000008be1f53f7c0ef6f6695ced08457ddd687d9440a942d5a488d5260ae4787d809986e27eaa96a4e30bc0f12e6a130b2eeca82cb08a3cb0fe3fda7bc4bdb45236c212d339a40000000060000000000000001801000001010000da6455384ea7d7a2af25d92188c82f5668f22a777fe9f206bdbb6abfb32bf2bee0d50dc8c736e50cf32abc9b9f128c0ee248bfdbe881654f72685183664d32e3ee78a9b259fb5c8d8c8bd92b5b000000e00000000000000001"], 0x2c0}, 0x38) [ 1745.910094][T28230] bond93 (unregistering): (slave batadv1055): Releasing backup interface 21:53:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:21 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x891f, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) [ 1745.949903][T28230] batadv1055: left promiscuous mode 21:53:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000007c0)=@allocspi={0xf8, 0x16, 0x0, 0x0, 0x0, {{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@loopback}, @in6=@private2}}}, 0xfffffdef}}, 0x0) [ 1745.961511][T28230] bond93 (unregistering): Released all slaves [ 1745.970540][T28235] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:21 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8993, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) [ 1745.984584][T28235] 8021q: adding VLAN 0 to HW filter on device batadv1761 [ 1745.987063][T28235] batadv1761: entered promiscuous mode [ 1745.988630][ T23] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1745.992597][T28235] bond1952: (slave batadv1761): Enslaving as an active interface with an up link 21:53:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5e02}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x2400}, 0x0) [ 1746.031371][T28242] bond1630: entered promiscuous mode 21:53:22 executing program 3: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) 21:53:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1746.063917][T28251] bond1953: entered promiscuous mode 21:53:22 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000080)=[@register_looper, @enter_looper], 0x0, 0x0, 0x0}) [ 1746.084559][T28257] bond93: entered promiscuous mode [ 1746.086990][T28251] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1746.091735][T28263] binder: 28262:28263 ERROR: BC_REGISTER_LOOPER called without request [ 1746.097394][T28263] binder: 28262:28263 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 1746.107807][T28251] 8021q: adding VLAN 0 to HW filter on device batadv1762 21:53:22 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40086602, &(0x7f00000001c0)) [ 1746.113514][T28251] batadv1762: entered promiscuous mode [ 1746.118205][T28251] bond1953: (slave batadv1762): Enslaving as an active interface with an up link [ 1746.131365][T28266] binder: 28264:28266 ioctl 40086602 200001c0 returned -22 [ 1746.137856][T28261] bond1631: entered promiscuous mode 21:53:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5e03}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:22 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)) [ 1746.161790][T28257] 8021q: adding VLAN 0 to HW filter on device batadv1056 [ 1746.164113][T28257] batadv1056: entered promiscuous mode [ 1746.166530][T28257] bond93: (slave batadv1056): Enslaving as an active interface with an up link [ 1746.177191][T28267] bond93 (unregistering): (slave batadv1056): Releasing backup interface [ 1746.180317][T28273] binder: BINDER_SET_CONTEXT_MGR already set [ 1746.182085][T28273] binder: 28270:28273 ioctl 4018620d 200001c0 returned -16 21:53:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0}}, 0x0) 21:53:22 executing program 3: r0 = socket(0x2, 0x6, 0x0) bind$isdn_base(r0, 0x0, 0x0) 21:53:22 executing program 3: r0 = socket(0x26, 0x5, 0x0) sendmsg$qrtr(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x38) 21:53:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@flushsa={0x1c, 0x1c, 0x1, 0x70bd25, 0x0, {}, [@proto={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x804) [ 1746.239021][T28267] batadv1056: left promiscuous mode 21:53:22 executing program 3: r0 = socket(0x1, 0x1, 0x0) bind$qrtr(r0, 0x0, 0x0) [ 1746.247713][T28267] bond93 (unregistering): Released all slaves 21:53:22 executing program 3: msgctl$IPC_STAT(0x0, 0x2, &(0x7f000001a7c0)=""/226) [ 1746.279388][T28269] bond1954: entered promiscuous mode 21:53:22 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000ec0), 0x0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) [ 1746.298691][T28272] bond1632: entered promiscuous mode 21:53:22 executing program 3: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000ec0), 0x40, 0x0) 21:53:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1746.320203][T28278] 8021q: adding VLAN 0 to HW filter on device batadv1763 [ 1746.325415][T28278] batadv1763: entered promiscuous mode [ 1746.332236][T28278] bond1954: (slave batadv1763): Enslaving as an active interface with an up link 21:53:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000300)=@newtclass={0x24}, 0x24}}, 0x0) 21:53:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5f00}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1746.367819][T28294] bond1633: entered promiscuous mode [ 1746.377468][ T23] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1746.380283][ T23] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1746.383771][T28299] bond1955: entered promiscuous mode [ 1746.399789][T28299] 8021q: adding VLAN 0 to HW filter on device batadv1764 [ 1746.402128][T28299] batadv1764: entered promiscuous mode [ 1746.404382][T28299] bond1955: (slave batadv1764): Enslaving as an active interface with an up link [ 1746.517467][ T23] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1746.519901][ T23] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1746.522025][ T23] usb 1-1: Manufacturer: syz [ 1746.523197][ T23] usb 1-1: SerialNumber: syz 21:53:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x2500}, 0x0) 21:53:22 executing program 3: fsopen(&(0x7f00000004c0)='bdev\x00', 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) 21:53:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5f01}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:22 executing program 0: r0 = syz_usb_connect(0x6, 0x2d, &(0x7f00000013c0)=ANY=[@ANYRES32], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$cdc_ecm(0x5, 0x8e, &(0x7f0000000b80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x1, 0x1, 0x6, 0x80, 0x20, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x9, 0x24, 0x6, 0x0, 0x0, "859e5484"}, {0x5, 0x24, 0x0, 0xf9d2}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x4, 0x349, 0x1}, [@mdlm_detail={0x34, 0x24, 0x13, 0x20, "2bee7317f55a2819401e1211a5a5238eb045ce35c8c3255c6f03516fbc0d922b288c10d6aa6ca52f00a1bb533f4802f4"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0xf1f3f8445a04b26, 0x8, 0x92, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0xff, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7, 0x6, 0x1}}}}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x300, 0x1, 0x80, 0x0, 0x8, 0x80}, 0x2e, &(0x7f0000000c80)={0x5, 0xf, 0x2e, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0xb4, 0x5, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x5, 0x4, 0x9, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "5be386b54945e053c31e37f82557d127"}]}, 0x5, [{0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x2c01}}, {0x3d, &(0x7f0000000d00)=@string={0x3d, 0x3, "198b2989c097d8e79623e03a0c62784b5cc4e62e8a8e400648d8da53634d8bfd96b4de70a12973eb4dbddf3ab0f2b5bc5ee875999f39382b5e2fde"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x342c}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0xf0ff}}]}) syz_usb_disconnect(r1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, &(0x7f0000000400)={0x20, 0x10, 0xd6, {0xd6, 0x23, "339ad1dd631862629cc00727c8afb9564a896af01aa6f5de6283a7a2d836a2acbc53c2bb020d49df601f16c91767361b2ddf7eb5a2e1be256c01712aa60e02e003bfe7b6a7df13793b2a17d5cf63e322583704ef4be4ccb565e6fde8199c7ce79e306b92c443f45996fb6fa2664ffe2a682a7135a846809e16e23758f93f230d607934a7fe5fa3ce5910b0abdec9dc188859074c400a287118ab8e656df9f7586ce615a314e1af285c457cd6abd5816be17cb718cd455e70c6d19101b2b4cf8f22e4983a95b896c2856a3176aa4c1426a99faee3"}}, &(0x7f0000000500)={0x0, 0x3, 0x5c, @string={0x5c, 0x3, "89ea8b958152c33766a2476904d77ea45e86144e991ab76e12e1d43399d6009b18080289bde3557c39d3fb693572801f2aa52a6b0c7e96eff795ce5dcc0a98f2ab2ef279676132613960420a18b5ae0c57c72222a2d2bbac9649"}}, &(0x7f0000000580)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x18, 0x0, 0x7, "5a748430", "00ea6d9c"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x18, 0x1, 0x81, 0x4, 0x101, 0x3}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000680)={0x40, 0xf, 0x3d, "620e16c7e38addf8f3c8db1e2feacecb6f84f44eea80be2745f08afd59de407a10b27f4d61b0c9f7b4d62bce78c4fbf445921cc6758df4144655b7dd6b"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xb4}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000007c0)={0x20, 0x0, 0x8, {0x100, 0x20, [0xf00]}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0xec}, &(0x7f0000000880)={0x40, 0xb, 0x2, "f887"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000900)={0x40, 0x13, 0x6, @random="3b111dee3f41"}, &(0x7f0000000940)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000980)={0x40, 0x19, 0x2, "ec4b"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0x81}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000000)={0x40, 0x31, 0x35, {0x35, 0x7, "dc2846c357b58d17382f76def2567488f1b3228ac4259701a7bba7bbdcc324226087ca278e537abcfcf108491c913a6ccdb8b0"}}, &(0x7f0000000040)={0x0, 0x3, 0x54, @string={0x54, 0x3, "db664e674f50fbea9f8dbd14d8edce4b332932e036aadc69d755264ef2f54160b4b43d82658e026ed97849c1a2bbb478ce12f1f5c42441b4e1471267f8d130240b1aa5cb2c2f9483e4da3c2f52a53ec3b653"}}, &(0x7f00000000c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0xb, "fc8068f2"}, @local=@item_012={0x0, 0x2, 0x5}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x80, 0x1, {0x22, 0x362}}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="40141a0000000aee739f90b85a4002b7f5bfc77bec00"/32], &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xca}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000280)={0x20, 0x1, 0xcc, "f11570979cdb954c5695da091b3f393cc029032176db99956a605b71cdbfd3b32058a3f63e00b64eafe3df9950f9820e7f3fef02926b6bf4e3337e1c1c7f7151cb78d380185a13664c0db41605aece88fbee4f1ec3263b49be7427cee7e4f10bda47e51ab6ddf171476a9ee231bd546a41ea6565ce4327a80980b570efb2a148d797d1a1be864f9a24b23654fb60457169b3b331fe209cf694820a776a42b0b7c9300165d0bf4dc66d6299528afbcbcde23cd08350bbee0ffcd3f56f0785fc9313794aeea5ff8bb58b096bb2"}, &(0x7f0000000380)={0x20, 0x3, 0x1}}) [ 1746.933181][ T23] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 1746.935241][ T23] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input266 21:53:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000740), 0xc, &(0x7f0000000900)={&(0x7f00000007c0)=@allocspi={0xf8, 0x16, 0x4, 0x0, 0x0, {{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@loopback}, @in6=@private2}}}, 0x33fe0}}, 0x0) [ 1746.976513][T28409] bond1634: entered promiscuous mode 21:53:22 executing program 3: syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x80000001, 0x202000) [ 1746.984231][T28411] bond93: entered promiscuous mode 21:53:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:23 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000940)={0x0, "1df5bbf7076fc8279530a3357ed4f93332863f06f14c0f8ab60fadd20bfaf47542ec1baf7037096edb0086f700"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x4, r0, r1, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000940)={0x0, "1df5bbf7076fc8279530a3357ed4f93332863f06f14c0f8ab60fadd20bfaf47542ec1baf7037096edb0086f700"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x5, r2, r3, 0x0) [ 1747.007090][T28408] bond1956: entered promiscuous mode 21:53:23 executing program 3: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000140)={'macvlan0\x00'}) [ 1747.026963][T28408] 8021q: adding VLAN 0 to HW filter on device batadv1765 [ 1747.036188][T28408] batadv1765: entered promiscuous mode [ 1747.040959][T28408] bond1956: (slave batadv1765): Enslaving as an active interface with an up link [ 1747.049016][ T23] usb 1-1: USB disconnect, device number 64 [ 1747.050189][T28411] 8021q: adding VLAN 0 to HW filter on device batadv1057 [ 1747.052754][T28411] batadv1057: entered promiscuous mode 21:53:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5f02}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1747.064928][T28411] bond93: (slave batadv1057): Enslaving as an active interface with an up link [ 1747.067292][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -2 [ 1747.090706][T28423] bond1635: entered promiscuous mode [ 1747.097538][T28428] bond93 (unregistering): (slave batadv1057): Releasing backup interface 21:53:23 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x0, 0x0, {{0x35, 0x4, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast2, {[@cipso={0x86, 0x65, 0x0, [{0x0, 0x12, "6bc56ab2f71ee324ccdf5c93b4098205"}, {0x0, 0x7, "92e34b875b"}, {0x0, 0x11, "8241d847f2f87f35fb3f4dec2b446c"}, {0x0, 0x10, "a6e97248ff5be0c2a4d941040113"}, {0x0, 0x5, "335f19"}, {0x0, 0xa, "38e55d6f09771ff7"}, {0x0, 0x4, "5cd6"}, {0x0, 0x12, "ead6941f49d20b31df006afb9d6ec122"}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@empty}, {}, {@remote}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast2}]}, @timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {@local}]}]}}}}}) 21:53:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1747.138964][T28428] batadv1057: left promiscuous mode [ 1747.146452][T28428] bond93 (unregistering): Released all slaves [ 1747.150889][T28431] validate_nla: 31 callbacks suppressed [ 1747.150900][T28431] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1747.163722][T28431] bond1957: entered promiscuous mode [ 1747.165326][T28435] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:53:23 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x10}, 0x38) connect$qrtr(r0, &(0x7f0000000000), 0xc) [ 1747.201631][T28435] bond1636: entered promiscuous mode [ 1747.203086][T28436] __nla_validate_parse: 4 callbacks suppressed [ 1747.203097][T28436] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x4000}, 0x0) 21:53:23 executing program 3: request_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0) 21:53:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1747.245844][T28436] 8021q: adding VLAN 0 to HW filter on device batadv1766 [ 1747.252413][T28436] batadv1766: entered promiscuous mode [ 1747.254946][T28436] bond1957: (slave batadv1766): Enslaving as an active interface with an up link 21:53:23 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x2, {0x1, @raw_data="3da2e8504d2817873cb359bc05f54896a4ba155a58952f191326721387ac2af7662dcfe46264abd10e126368b191cd358ffa8a443b90ed149f3d564e4afdd1465866ec3a9edbec2f2454ca3d8f0c3b4f2db99eebfd86fc3537318a5482e1a193709d3d0dc33500530bb46ae30b7e33676375f07a15383f9d33f50c369944f206b7d5898dad5216e289313d5a9392d5b43f123fcc2e2e5ac708e5a06ba3ac1658be3a41b5b175ceb02a2640bdf4aaf3f93fab578aaa53353e0f2b39b7c071f799dc4b21e5e3b0f935"}}) [ 1747.262688][T28444] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 21:53:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5f03}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1747.289346][T28444] bond93: entered promiscuous mode [ 1747.292057][T28446] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:53:23 executing program 3: r0 = socket(0x1, 0x1, 0x0) connect$qrtr(r0, &(0x7f0000000000), 0xc) [ 1747.314240][T28446] bond1637: entered promiscuous mode 21:53:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1747.330751][T28444] 8021q: adding VLAN 0 to HW filter on device batadv1058 [ 1747.338189][T28444] batadv1058: entered promiscuous mode 21:53:23 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8942, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) [ 1747.343412][T28444] bond93: (slave batadv1058): Enslaving as an active interface with an up link [ 1747.349415][T28452] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 21:53:23 executing program 3: r0 = socket(0x1, 0x1, 0x0) sendmsg$qrtr(r0, &(0x7f0000003640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=ANY=[@ANYBLOB="1010000000000000090100000300000003e46fc3f2748b10598e6492b03cbd72875a3d675ab2c68f0fdc7d50e6221db6ffbdf2ab78155138d76f4fa6dde22fc6bd66eaaa241de1a2d1360bb8fe5852bb4d7b231045129fc0c750d5893cd79ae85433b3ce8ce0e063c7a0b1d05a6af5eb06108ca4c069f215402336f65e71d3a42a413993c9122d9bf8062d09fd964e3e5991b819920744029dac49677de9e56b3ccc5aa3ac7e7b40e7d0a645ce216f14588a8fb870e949fba18b9a10ccd9671d1a21744a0d30a1344f543f7b505d58f36e40e3be6c1ec416fd13e208b690e331f0a02ed335018ed8c978c3974f181e581c556be81964b7a18fb0ea0ef1df7215461f4781a8df95cc1d2d822daba68d3dd27a8b9ed5244fbe125a361c45ad56471c15d3b46c68acc06d1c616fe54795c0806ba0e42f5e1b7162860b845f3ede9a91d84fd6d9e461b5648153c5b809f920c85bcc2303afbe3221d9ba891b5169ba89dde8e554117363f1cb30bcf38630a19067cd3a433423fdd4db83dcba8515039ed4883d869cdf3c778a35476caa8733b73782b8fb1879b13ea0f43259cd84eb621d76da4b348ab5705fd41358e133edc109707c8c3555ea505ee119dc9c78bb87b4dc2508ebdf51812d8d4421d27d3c564ddf719765efa9d93bd79499eb10dfd06b61763e0251a7bf99803e4f7683fe5a105af9052b21e3429ff5e9b77b93042045e000fa0f82e0f1a6e9a7441a5d07936d0fb1a365c08c7fffbc0b7ff572c3e0f3319083f225a1b239f44651aa1c88e0ebd745262d1da94abc0200d84db1f6ed5b01ac83b751cda557612c8d44b4ef5c7e6fbc3ea924e8b77a3f26bf50391aa19fcfed4327ad07b248d3d50a81656d9ff8a0da5adf21cdf1565de0f9b0f8b7fbcece27ed09c333da512c69fed73c15c091800153d8d5b6abc730122a9c70459aa1e2a6d6ddba4ae84959f28aab89d166852dbbedeaf4510545e810ebf2c9872174d7fc5d6d981c8b012e3c84d1877ecb14589c8ffa012074b824ebb6f577a77d8fe0a984c400e8af0645d42be82a69718984f47e8204ef540801fd2835e2c0cbb4b40677806c08b3e8e4c30b2790eb8eaffe51ea430b246b8cb7b581ac38782907b81ce2459910e1be7a0c68d7e9e104c3b29dae480922b59541aad635dc0d290ebf0d46b505e6210e545118f6a5ce4c59431b103a58e07e8f65530b0059fa0fa4ff179cd37641153aa8ebcc4d8d0b952c3da51292e5bf61e864188260c8828272ad0d4306a08ee953c542278e7079239bb2fd86087a26bae6d68ba8dd72cdee0f675ae6b58d3a38ff8de81b23bd39a066c5e656940fdb24a2d37444f46612ae4f6b81cc614de51c3502db961b935aefeeaf1a31806b6df80edde8c29ad426535452df396e3678aaaa0090953e292edf0048dcc1fe763e88a3389ea2afd38c87e764d0280838754e291c59de5b22a3c93b31413bcd6abc679502c06083e2189f6ad4063cc9958d51f8d1d987fee88ec509794f82d2ee724cb85314f879b6ba4d663af0a0fff0c8bc35d391215a34361e8308c4386898488616f80ccdacfac6142c5a3d2b931a4a876737aa6d6908ed681f55a37d5d60f540d14527e03f106effc7bcc197373498f9562fb6c39ee9a86d5ab8d43a61b0eb4bec539e90d9845ed4254836b5d7d6207d1b1264d05ccdcf4c5dcca6030a9e45b477254c39553e5ed86f54080d039bc124f777ddf5aa61050b4f2ac661ee2e3f3c7a15fb8c8fd38f28bd169c24f4b445bf2578dcc0feaf94b7d356a6b70e25e140dbbc2a2d0683c3cfc2a71eb97c495e88e196c3492b813a12b4a351ba1d593dbb3639074ca8e34318a1388eaed4eaf5bd96d18692e802ae2cf80764013eea0a4575e488cffea6661ea5b2fe1383ba9d79928d7efd22e22743d25bb973a5ee44d1be33fbc6031affebd2898044a5704c316ada03335d978975127e448136b786d73f1cb856a6e232f5213c37e8176e42b4bbdeaeffca211532b1646a09a15ae92d3b0005eb9fac13b72d67ff894047d1f9a03e6c9536a8d0b8184158710db754b0e36e1e652a57dd734b75687a7a4cb47f5d63f299c660d48b1614669bf3c3fdaa8810f93ebe2de477b95c6dcd017d179201bc3d89fd08f72adbbb9ca59f1b6e2b96b020b932cc9ea41f2d3c5b45485de1cdc4d74eea3f232a95a8feb3c8576d005c56dbb8b03d30897e366fb208037672be12d023df03d232c7bc690f1a41e3049b7f9320660e55037fd841d237b695b4460679c6f82d8667678274fc89c24341b2302f2ed0af690fa7a284c1ac1a3c6dee171257e9a7e33b1c13c54daf61d7e1332b3a87157537f44a18ba0e16c4087fa918a4b73e35a73b6f70be09d68abafb08d0d727b5846e7c6ca2046af969171f01cc225f1fd6ca96c0f19f672188cde8f1ac0b1890fcbcfd12566ceb8b583fbce88ddc876d17c0fcc8eef3c5db708d85c5844431aa35609b47d7ac9ecf8bbc53d93ed39828679b3e308d97cf7dedc804e6a04d170e5bdd1c721170737bc099893efa817d870118fb70c53146f98bfdd5061afd2c8d4818927e9db6014f8a7b65783a4b851ab5497fb444985ee0473ff088b99e60f66f2b904964e05ec35f01087c773f92cffbc52859259050f719f7707071338049bcfd480e853bf046e74b24d8767a5aaf0bc11eb2f95ca11be9d673a7f564ba3a2cbf8573abc29937a51f6eb3b9be238ac4a230fcaf1af8f8200a7e6331e8a35da4544dee6e8441c474034c8886cdfa0addc840d72516a9583e3bd552fd92267a1fc19c20403645d86dba38c3f5df69b01972cf7b56d7a3a3122f7ed9a0e382699f0de13800d60a341d24486473840e53c0671200b2e14df9b9b9f754df2a73443b1ec8a62f16d7174fe66842523583c0df14f55dcb827d2bcf707cf75c5fabd464746371d940ab93ae0a5a38f8b4c48d62d42ea7e539a9c44c350475727909b2fe2d02dc22119adbf8da41adc6439c68ed99074be509807a328b97b99c31725e6ea0e5569581d59855fbc53448bf1ebf6ce792f10d390448b4e8a77ab32e2a98df943f5522ab65a4925c9485781943bd0d5f8641ddbadcdb1aa9baed47da2531e0c721083d8152af8ed55084ddf7e0d0e30bbbcf626b0d0407b6b67db7b59ea973ed70e25ce7c2c494ab29ed64547bcd5e5adeb0e68ee5a6b04fed64fe7df5dee70ebce73665ee67ab91d8977e5821b711da7d51f70aad95ee182d193c9b3992c13dd4b5051cdbb710d9bac3763f4a490ed2deb94696375fe438d8154d6ac57f7cdc264bcab70ed66b8c5809d4e3ccc295613d52659f1b1b2034d0df7d2a5ff9edfe1c065384083481a00e43490ba1704d3d5d9073f18f87a4fcc0e1fbdd51f8450a0c19bb59844013bbc9913a1ab874766911ab87dc7a60962b01df32744d67d7ff6630a70f888ec41961e1c63948e0e25f4983ed808cace483e44d24d80fb3e99ea8ea213b7e3cdc2326322dd9aa20f7092047998d796ca7fe45c1b85d409dce2c1a410b53b1f54f2c8f2cf81264a96b929f693ffd03ab9a07521f511f8fa88ce3ce897380c68bc51e03a7222107b981180a6b012f5d0f712af5097f21b5c50c5ec9ebd538ce22993ba0b4e736a5175a0214facbae7519f2e62bb8569db9690babf21fef8b6ea51a1dfbcef4b61adff14b587d236d5a2105e965f9ec564d6cd077993d2870d33940699844638b7d1f6100ffcfe7a07ec2ee78f4ee6ebd50dd8f16e38da64b08de6e0d3e13167e9d300c3a67d89c398554b190b326f1e5ef1de9d9dbeaeb336f286bf164f993f601b03b06a64b6950d3d4c3c88fd45ad0eb460de43c6b95875c85862530ab90c041fc4cf1e98ef3a2b6b0c874dcc3649f3818c1dc5fb6c86f26cf676c338d81d71dad84601d277a0f9b65def6a7425a23ab443eabe7c115a4a295082f8dca3895dd9d071324ab44505be134800b4b814752e780a32048ed53dfece4c1afd20160f299d0c72e2b56e33dd6d94fb9586985e01904cbe570e28e7309c41cd3900cd26a17c3e95cd8add5311ef50782f94be99502edae338fe211d406b2de81e3510e0e5e474dc89048d605c2516d82d5df9d1d3f5c36b504ecc2578e9ba83c6b2eb8065faf6ecf2924deabed1646228c7ddcfd1a0d3386318fab10f0e00a9a870abda8847e262b418a074e8f5d3cd1e124f3f0efaf570cf9d072855575d20cd9e0fc4139846b75b05c240e008147062b88e2b88606590aa5e777e3ca6c920516dd1d14ae82d288e79243cfbdfa684c6502cf3ef4acea91c436029d5f7f3fd86e7ba3038da4872ed442a1518618ed7db1a34848c63bb0fd46e7c38c38045ab338252c684af1a1eabad567bf86ea2a82672f41fdc0c5ea08397e08d98c03687cb26bce2f4baca434246ee5390e11173c25b09c7af6fb9173cf597360f73df9afa51b53a3161bf81a35be40204530a8e7000507d31abd10399ec917f89efef222690b85b57841713180b261dc4a75c7609308e721120aa28ebfb49284c50a1215164298bcef6666b0a99fe9cc15da460487de572a78fb186454b15d408ff9f580356ca21252f0ae26f49a4e3474ce6ac17a9630d9d15067f81bfb64037c0ec05a1daa2612c4c16e32a7df6dcc945a1fb8f6fbcc3afd885ebd741a026c3bae5e62df5c047f7afb5336fa150ad760280f14323e67e91172e0f2c45c9e26d8ab49980e72e44495b8253ef1e89d7455ace01d17d85d442a275057b229fc3626f31eb8043f4cef8221e21282481a6db782aaaad7d516126ef6936549c9117a423d9ee274ba8d3a820a1f3db81fb4549578484431ed6e3b24ba3b4008899e2c0507df7ae961f8a0a3e2eb3c8f8206edd1eeb74a8befec9fba4326e2140e266aa06749586d6573ffe4fb667b3b94e6b179cd8d0c6100d89baa9e99f593ba73ef7ff35b2a5695edb671c6c4a8ad2bb61f91fc7bca60d38ae16f88a5b212b6f2ddd01c0bd6ef329d8f883f1f901cfaa65119c3304cd8f9a84020f748a0c152ef5eac9ff4a7c2b4a450b924b39f477b6892c9777f4086d34cf42fd1084c066c9b5f4d3334e8f42f80a16d7ce7904fe96a9fa81fb27521f02a6b4befc2ca2669cb67e0e8b2f7fb34ec0cc6fcaf37eaf5f9b9318f3f84bad37d419c6cb2a74885e579edf75a18267ad9a3b6f62568a8eb1b97932fba4f86bc025475320765247baced58f02b816a5d56b82cc5a4f5166f492517308a47aa2b5eb8668eea25bb985b92f13a6a69b5591f384b5e784b51f948347cb8a36e080ae06afa766f36d4aff5ddee737c3227b4a3efb6a2b9cfb4d4dbb92027db5c305d68087482006372c424551d831fe5d6e5880322e1ba266574923c52987d9edfd753af9a2acdde45af7e6b5c2bd8478f70b597a786a8f13fab1f0538f3a37c861ade1d4cd1890850a5bbf78bbef8b5ac28e59ee4ddf8fce755a10f2db7f4af7f0302cb6a1bd2eb9e0966b0fbf5cc9d6c240851f1d574038cb3ece7ad687acf1f4702ef2dba216aaa933560c200a1a9f2c76fea9424ba2351ec6234688ff11fe0be53f73defa2adbc535d46a1fc0b8d578e64ea1597e9eac44712f343dcc7c8c16a01980c9a71f94ec2ef029a390e4359c7a280e07d1d571f13a66f1835e88e86f71ae0da48a06d6dd50512159be5413fcc6c8d2fdec4c21562748b711a9b1728964462741ab3285689048b5537b7ad2095f0c7a9f2e3c1585200e1c1ffa2c4bd28fe0cea5fbe90e579b2f644d5ceabd5c285424749c3ce358bdf33a39bf0eb0452d738ab01a509732b61f838ea373a47680c6036417b3cac"], 0x3270}, 0x38) [ 1747.374249][T28452] bond1958: entered promiscuous mode [ 1747.379098][T28456] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:53:23 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1000, 0x1, 0x0, "82dd6958c649d35214a229198e022a4b3b4b6b38e0bbdefa17f1a31a2fceb345"}) [ 1747.408895][T28456] bond1638: entered promiscuous mode 21:53:23 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x0, 0x0, {0x5, @pix_mp}}) 21:53:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1747.428766][T28444] bond93 (unregistering): (slave batadv1058): Releasing backup interface 21:53:23 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}, 0x90) 21:53:23 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) [ 1747.459525][T28444] batadv1058: left promiscuous mode 21:53:23 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000ec0), 0x0, 0x0) process_madvise(r0, 0x0, 0x0, 0x0, 0x0) [ 1747.468775][T28444] bond93 (unregistering): Released all slaves [ 1747.481019][T28460] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1747.493272][T28460] 8021q: adding VLAN 0 to HW filter on device batadv1767 21:53:23 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$can_j1939(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={0x0}}, 0x0) [ 1747.495759][T28460] batadv1767: entered promiscuous mode [ 1747.499447][T28460] bond1958: (slave batadv1767): Enslaving as an active interface with an up link [ 1747.502028][T28471] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:53:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6000}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1747.517396][ T23] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1747.522196][T28471] bond1639: entered promiscuous mode 21:53:23 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00'}, 0x18) 21:53:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x4788}, 0x0) 21:53:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1747.548158][T28483] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 21:53:23 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffffc, 0x8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x3}) [ 1747.563131][T28489] binder: 28488:28489 ioctl 4018620d 0 returned -22 [ 1747.565874][T28489] binder: 28488:28489 ioctl 4018620d 0 returned -22 21:53:23 executing program 3: sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f000001a780)={0x0, 0x0, 0x0}, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f000001a7c0)=""/226) [ 1747.578737][T28483] bond1959: entered promiscuous mode [ 1747.582596][T28487] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1747.609338][T28487] bond1640: entered promiscuous mode [ 1747.610842][T28486] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1747.629089][T28486] bond93: entered promiscuous mode [ 1747.630482][T28483] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1747.640990][T28483] 8021q: adding VLAN 0 to HW filter on device batadv1768 [ 1747.643385][T28483] batadv1768: entered promiscuous mode [ 1747.645564][T28483] bond1959: (slave batadv1768): Enslaving as an active interface with an up link [ 1747.653016][T28495] 8021q: adding VLAN 0 to HW filter on device batadv1059 [ 1747.655256][T28495] batadv1059: entered promiscuous mode [ 1747.657786][T28495] bond93: (slave batadv1059): Enslaving as an active interface with an up link [ 1747.672095][T28486] bond93 (unregistering): (slave batadv1059): Releasing backup interface [ 1747.709014][T28486] batadv1059: left promiscuous mode [ 1747.716847][T28486] bond93 (unregistering): Released all slaves [ 1747.757455][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 1747.877456][ T23] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 17190, setting to 1024 [ 1747.880546][ T23] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1747.883143][ T23] usb 1-1: config 1 interface 0 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1747.886378][ T23] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1748.048114][ T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1748.050548][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.052581][ T23] usb 1-1: Product: 㐬 [ 1748.053649][ T23] usb 1-1: Manufacturer: 謙褩韀⎖㫠戌䭸쑜⻦躊ـ叚䵣ﶋ뒖烞⦡뵍㫟벵饵㦟⬸⽞ [ 1748.056586][ T23] usb 1-1: SerialNumber: ࠠ [ 1748.080030][T28413] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1748.082216][T28413] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1748.387672][ T23] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 1748.392299][ T23] usb 1-1: USB disconnect, device number 65 21:53:25 executing program 0: r0 = syz_usb_connect(0x6, 0x2d, &(0x7f00000013c0)=ANY=[@ANYRES32], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$cdc_ecm(0x5, 0x8e, &(0x7f0000000b80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x1, 0x1, 0x6, 0x80, 0x20, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x9, 0x24, 0x6, 0x0, 0x0, "859e5484"}, {0x5, 0x24, 0x0, 0xf9d2}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x4, 0x349, 0x1}, [@mdlm_detail={0x34, 0x24, 0x13, 0x20, "2bee7317f55a2819401e1211a5a5238eb045ce35c8c3255c6f03516fbc0d922b288c10d6aa6ca52f00a1bb533f4802f4"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0xf1f3f8445a04b26, 0x8, 0x92, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0xff, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7, 0x6, 0x1}}}}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x300, 0x1, 0x80, 0x0, 0x8, 0x80}, 0x2e, &(0x7f0000000c80)={0x5, 0xf, 0x2e, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0xb4, 0x5, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x5, 0x4, 0x9, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "5be386b54945e053c31e37f82557d127"}]}, 0x5, [{0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x2c01}}, {0x3d, &(0x7f0000000d00)=@string={0x3d, 0x3, "198b2989c097d8e79623e03a0c62784b5cc4e62e8a8e400648d8da53634d8bfd96b4de70a12973eb4dbddf3ab0f2b5bc5ee875999f39382b5e2fde"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x342c}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0xf0ff}}]}) syz_usb_disconnect(r1) (async) syz_usb_disconnect(r1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, &(0x7f0000000400)={0x20, 0x10, 0xd6, {0xd6, 0x23, "339ad1dd631862629cc00727c8afb9564a896af01aa6f5de6283a7a2d836a2acbc53c2bb020d49df601f16c91767361b2ddf7eb5a2e1be256c01712aa60e02e003bfe7b6a7df13793b2a17d5cf63e322583704ef4be4ccb565e6fde8199c7ce79e306b92c443f45996fb6fa2664ffe2a682a7135a846809e16e23758f93f230d607934a7fe5fa3ce5910b0abdec9dc188859074c400a287118ab8e656df9f7586ce615a314e1af285c457cd6abd5816be17cb718cd455e70c6d19101b2b4cf8f22e4983a95b896c2856a3176aa4c1426a99faee3"}}, &(0x7f0000000500)={0x0, 0x3, 0x5c, @string={0x5c, 0x3, "89ea8b958152c33766a2476904d77ea45e86144e991ab76e12e1d43399d6009b18080289bde3557c39d3fb693572801f2aa52a6b0c7e96eff795ce5dcc0a98f2ab2ef279676132613960420a18b5ae0c57c72222a2d2bbac9649"}}, &(0x7f0000000580)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x18, 0x0, 0x7, "5a748430", "00ea6d9c"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x18, 0x1, 0x81, 0x4, 0x101, 0x3}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000680)={0x40, 0xf, 0x3d, "620e16c7e38addf8f3c8db1e2feacecb6f84f44eea80be2745f08afd59de407a10b27f4d61b0c9f7b4d62bce78c4fbf445921cc6758df4144655b7dd6b"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xb4}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000007c0)={0x20, 0x0, 0x8, {0x100, 0x20, [0xf00]}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0xec}, &(0x7f0000000880)={0x40, 0xb, 0x2, "f887"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000900)={0x40, 0x13, 0x6, @random="3b111dee3f41"}, &(0x7f0000000940)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000980)={0x40, 0x19, 0x2, "ec4b"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0x81}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x4}}) (async) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, &(0x7f0000000400)={0x20, 0x10, 0xd6, {0xd6, 0x23, "339ad1dd631862629cc00727c8afb9564a896af01aa6f5de6283a7a2d836a2acbc53c2bb020d49df601f16c91767361b2ddf7eb5a2e1be256c01712aa60e02e003bfe7b6a7df13793b2a17d5cf63e322583704ef4be4ccb565e6fde8199c7ce79e306b92c443f45996fb6fa2664ffe2a682a7135a846809e16e23758f93f230d607934a7fe5fa3ce5910b0abdec9dc188859074c400a287118ab8e656df9f7586ce615a314e1af285c457cd6abd5816be17cb718cd455e70c6d19101b2b4cf8f22e4983a95b896c2856a3176aa4c1426a99faee3"}}, &(0x7f0000000500)={0x0, 0x3, 0x5c, @string={0x5c, 0x3, "89ea8b958152c33766a2476904d77ea45e86144e991ab76e12e1d43399d6009b18080289bde3557c39d3fb693572801f2aa52a6b0c7e96eff795ce5dcc0a98f2ab2ef279676132613960420a18b5ae0c57c72222a2d2bbac9649"}}, &(0x7f0000000580)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x18, 0x0, 0x7, "5a748430", "00ea6d9c"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x18, 0x1, 0x81, 0x4, 0x101, 0x3}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000680)={0x40, 0xf, 0x3d, "620e16c7e38addf8f3c8db1e2feacecb6f84f44eea80be2745f08afd59de407a10b27f4d61b0c9f7b4d62bce78c4fbf445921cc6758df4144655b7dd6b"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xb4}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000007c0)={0x20, 0x0, 0x8, {0x100, 0x20, [0xf00]}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0xec}, &(0x7f0000000880)={0x40, 0xb, 0x2, "f887"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000900)={0x40, 0x13, 0x6, @random="3b111dee3f41"}, &(0x7f0000000940)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000980)={0x40, 0x19, 0x2, "ec4b"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0x81}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000000)={0x40, 0x31, 0x35, {0x35, 0x7, "dc2846c357b58d17382f76def2567488f1b3228ac4259701a7bba7bbdcc324226087ca278e537abcfcf108491c913a6ccdb8b0"}}, &(0x7f0000000040)={0x0, 0x3, 0x54, @string={0x54, 0x3, "db664e674f50fbea9f8dbd14d8edce4b332932e036aadc69d755264ef2f54160b4b43d82658e026ed97849c1a2bbb478ce12f1f5c42441b4e1471267f8d130240b1aa5cb2c2f9483e4da3c2f52a53ec3b653"}}, &(0x7f00000000c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0xb, "fc8068f2"}, @local=@item_012={0x0, 0x2, 0x5}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x80, 0x1, {0x22, 0x362}}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="40141a0000000aee739f90b85a4002b7f5bfc77bec00"/32], &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xca}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000280)={0x20, 0x1, 0xcc, "f11570979cdb954c5695da091b3f393cc029032176db99956a605b71cdbfd3b32058a3f63e00b64eafe3df9950f9820e7f3fef02926b6bf4e3337e1c1c7f7151cb78d380185a13664c0db41605aece88fbee4f1ec3263b49be7427cee7e4f10bda47e51ab6ddf171476a9ee231bd546a41ea6565ce4327a80980b570efb2a148d797d1a1be864f9a24b23654fb60457169b3b331fe209cf694820a776a42b0b7c9300165d0bf4dc66d6299528afbcbcde23cd08350bbee0ffcd3f56f0785fc9313794aeea5ff8bb58b096bb2"}, &(0x7f0000000380)={0x20, 0x3, 0x1}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000000)={0x40, 0x31, 0x35, {0x35, 0x7, "dc2846c357b58d17382f76def2567488f1b3228ac4259701a7bba7bbdcc324226087ca278e537abcfcf108491c913a6ccdb8b0"}}, &(0x7f0000000040)={0x0, 0x3, 0x54, @string={0x54, 0x3, "db664e674f50fbea9f8dbd14d8edce4b332932e036aadc69d755264ef2f54160b4b43d82658e026ed97849c1a2bbb478ce12f1f5c42441b4e1471267f8d130240b1aa5cb2c2f9483e4da3c2f52a53ec3b653"}}, &(0x7f00000000c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0xb, "fc8068f2"}, @local=@item_012={0x0, 0x2, 0x5}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x80, 0x1, {0x22, 0x362}}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="40141a0000000aee739f90b85a4002b7f5bfc77bec00"/32], &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xca}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000280)={0x20, 0x1, 0xcc, "f11570979cdb954c5695da091b3f393cc029032176db99956a605b71cdbfd3b32058a3f63e00b64eafe3df9950f9820e7f3fef02926b6bf4e3337e1c1c7f7151cb78d380185a13664c0db41605aece88fbee4f1ec3263b49be7427cee7e4f10bda47e51ab6ddf171476a9ee231bd546a41ea6565ce4327a80980b570efb2a148d797d1a1be864f9a24b23654fb60457169b3b331fe209cf694820a776a42b0b7c9300165d0bf4dc66d6299528afbcbcde23cd08350bbee0ffcd3f56f0785fc9313794aeea5ff8bb58b096bb2"}, &(0x7f0000000380)={0x20, 0x3, 0x1}}) 21:53:25 executing program 3: pipe2$watch_queue(&(0x7f0000000140), 0x80) r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000940)={0x0, "1df5bbf7076fc8279530a3357ed4f93332863f06f14c0f8ab60fadd20bfaf47542ec1baf7037096edb0086f700"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x4, r0, r1, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000940)={0x0, "1df5bbf7076fc8279530a3357ed4f93332863f06f14c0f8ab60fadd20bfaf47542ec1baf7037096edb0086f700"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x4, r2, r3, 0x0) 21:53:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6001}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x4800}, 0x0) 21:53:25 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x10}, 0x38) [ 1749.053682][T28502] bond1641: entered promiscuous mode 21:53:25 executing program 3: r0 = socket(0x26, 0x5, 0x0) getpeername$qrtr(r0, 0x0, 0x0) 21:53:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1749.076730][T28504] bond93: entered promiscuous mode [ 1749.093285][T28504] 8021q: adding VLAN 0 to HW filter on device batadv1060 [ 1749.095628][T28504] batadv1060: entered promiscuous mode [ 1749.099054][T28504] bond93: (slave batadv1060): Enslaving as an active interface with an up link 21:53:25 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) [ 1749.121627][T28505] bond1960: entered promiscuous mode 21:53:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000004800)={0x0, 0x0, &(0x7f00000047c0)={0x0}}, 0x1) [ 1749.123571][T28513] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:25 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@flushsa={0x1c, 0x1c, 0x1, 0x0, 0x0, {}, [@proto={0x5}]}, 0x1c}}, 0x804) [ 1749.144869][T28513] 8021q: adding VLAN 0 to HW filter on device batadv1769 [ 1749.147078][T28513] batadv1769: entered promiscuous mode [ 1749.149742][T28513] bond1960: (slave batadv1769): Enslaving as an active interface with an up link 21:53:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6002}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1749.171093][T28522] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1749.182877][T28514] bond1642: entered promiscuous mode [ 1749.195755][T28504] bond93 (unregistering): (slave batadv1060): Releasing backup interface 21:53:25 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8948, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) 21:53:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1749.240057][T28504] batadv1060: left promiscuous mode [ 1749.248371][T28504] bond93 (unregistering): Released all slaves [ 1749.269935][T28524] bond1961: entered promiscuous mode 21:53:25 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4000180000000000, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xfffffff9}) [ 1749.290215][T28528] bond1643: entered promiscuous mode [ 1749.294117][T28530] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1749.317904][ T23] usb 1-1: new high-speed USB device number 66 using dummy_hcd 21:53:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x4888}, 0x0) [ 1749.337208][T28530] 8021q: adding VLAN 0 to HW filter on device batadv1770 21:53:25 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000002740)) [ 1749.345649][T28530] batadv1770: entered promiscuous mode [ 1749.349087][T28530] bond1961: (slave batadv1770): Enslaving as an active interface with an up link 21:53:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6003}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1749.375418][T28537] bond1644: entered promiscuous mode [ 1749.391787][T28535] bond93: entered promiscuous mode 21:53:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1749.414740][T28543] bond1962: entered promiscuous mode 21:53:25 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002700)=[{}], &(0x7f0000002740)=0x8) [ 1749.429646][T28535] 8021q: adding VLAN 0 to HW filter on device batadv1061 [ 1749.433233][T28535] batadv1061: entered promiscuous mode [ 1749.436092][T28535] bond93: (slave batadv1061): Enslaving as an active interface with an up link [ 1749.452321][T28546] bond1645: entered promiscuous mode [ 1749.454018][T28543] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1749.465863][T28543] 8021q: adding VLAN 0 to HW filter on device batadv1771 [ 1749.470757][T28543] batadv1771: entered promiscuous mode [ 1749.474102][T28543] bond1962: (slave batadv1771): Enslaving as an active interface with an up link [ 1749.480150][T28535] bond93 (unregistering): (slave batadv1061): Releasing backup interface 21:53:25 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) 21:53:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6100}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1749.510006][T28535] batadv1061: left promiscuous mode [ 1749.513718][T28535] bond93 (unregistering): Released all slaves 21:53:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe09, 0x0, 0x0, r2}) [ 1749.544755][T28551] bond1646: entered promiscuous mode 21:53:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:25 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000007c0)=@allocspi={0x10, 0x16, 0x0, 0x0, 0x0, {{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@loopback}, @in6=@private2}}}, 0xf8}}, 0x0) [ 1749.574360][T28555] bond1963: entered promiscuous mode [ 1749.579478][T28559] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x4c00}, 0x0) 21:53:25 executing program 3: msgget(0x0, 0x659) [ 1749.598905][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 1749.599603][T28559] 8021q: adding VLAN 0 to HW filter on device batadv1772 [ 1749.603722][T28559] batadv1772: entered promiscuous mode [ 1749.606138][T28559] bond1963: (slave batadv1772): Enslaving as an active interface with an up link 21:53:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6101}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1749.621060][T28563] bond1647: entered promiscuous mode 21:53:25 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8971, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) [ 1749.640342][T28567] bond93: entered promiscuous mode 21:53:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1749.669872][T28573] bond1964: entered promiscuous mode [ 1749.679755][T28567] 8021q: adding VLAN 0 to HW filter on device batadv1062 [ 1749.682390][T28567] batadv1062: entered promiscuous mode [ 1749.685681][T28567] bond93: (slave batadv1062): Enslaving as an active interface with an up link [ 1749.707511][T28578] bond1648: entered promiscuous mode [ 1749.709162][T28573] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1749.718575][ T23] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 17190, setting to 1024 [ 1749.721537][ T23] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1749.724078][ T23] usb 1-1: config 1 interface 0 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1749.727185][ T23] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1749.731179][T28573] 8021q: adding VLAN 0 to HW filter on device batadv1773 [ 1749.733586][T28573] batadv1773: entered promiscuous mode [ 1749.736048][T28573] bond1964: (slave batadv1773): Enslaving as an active interface with an up link [ 1749.741133][T28567] bond93 (unregistering): (slave batadv1062): Releasing backup interface [ 1749.778924][T28567] batadv1062: left promiscuous mode [ 1749.783054][T28567] bond93 (unregistering): Released all slaves [ 1749.928131][ T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1749.930401][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.932326][ T23] usb 1-1: Product: 㐬 [ 1749.933313][ T23] usb 1-1: Manufacturer: 謙褩韀⎖㫠戌䭸쑜⻦躊ـ叚䵣ﶋ뒖烞⦡뵍㫟벵饵㦟⬸⽞ [ 1749.936252][ T23] usb 1-1: SerialNumber: ࠠ [ 1749.957505][T28500] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1749.959665][T28500] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1750.268333][ T23] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 1750.274007][ T23] usb 1-1: USB disconnect, device number 66 21:53:26 executing program 0: syz_usb_connect(0x6, 0x2d, &(0x7f00000013c0)=ANY=[@ANYRES32], 0x0) (async) r0 = syz_usb_connect(0x6, 0x2d, &(0x7f00000013c0)=ANY=[@ANYRES32], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x8e, &(0x7f0000000b80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x1, 0x1, 0x6, 0x80, 0x20, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x9, 0x24, 0x6, 0x0, 0x0, "859e5484"}, {0x5, 0x24, 0x0, 0xf9d2}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x4, 0x349, 0x1}, [@mdlm_detail={0x34, 0x24, 0x13, 0x20, "2bee7317f55a2819401e1211a5a5238eb045ce35c8c3255c6f03516fbc0d922b288c10d6aa6ca52f00a1bb533f4802f4"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0xf1f3f8445a04b26, 0x8, 0x92, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0xff, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7, 0x6, 0x1}}}}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x300, 0x1, 0x80, 0x0, 0x8, 0x80}, 0x2e, &(0x7f0000000c80)={0x5, 0xf, 0x2e, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0xb4, 0x5, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x5, 0x4, 0x9, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "5be386b54945e053c31e37f82557d127"}]}, 0x5, [{0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x2c01}}, {0x3d, &(0x7f0000000d00)=@string={0x3d, 0x3, "198b2989c097d8e79623e03a0c62784b5cc4e62e8a8e400648d8da53634d8bfd96b4de70a12973eb4dbddf3ab0f2b5bc5ee875999f39382b5e2fde"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x342c}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0xf0ff}}]}) (async) r1 = syz_usb_connect$cdc_ecm(0x5, 0x8e, &(0x7f0000000b80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x1, 0x1, 0x6, 0x80, 0x20, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x9, 0x24, 0x6, 0x0, 0x0, "859e5484"}, {0x5, 0x24, 0x0, 0xf9d2}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x4, 0x349, 0x1}, [@mdlm_detail={0x34, 0x24, 0x13, 0x20, "2bee7317f55a2819401e1211a5a5238eb045ce35c8c3255c6f03516fbc0d922b288c10d6aa6ca52f00a1bb533f4802f4"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0xf1f3f8445a04b26, 0x8, 0x92, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0xff, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7, 0x6, 0x1}}}}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x300, 0x1, 0x80, 0x0, 0x8, 0x80}, 0x2e, &(0x7f0000000c80)={0x5, 0xf, 0x2e, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0xb4, 0x5, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x5, 0x4, 0x9, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "5be386b54945e053c31e37f82557d127"}]}, 0x5, [{0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x2c01}}, {0x3d, &(0x7f0000000d00)=@string={0x3d, 0x3, "198b2989c097d8e79623e03a0c62784b5cc4e62e8a8e400648d8da53634d8bfd96b4de70a12973eb4dbddf3ab0f2b5bc5ee875999f39382b5e2fde"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x342c}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0xf0ff}}]}) syz_usb_disconnect(r1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, &(0x7f0000000400)={0x20, 0x10, 0xd6, {0xd6, 0x23, "339ad1dd631862629cc00727c8afb9564a896af01aa6f5de6283a7a2d836a2acbc53c2bb020d49df601f16c91767361b2ddf7eb5a2e1be256c01712aa60e02e003bfe7b6a7df13793b2a17d5cf63e322583704ef4be4ccb565e6fde8199c7ce79e306b92c443f45996fb6fa2664ffe2a682a7135a846809e16e23758f93f230d607934a7fe5fa3ce5910b0abdec9dc188859074c400a287118ab8e656df9f7586ce615a314e1af285c457cd6abd5816be17cb718cd455e70c6d19101b2b4cf8f22e4983a95b896c2856a3176aa4c1426a99faee3"}}, &(0x7f0000000500)={0x0, 0x3, 0x5c, @string={0x5c, 0x3, "89ea8b958152c33766a2476904d77ea45e86144e991ab76e12e1d43399d6009b18080289bde3557c39d3fb693572801f2aa52a6b0c7e96eff795ce5dcc0a98f2ab2ef279676132613960420a18b5ae0c57c72222a2d2bbac9649"}}, &(0x7f0000000580)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x18, 0x0, 0x7, "5a748430", "00ea6d9c"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x18, 0x1, 0x81, 0x4, 0x101, 0x3}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000680)={0x40, 0xf, 0x3d, "620e16c7e38addf8f3c8db1e2feacecb6f84f44eea80be2745f08afd59de407a10b27f4d61b0c9f7b4d62bce78c4fbf445921cc6758df4144655b7dd6b"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xb4}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000007c0)={0x20, 0x0, 0x8, {0x100, 0x20, [0xf00]}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0xec}, &(0x7f0000000880)={0x40, 0xb, 0x2, "f887"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000900)={0x40, 0x13, 0x6, @random="3b111dee3f41"}, &(0x7f0000000940)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000980)={0x40, 0x19, 0x2, "ec4b"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0x81}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x4}}) (async) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, &(0x7f0000000400)={0x20, 0x10, 0xd6, {0xd6, 0x23, "339ad1dd631862629cc00727c8afb9564a896af01aa6f5de6283a7a2d836a2acbc53c2bb020d49df601f16c91767361b2ddf7eb5a2e1be256c01712aa60e02e003bfe7b6a7df13793b2a17d5cf63e322583704ef4be4ccb565e6fde8199c7ce79e306b92c443f45996fb6fa2664ffe2a682a7135a846809e16e23758f93f230d607934a7fe5fa3ce5910b0abdec9dc188859074c400a287118ab8e656df9f7586ce615a314e1af285c457cd6abd5816be17cb718cd455e70c6d19101b2b4cf8f22e4983a95b896c2856a3176aa4c1426a99faee3"}}, &(0x7f0000000500)={0x0, 0x3, 0x5c, @string={0x5c, 0x3, "89ea8b958152c33766a2476904d77ea45e86144e991ab76e12e1d43399d6009b18080289bde3557c39d3fb693572801f2aa52a6b0c7e96eff795ce5dcc0a98f2ab2ef279676132613960420a18b5ae0c57c72222a2d2bbac9649"}}, &(0x7f0000000580)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x18, 0x0, 0x7, "5a748430", "00ea6d9c"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x18, 0x1, 0x81, 0x4, 0x101, 0x3}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000680)={0x40, 0xf, 0x3d, "620e16c7e38addf8f3c8db1e2feacecb6f84f44eea80be2745f08afd59de407a10b27f4d61b0c9f7b4d62bce78c4fbf445921cc6758df4144655b7dd6b"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xb4}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000007c0)={0x20, 0x0, 0x8, {0x100, 0x20, [0xf00]}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0xec}, &(0x7f0000000880)={0x40, 0xb, 0x2, "f887"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000900)={0x40, 0x13, 0x6, @random="3b111dee3f41"}, &(0x7f0000000940)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000980)={0x40, 0x19, 0x2, "ec4b"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0x81}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000000)={0x40, 0x31, 0x35, {0x35, 0x7, "dc2846c357b58d17382f76def2567488f1b3228ac4259701a7bba7bbdcc324226087ca278e537abcfcf108491c913a6ccdb8b0"}}, &(0x7f0000000040)={0x0, 0x3, 0x54, @string={0x54, 0x3, "db664e674f50fbea9f8dbd14d8edce4b332932e036aadc69d755264ef2f54160b4b43d82658e026ed97849c1a2bbb478ce12f1f5c42441b4e1471267f8d130240b1aa5cb2c2f9483e4da3c2f52a53ec3b653"}}, &(0x7f00000000c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0xb, "fc8068f2"}, @local=@item_012={0x0, 0x2, 0x5}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x80, 0x1, {0x22, 0x362}}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="40141a0000000aee739f90b85a4002b7f5bfc77bec00"/32], &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xca}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000280)={0x20, 0x1, 0xcc, "f11570979cdb954c5695da091b3f393cc029032176db99956a605b71cdbfd3b32058a3f63e00b64eafe3df9950f9820e7f3fef02926b6bf4e3337e1c1c7f7151cb78d380185a13664c0db41605aece88fbee4f1ec3263b49be7427cee7e4f10bda47e51ab6ddf171476a9ee231bd546a41ea6565ce4327a80980b570efb2a148d797d1a1be864f9a24b23654fb60457169b3b331fe209cf694820a776a42b0b7c9300165d0bf4dc66d6299528afbcbcde23cd08350bbee0ffcd3f56f0785fc9313794aeea5ff8bb58b096bb2"}, &(0x7f0000000380)={0x20, 0x3, 0x1}}) 21:53:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:26 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 21:53:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6102}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x51b6}, 0x0) 21:53:26 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a2, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) [ 1750.936545][T28591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1750.940122][T28582] bond1649: entered promiscuous mode [ 1750.942914][T28591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1750.954817][T28593] bond93: entered promiscuous mode 21:53:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1750.972994][T28592] bond1965: entered promiscuous mode [ 1750.985993][T28600] bond1650: entered promiscuous mode 21:53:26 executing program 3: r0 = socket(0x23, 0x5, 0x0) getsockname$qrtr(r0, 0x0, &(0x7f0000000b80)) 21:53:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1751.002849][T28593] 8021q: adding VLAN 0 to HW filter on device batadv1063 [ 1751.007639][T28593] batadv1063: entered promiscuous mode [ 1751.010477][T28593] bond93: (slave batadv1063): Enslaving as an active interface with an up link [ 1751.013245][T28592] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1751.025675][T28592] 8021q: adding VLAN 0 to HW filter on device batadv1774 [ 1751.029297][T28592] batadv1774: entered promiscuous mode [ 1751.031882][T28592] bond1965: (slave batadv1774): Enslaving as an active interface with an up link 21:53:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0xffffff1f}, 0x0) 21:53:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6103}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1751.044513][T28606] bond93 (unregistering): (slave batadv1063): Releasing backup interface 21:53:27 executing program 3: r0 = socket(0x15, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, 0x0, 0x0) 21:53:27 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = eventfd2(0x800, 0x0) write$eventfd(r1, &(0x7f0000000100)=0xfffffffffffffffc, 0x8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) [ 1751.089590][T28606] batadv1063: left promiscuous mode [ 1751.091869][T28616] binder: 28615:28616 ioctl 4018620d 0 returned -22 [ 1751.101775][T28606] bond93 (unregistering): Released all slaves [ 1751.121657][T28605] bond1651: entered promiscuous mode 21:53:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1751.144952][T28621] binder: 28615:28621 ioctl 4018620d 0 returned -22 [ 1751.148602][T28611] bond1966: entered promiscuous mode 21:53:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x51b7}, 0x0) [ 1751.183913][T28617] 8021q: adding VLAN 0 to HW filter on device batadv1775 [ 1751.187686][T28617] batadv1775: entered promiscuous mode [ 1751.190143][T28617] bond1966: (slave batadv1775): Enslaving as an active interface with an up link 21:53:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6200}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1751.215065][T28624] bond1652: entered promiscuous mode [ 1751.217399][ T10] usb 1-1: new high-speed USB device number 67 using dummy_hcd 21:53:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="04000000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1751.238282][T28626] bond93: entered promiscuous mode [ 1751.261718][T28632] bond1967: entered promiscuous mode [ 1751.272329][T28633] 8021q: adding VLAN 0 to HW filter on device batadv1064 [ 1751.274834][T28633] batadv1064: entered promiscuous mode [ 1751.278256][T28633] bond93: (slave batadv1064): Enslaving as an active interface with an up link [ 1751.302466][T28632] 8021q: adding VLAN 0 to HW filter on device batadv1776 [ 1751.305048][T28632] batadv1776: entered promiscuous mode [ 1751.307977][T28632] bond1967: (slave batadv1776): Enslaving as an active interface with an up link 21:53:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="02010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1751.316715][T28626] bond93 (unregistering): (slave batadv1064): Releasing backup interface 21:53:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6201}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1751.361417][T28626] batadv1064: left promiscuous mode [ 1751.369008][T28626] bond93 (unregistering): Released all slaves [ 1751.386389][T28639] bond1654: entered promiscuous mode 21:53:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="03010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1751.417868][T28641] bond1968: entered promiscuous mode 21:53:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x5865}, 0x0) [ 1751.457508][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1751.464276][T28643] 8021q: adding VLAN 0 to HW filter on device batadv1777 [ 1751.466887][T28643] batadv1777: entered promiscuous mode [ 1751.470355][T28643] bond1968: (slave batadv1777): Enslaving as an active interface with an up link 21:53:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6202}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1751.506233][T28646] bond1655: entered promiscuous mode [ 1751.509205][T28646] 8021q: adding VLAN 0 to HW filter on device bond1655 21:53:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="04010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1751.526867][T28648] bond93: entered promiscuous mode [ 1751.535849][T28650] 8021q: adding VLAN 0 to HW filter on device batadv1065 [ 1751.539094][T28650] batadv1065: entered promiscuous mode [ 1751.542208][T28650] bond93: (slave batadv1065): Enslaving as an active interface with an up link [ 1751.555816][T28652] bond1969: entered promiscuous mode [ 1751.566357][T28655] bond1656: entered promiscuous mode [ 1751.572322][T28648] bond93 (unregistering): (slave batadv1065): Releasing backup interface 21:53:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="05010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1751.608960][ T10] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 17190, setting to 1024 [ 1751.610516][T28648] batadv1065: left promiscuous mode [ 1751.611747][ T10] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1751.615513][ T10] usb 1-1: config 1 interface 0 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1751.616800][T28648] bond93 (unregistering): Released all slaves [ 1751.624763][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1751.635949][T28657] 8021q: adding VLAN 0 to HW filter on device batadv1778 [ 1751.638406][T28657] batadv1778: entered promiscuous mode [ 1751.640510][T28657] bond1969: (slave batadv1778): Enslaving as an active interface with an up link 21:53:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6203}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1751.660846][T28660] bond1657: entered promiscuous mode [ 1751.662552][T28660] 8021q: adding VLAN 0 to HW filter on device bond1657 21:53:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="06010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x6000}, 0x0) [ 1751.700897][T28663] bond1970: entered promiscuous mode [ 1751.712068][T28667] bond1658: entered promiscuous mode [ 1751.725892][T28668] bond93: entered promiscuous mode 21:53:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="07010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1751.743672][T28663] 8021q: adding VLAN 0 to HW filter on device batadv1779 [ 1751.747009][T28663] batadv1779: entered promiscuous mode [ 1751.750003][T28663] bond1970: (slave batadv1779): Enslaving as an active interface with an up link [ 1751.759839][T28668] 8021q: adding VLAN 0 to HW filter on device batadv1066 [ 1751.765872][T28668] batadv1066: entered promiscuous mode 21:53:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6300}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1751.771215][T28668] bond93: (slave batadv1066): Enslaving as an active interface with an up link [ 1751.787435][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1751.790057][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.793425][ T10] usb 1-1: Product: 㐬 [ 1751.796996][ T10] usb 1-1: Manufacturer: 謙褩韀⎖㫠戌䭸쑜⻦躊ـ叚䵣ﶋ뒖烞⦡뵍㫟벵饵㦟⬸⽞ [ 1751.801913][T28672] bond1659: entered promiscuous mode [ 1751.803490][ T10] usb 1-1: SerialNumber: ࠠ [ 1751.805071][T28672] 8021q: adding VLAN 0 to HW filter on device bond1659 [ 1751.816169][T28668] bond93 (unregistering): (slave batadv1066): Releasing backup interface 21:53:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="08010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1751.827742][T28586] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1751.829570][T28586] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1751.860069][T28668] batadv1066: left promiscuous mode [ 1751.869976][T28668] bond93 (unregistering): Released all slaves [ 1751.887760][T28675] bond1971: entered promiscuous mode [ 1751.901948][T28677] 8021q: adding VLAN 0 to HW filter on device batadv1780 [ 1751.904635][T28677] batadv1780: entered promiscuous mode [ 1751.907224][T28677] bond1971: (slave batadv1780): Enslaving as an active interface with an up link 21:53:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x6400}, 0x0) 21:53:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6301}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1751.942837][T28678] bond1660: entered promiscuous mode [ 1751.978402][T28682] bond93: entered promiscuous mode [ 1751.991095][T28684] bond1972: entered promiscuous mode [ 1751.998519][T28682] 8021q: adding VLAN 0 to HW filter on device batadv1067 [ 1752.002353][T28682] batadv1067: entered promiscuous mode [ 1752.004742][T28682] bond93: (slave batadv1067): Enslaving as an active interface with an up link [ 1752.016838][T28684] 8021q: adding VLAN 0 to HW filter on device batadv1781 [ 1752.019786][T28684] batadv1781: entered promiscuous mode [ 1752.022222][T28684] bond1972: (slave batadv1781): Enslaving as an active interface with an up link [ 1752.026814][T28682] bond93 (unregistering): (slave batadv1067): Releasing backup interface [ 1752.069384][T28682] batadv1067: left promiscuous mode [ 1752.079519][T28682] bond93 (unregistering): Released all slaves [ 1752.127707][ T10] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 1752.133184][ T10] usb 1-1: USB disconnect, device number 67 21:53:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="09010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:28 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 21:53:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6302}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x6558}, 0x0) [ 1752.576727][T28691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1752.582304][T28689] validate_nla: 41 callbacks suppressed [ 1752.582315][T28689] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1752.588356][T28691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1752.602454][T28689] bond1973: entered promiscuous mode [ 1752.604038][T28693] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1752.615865][T28693] bond1661: entered promiscuous mode [ 1752.617601][T28693] 8021q: adding VLAN 0 to HW filter on device bond1661 [ 1752.620750][T28694] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 21:53:28 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090587e3"], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f00000004c0)={0x0, 0x5, 0xc7, {0xc7, 0xa, "230ef9dcace7920434d56711c2e25310bb4b5373030b2f701c756c4fc00a9104562661de8cd92bdf9df4baf5959ecd8501f483d9dff6658946dee6fa829b6d594f48711d75512d13eb56bafed151e11f95a5c2e84fc93965b37c3f03da641f0935f81c2c842e66e4e0ae0e788cc17b40ddcfc10f3bdbc1d82ae4c01cdd8bf641fc6f8a3fdc6fc816e49100ba054ac2b243da8594fa20c265d50c4afea962579d650e44458c15a2e7df7db2239f4c760c9b83af50706d79231469be5d9bd3aba9fb8b1733db"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}, &(0x7f0000000600)={0x0, 0xf, 0x18d, {0x5, 0xf, 0x18d, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x2, 0x8, 0x2}, @generic={0x5c, 0x10, 0x4, "80b5779e8af704c159fbc9a013e5ce4f38dd6fc3ef286f160d7ce8f71e3a76a7ae3f77c98736a7b6ab19ed63d586881b849b5c96d0375388541a8c7df265afd6d0c0823589e548951dfd6f892b91470196e8c91610e989fdb0"}, @generic={0x103, 0x10, 0x2, "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"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x2, 0x1f}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "10a49aceffac3ec0dee04e61d847da60"}, @ext_cap={0x7, 0x10, 0x2, 0x11, 0xb, 0x3, 0x3}]}}, &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x3, 0x2, 0x81, "7fa27fe1", "fad06c88"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x80, 0x7, 0x1f, 0xf, 0x1ff, 0x7}}}, &(0x7f0000000d00)={0x84, &(0x7f0000000880)={0x20, 0xe, 0xa4, "85f527676fa5a7e0ed46bac5b8b3933c6e114d8ce9059e46fadbd3cfbd8fc56f9c46dc8343c06df27d72650972c7c1da13974315cade2ba3c41ee3896b9446967a61e062fc35b1d760845484e5027cee92feb9d32ebf5d3b8a546cabb8fe0dc868c09149a7684dae84ed364d5f21ec910a7b1d1d55f5511df9f4411001632ceee98c2a31268db71e225b7d6346a46807b0451847371de32e0fdbb49ec5eae90fb969b8e0"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0xf6}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000a00)={0x20, 0x0, 0x8, {0x100, 0x8, [0x0]}}, &(0x7f0000000dc0)={0x40, 0x7, 0x2, 0x1ff}, &(0x7f0000000a80)={0x40, 0x9, 0x1, 0x9b}, &(0x7f0000000ac0)={0x40, 0xb, 0x2, "9f4e"}, &(0x7f0000000b00)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000b40)={0x40, 0x13, 0x6, @local}, &(0x7f0000000b80)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000bc0)={0x40, 0x19, 0x2, "9843"}, &(0x7f0000000c00)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000c40)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000000c80)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000cc0)={0x40, 0x21, 0x1, 0x80}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001400)={0x2c, &(0x7f0000001180)={0x20, 0x21, 0x46, {0x46, 0xd, "1c97d8cdfe358720a2634895ac8213b440b6fb9912f91004b0e14240783aee1adf331a6a8598428a85f830c17c12ca50cfbea390458c4138306887cbffc462a3389b5852"}}, &(0x7f0000001200)={0x0, 0x3, 0xde, @string={0xde, 0x3, "2d6494fa27abee0e6ec898e7e374f03c6fab803c5a434127dab589d0720bd634ffc679399d46c04b2cbd67297f9c6405afb951fc34458e331c77c2de968a73315500903b1ce5d5236da4bab2bda499b92af2d3ad716c16f966f6141dbd6ef980f8b23ae370c22b9fb193e7da7326fcef2d0ec549fa520089db216abaa0342f8c33e3b1eb88cf90b377a55b887d4bbccd869f32962eebcc6d28af876143081b277cb7b139869b4142656ff6b6c766e51f1fe5247e6d5ff667e3bc288ca6a85c07bbc8c52ea91d914ede19d2fe92ffa2ef7ff97c69f0756f7506181d10"}}, &(0x7f0000001300)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x3}]}}, &(0x7f0000001340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x10, 0x0, 0xfd, "009cb423", "653e5682"}}, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x1, 0x73, 0x3b, 0x8, 0x9, 0xc64c}}}, &(0x7f0000001900)={0x84, &(0x7f0000001440)={0x0, 0x12, 0xee, "f507f359d64a988744f397ca124957b73bef46d057bfa6c2fbc24b4eaee440d6590d327f53d8ae899914dc764084c1ed7784ad40b882e8d6b455b684ff825d212da074d0db459b3ee52a0d04a8b747b5bc0551431aeb0c6112c20cacac4df460adafcb41c9f7dac9cf19276b687a15ee567a32398d5a3f4370c4a6c329ebbd6c73837e101456638cb784bdae39b90bb3f52ff3230fc40bbdd575d14d3aeabe110911d23a77d44986533bcbf94d80151295849bce3004f0ea3010fd829afeacb09c7cf1d47961383b4c250788bd5787428f9be7520bc26a4a8b64051f48825a03144ed0716413c1708f004ef57934"}, &(0x7f0000001540)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001580)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000015c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000001600)={0x20, 0x0, 0x8, {0xe0, 0x4, [0xf00]}}, &(0x7f0000001640)={0x40, 0x7, 0x2, 0xfff}, &(0x7f0000001680)={0x40, 0x9, 0x1, 0x8}, &(0x7f00000016c0)={0x40, 0xb, 0x2, "f1c2"}, &(0x7f0000001700)={0x40, 0xf, 0x2, 0xdbe}, &(0x7f0000001740)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001780)={0x40, 0x17, 0x6, @random="ec40f731d75d"}, &(0x7f00000017c0)={0x40, 0x19, 0x2, "a5fe"}, &(0x7f0000001800)={0x40, 0x1a, 0x2, 0xdec}, &(0x7f0000001840)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000001880)={0x40, 0x1e, 0x1, 0x5}, &(0x7f00000018c0)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x0, 0x31, 0xad, {0xad, 0x31, "bda259356dcb9c3ce7cfd1156e9a2df849f6d4594ee7dab3118f21799afcda0c69a67d3fb909a892e30ba307d272d4b27f496fff555ac1b8d39e339963e6abec6b1e85e0260a5a8d2b1f9a416d480d9530cc85b19c36ae60027700922074d8803824f191b5fb998f93c13e26026a7b70b2c5b9b52cc27bd58bfb9722d187e20b0a9e1348ad329d637cd53c855c25d1b80c2e4c2e41160410d919e06f3d3caeac2e9fe56cf8380c9c24d78d"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}, &(0x7f0000000100)={0x0, 0x22, 0x3, {[@local=@item_012={0x2, 0x2, 0x8, "5aa9"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x80, 0x1, {0x22, 0xd70}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x20, 0xf, 0x9b, "489d16ff021acbc1be5efb23919fc5e901be848a281642ccf3ca89937669ef5cffd9c29a3b293f79b3d5a4c644e8ad87b6fb77c730408342d7c0fd103019caac2421bd25b09c71b88fba41b8508c3c90aaac2aa3510c676cc7788cb11c61f72f3c1a0d0d335bbad5d5e953ba8e5afbce1914b98d6e75c539308aa04a7dc34f7c24aa70088616eecc3ebc2b0e2806bcbbf11ed194709cb263c863c7"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000340)={0x20, 0x1, 0xee, "85dd377608b6ccd05499467b8a7ecdc266d5810f19fd6cbca096b9831d026f4dd6dd924f0a337ccf923452144f2eca24b333e9b4bae24ed8b0138a4e44aa5dd4c81e90af6e817e78752b0f66887776ba0db33555da635f939c27705c065836bf8bf65947bcd681c8752ee0023f36194f10e1766139cacf72ca53ae5d73032f955a8ad6d87164ac85f22597c78763863e16e8887a2dbde06e870cf11c63e13560def8059f4166b3208581b44d3d888bbfd0a78f2155e534348491dfb6300183bd71ee3c23a9b69ae518c4eb8118927842892859f637b5e8e5cefb09a2bd82275ffa99649d038eb3cbe9a283f0fa36"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001b80)={0x24, &(0x7f00000019c0)={0x40, 0x12, 0x57, {0x57, 0x4, "ecbb4536b8d969626775c242986e7cba3ab97c090232de6d9ffa3614f1fac598e8ac13bdb7a5dfa2ba7476cb260f65c73f520d4bb8062aacd780bff88c5cc180c983679c0eba35a4c281d9c9e43bf64b4b7f3ffb3f"}}, &(0x7f0000001a40)={0x0, 0x3, 0xa7, @string={0xa7, 0x3, "21a8a9f534143ad31ec9a07641dbddc2c04a70841a798018cfb5cfe9ea999a9651ea46b15397d80b6d2e6fa9857b228e99bbc17d1866a41511ffbae47680e9df11ae99b4d6e2f305648c9f89a6229f64f655e58348734e66d33f2feeba8048cc65a5c393a43d86f7339062fafaf5191d28cf3acd7dffd64cc5c17d2e5fe6049eb4ce1174651bf342828e20cdd12a451ea861e12d0721edebb664af645c4fd64c41912fe793"}}, &(0x7f0000001b00)={0x0, 0x22, 0xe, {[@main=@item_012={0x0, 0x0, 0xc}, @global=@item_012={0x1, 0x1, 0x0, 'Q'}, @main=@item_4={0x3, 0x0, 0x8, "61665784"}, @global=@item_012={0x0, 0x1, 0x4}, @global=@item_4={0x3, 0x1, 0x0, "b980e090"}]}}, &(0x7f0000001b40)={0x0, 0x21, 0x9, {0x9, 0x21, 0xbd4d, 0x66, 0x1, {0x22, 0xe44}}}}, &(0x7f0000001e00)={0x2c, &(0x7f0000001bc0)={0x20, 0x30, 0x8b, "ab045b0f3fd19eba0bf48ce46ca162a8bd77d9fa24ff6ae31b4c3b75ed8c793fb21ee9e653b4cd3ed63d8c4172dc2932393c5274bee16370734db72ce07e37dc692d2591dad633165ff433188f0db0582dd7f18cf128d84ce968b5b03cf1c49336cefb853a7003990807ce8e626cf4bc94440c795e9ea6230a9c1d49b3f8519472594b4c175b2318fb18a2"}, &(0x7f0000001c80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001cc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001d40)={0x20, 0x1, 0x4f, "07fb1305a584926253b019a681877da2a4a79534ad88b5feebd4e5467cfe4b1aa6e30ca2ec466626f5288b1cff532efecc88926c055ea6461af0ca0fc535b45ff1ddc354171096e9ee87968c658984"}, &(0x7f0000001dc0)={0x20, 0x3, 0x1}}) r1 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x81a7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x50, 0x3f, [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x3, 0x1, 0x0, 0x3, {0x9, 0x21, 0x9, 0x7, 0x1, {0x22, 0xd7b}}, {{{0x9, 0x5, 0x81, 0x3, 0x1ff, 0x20, 0x40, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xc3, 0x9, 0x3f}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x42, 0x0, 0x5, 0x8, 0x40}, 0x19, &(0x7f00000000c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x86, "cb331baba482907c626cd3505829a3d5"}]}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x70, &(0x7f0000000200)=ANY=[@ANYBLOB="70039a803b59f979981d0f5347a24209ada32f4edddda373b12adb787b608ff0d02bbceab54aa06ce3a27ea05ce4c3956fa97281cce984551097807695e7d175bed0467c61d5d749f309e360f98d4f666faec69405756d808e644ed9ecee46cea9eac0871a7e8b80ad3946c868d9a2e1"]}]}) syz_usb_ep_write(r1, 0x9, 0x100, &(0x7f0000000300)="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") syz_usb_control_io$hid(r1, &(0x7f0000000f00)={0x24, &(0x7f0000000e00)={0x40, 0xd, 0x4c, {0x4c, 0x24, "992f4438f21d8ebd67eb770b4c690d66b52033aae9ae17b3d901b278a8235d55fa6071caf5464f19dff71265444669e0d88f2d98b6f80af1824c33cc17ae473ed31eaf125f0d26cc366e"}}, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x423}}, &(0x7f0000000e80)={0x0, 0x22, 0xd, {[@local=@item_4={0x3, 0x2, 0x9, "9c9fbc61"}, @local=@item_012={0x2, 0x2, 0x6, "68b7"}, @global=@item_4={0x3, 0x1, 0x1, "da49591d"}]}}, &(0x7f0000000ec0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0xe0, 0x1, {0x22, 0x6b0}}}}, &(0x7f0000001140)={0x2c, &(0x7f0000000f40)={0x40, 0x31, 0xa7, "3095cc578ab400b97c1e8b1312641fb3c6416d92f934541565238d86c46a59417f3ebf468b79ae2ff302f75cc101aa5c5a0960e3e344755bee04d09766ea020dd94a14fda0ff281e3b1485d1fc43e4cd6b16e209d53b32b47790e25480c1c5759411152eaafce4bf6cf015e6a007621eb965c264d74fdc1754a5befe10fc7222e5538fc994cc3730f0764755615af89be21583e9e781f59bcc5dc5fd4976e7f7bd30e74dd8334b"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001080)={0x20, 0x1, 0x52, "7c2a6c8ae836661facebff40f3e913854b6945d93930f81a07425c998769a931b5a0132fce37940dba20fb48db8d087d3682426164b7bbb8e16b38d13dd96aebafa7b969c4753576b91f4f9c48ce5db43d90"}, &(0x7f0000001100)={0x20, 0x3, 0x1, 0x1}}) 21:53:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="0a010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1752.641896][T28694] bond93: entered promiscuous mode [ 1752.643493][T28689] __nla_validate_parse: 7 callbacks suppressed [ 1752.643503][T28689] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1752.656061][T28689] 8021q: adding VLAN 0 to HW filter on device batadv1782 [ 1752.658901][T28689] batadv1782: entered promiscuous mode [ 1752.661256][T28689] bond1973: (slave batadv1782): Enslaving as an active interface with an up link [ 1752.663789][T28701] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:53:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6303}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1752.681050][T28701] bond1662: entered promiscuous mode 21:53:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="0b010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1752.699867][T28694] 8021q: adding VLAN 0 to HW filter on device batadv1068 [ 1752.702172][T28694] batadv1068: entered promiscuous mode [ 1752.704274][T28694] bond93: (slave batadv1068): Enslaving as an active interface with an up link [ 1752.706704][T28704] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1752.719126][T28704] bond1974: entered promiscuous mode [ 1752.722880][T28694] bond93 (unregistering): (slave batadv1068): Releasing backup interface [ 1752.748771][T28694] batadv1068: left promiscuous mode [ 1752.756674][T28694] bond93 (unregistering): Released all slaves [ 1752.763326][T28708] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1752.775425][T28708] bond1663: entered promiscuous mode [ 1752.777531][T28708] 8021q: adding VLAN 0 to HW filter on device bond1663 [ 1752.780818][T28704] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1752.794805][T28704] 8021q: adding VLAN 0 to HW filter on device batadv1783 [ 1752.798075][T28704] batadv1783: entered promiscuous mode [ 1752.800528][T28704] bond1974: (slave batadv1783): Enslaving as an active interface with an up link 21:53:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="0c010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6400}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1752.826646][T28712] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1752.842532][T28712] bond1975: entered promiscuous mode [ 1752.844160][T28713] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:53:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x6800}, 0x0) [ 1752.868362][T28713] bond1664: entered promiscuous mode [ 1752.869963][T28712] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="0d010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1752.893296][T28712] 8021q: adding VLAN 0 to HW filter on device batadv1784 [ 1752.896905][T28712] batadv1784: entered promiscuous mode [ 1752.900188][T28712] bond1975: (slave batadv1784): Enslaving as an active interface with an up link [ 1752.903039][T28717] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1752.907511][ T23] usb 1-1: new high-speed USB device number 68 using dummy_hcd 21:53:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6401}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1752.916243][T28717] bond93: entered promiscuous mode [ 1752.918483][T28719] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1752.933953][T28719] bond1665: entered promiscuous mode [ 1752.935579][T28719] 8021q: adding VLAN 0 to HW filter on device bond1665 21:53:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="0e010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1752.949533][T28717] 8021q: adding VLAN 0 to HW filter on device batadv1069 [ 1752.952080][T28717] batadv1069: entered promiscuous mode [ 1752.956208][T28717] bond93: (slave batadv1069): Enslaving as an active interface with an up link [ 1752.971385][T28722] bond1976: entered promiscuous mode [ 1752.975592][T28717] bond93 (unregistering): (slave batadv1069): Releasing backup interface [ 1753.018486][T28717] batadv1069: left promiscuous mode [ 1753.025779][T28717] bond93 (unregistering): Released all slaves [ 1753.042643][T28725] bond1666: entered promiscuous mode [ 1753.044401][T28722] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="0f010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1753.066960][T28722] 8021q: adding VLAN 0 to HW filter on device batadv1785 [ 1753.070899][T28722] batadv1785: entered promiscuous mode [ 1753.073862][T28722] bond1976: (slave batadv1785): Enslaving as an active interface with an up link 21:53:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6402}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x6c00}, 0x0) 21:53:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0) [ 1753.123338][T28729] bond1667: entered promiscuous mode [ 1753.124971][T28729] 8021q: adding VLAN 0 to HW filter on device bond1667 21:53:29 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000004c0), 0x0, 0x4800) syz_clone(0x100, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000002280), 0xffffffffffffffff) [ 1753.143514][T28732] bond93: entered promiscuous mode 21:53:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="10010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1753.165736][T28734] bond1977: entered promiscuous mode 21:53:29 executing program 3: openat$autofs(0xffffffffffffff9c, 0x0, 0x10040, 0x0) [ 1753.189113][T28739] bond1668: entered promiscuous mode 21:53:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="11010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:29 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000002280)={@local, @remote, @void, {@ipv4={0x8035, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @local}, @redirect={0x5, 0x0, 0x0, @empty=0xac1e0105, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}}}}}}, 0x0) [ 1753.217120][T28732] 8021q: adding VLAN 0 to HW filter on device batadv1070 [ 1753.220781][T28732] batadv1070: entered promiscuous mode [ 1753.223122][T28732] bond93: (slave batadv1070): Enslaving as an active interface with an up link [ 1753.228489][T28734] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1753.241669][T28734] 8021q: adding VLAN 0 to HW filter on device batadv1786 [ 1753.244124][T28734] batadv1786: entered promiscuous mode [ 1753.246456][T28734] bond1977: (slave batadv1786): Enslaving as an active interface with an up link [ 1753.256187][T28748] bond93 (unregistering): (slave batadv1070): Releasing backup interface 21:53:29 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}}) [ 1753.267577][ T23] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1753.271590][ T23] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 21:53:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6403}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1753.291888][T28756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1753.297646][T28756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1753.309362][T28748] batadv1070: left promiscuous mode [ 1753.320299][T28748] bond93 (unregistering): Released all slaves [ 1753.337372][T28750] bond1669: entered promiscuous mode [ 1753.339112][T28750] 8021q: adding VLAN 0 to HW filter on device bond1669 21:53:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="12010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x7400}, 0x0) [ 1753.365891][T28755] bond1978: entered promiscuous mode [ 1753.368400][T28758] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1753.383306][T28758] 8021q: adding VLAN 0 to HW filter on device batadv1787 [ 1753.385704][T28758] batadv1787: entered promiscuous mode [ 1753.388083][T28758] bond1978: (slave batadv1787): Enslaving as an active interface with an up link 21:53:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6500}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1753.405904][T28762] bond1670: entered promiscuous mode [ 1753.407568][ T23] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1753.409874][ T23] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1753.411863][ T23] usb 1-1: Manufacturer: syz [ 1753.413021][ T23] usb 1-1: SerialNumber: syz 21:53:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="18010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1753.426911][T28763] bond93: entered promiscuous mode [ 1753.443576][T28767] bond1979: entered promiscuous mode [ 1753.455659][T28763] 8021q: adding VLAN 0 to HW filter on device batadv1071 [ 1753.458230][T28763] batadv1071: entered promiscuous mode [ 1753.460582][T28763] bond93: (slave batadv1071): Enslaving as an active interface with an up link [ 1753.468656][T28763] bond93 (unregistering): (slave batadv1071): Releasing backup interface [ 1753.520126][T28763] batadv1071: left promiscuous mode [ 1753.527762][T28763] bond93 (unregistering): Released all slaves [ 1753.546595][T28770] bond1671: entered promiscuous mode [ 1753.548494][T28767] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="21010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1753.566808][T28767] 8021q: adding VLAN 0 to HW filter on device batadv1788 [ 1753.570664][T28767] batadv1788: entered promiscuous mode [ 1753.573643][T28767] bond1979: (slave batadv1788): Enslaving as an active interface with an up link 21:53:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6501}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x7a00}, 0x0) [ 1753.603218][T28774] bond1672: entered promiscuous mode [ 1753.606967][T28774] 8021q: adding VLAN 0 to HW filter on device bond1672 [ 1753.630848][T28777] bond1980: entered promiscuous mode 21:53:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="22010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1753.644856][T28779] bond93: entered promiscuous mode [ 1753.647630][T28777] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1753.665732][T28777] 8021q: adding VLAN 0 to HW filter on device batadv1789 [ 1753.669164][T28777] batadv1789: entered promiscuous mode [ 1753.671756][T28777] bond1980: (slave batadv1789): Enslaving as an active interface with an up link [ 1753.679551][ T23] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 1753.686406][ T23] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input267 21:53:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6502}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1753.697328][T28779] 8021q: adding VLAN 0 to HW filter on device batadv1072 [ 1753.702074][T28779] batadv1072: entered promiscuous mode [ 1753.704376][T28779] bond93: (slave batadv1072): Enslaving as an active interface with an up link [ 1753.718539][T28783] bond1673: entered promiscuous mode 21:53:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="25010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1753.744845][T28785] bond1981: entered promiscuous mode [ 1753.750231][T28779] bond93 (unregistering): (slave batadv1072): Releasing backup interface [ 1753.789189][T28779] batadv1072: left promiscuous mode [ 1753.796852][T28779] bond93 (unregistering): Released all slaves [ 1753.815402][T28790] bond1674: entered promiscuous mode 21:53:29 executing program 3: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) [ 1753.817188][T28790] 8021q: adding VLAN 0 to HW filter on device bond1674 [ 1753.822603][T28785] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1753.843909][T28785] 8021q: adding VLAN 0 to HW filter on device batadv1790 [ 1753.846473][T28785] batadv1790: entered promiscuous mode [ 1753.849696][T28785] bond1981: (slave batadv1790): Enslaving as an active interface with an up link [ 1756.517298][ C1] yealink 1-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1757.634441][T20034] usb 1-1: USB disconnect, device number 68 21:53:33 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090587e3"], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f00000004c0)={0x0, 0x5, 0xc7, {0xc7, 0xa, "230ef9dcace7920434d56711c2e25310bb4b5373030b2f701c756c4fc00a9104562661de8cd92bdf9df4baf5959ecd8501f483d9dff6658946dee6fa829b6d594f48711d75512d13eb56bafed151e11f95a5c2e84fc93965b37c3f03da641f0935f81c2c842e66e4e0ae0e788cc17b40ddcfc10f3bdbc1d82ae4c01cdd8bf641fc6f8a3fdc6fc816e49100ba054ac2b243da8594fa20c265d50c4afea962579d650e44458c15a2e7df7db2239f4c760c9b83af50706d79231469be5d9bd3aba9fb8b1733db"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}, &(0x7f0000000600)={0x0, 0xf, 0x18d, {0x5, 0xf, 0x18d, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x2, 0x8, 0x2}, @generic={0x5c, 0x10, 0x4, "80b5779e8af704c159fbc9a013e5ce4f38dd6fc3ef286f160d7ce8f71e3a76a7ae3f77c98736a7b6ab19ed63d586881b849b5c96d0375388541a8c7df265afd6d0c0823589e548951dfd6f892b91470196e8c91610e989fdb0"}, @generic={0x103, 0x10, 0x2, "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"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x2, 0x1f}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "10a49aceffac3ec0dee04e61d847da60"}, @ext_cap={0x7, 0x10, 0x2, 0x11, 0xb, 0x3, 0x3}]}}, &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x3, 0x2, 0x81, "7fa27fe1", "fad06c88"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x80, 0x7, 0x1f, 0xf, 0x1ff, 0x7}}}, &(0x7f0000000d00)={0x84, &(0x7f0000000880)={0x20, 0xe, 0xa4, "85f527676fa5a7e0ed46bac5b8b3933c6e114d8ce9059e46fadbd3cfbd8fc56f9c46dc8343c06df27d72650972c7c1da13974315cade2ba3c41ee3896b9446967a61e062fc35b1d760845484e5027cee92feb9d32ebf5d3b8a546cabb8fe0dc868c09149a7684dae84ed364d5f21ec910a7b1d1d55f5511df9f4411001632ceee98c2a31268db71e225b7d6346a46807b0451847371de32e0fdbb49ec5eae90fb969b8e0"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0xf6}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000a00)={0x20, 0x0, 0x8, {0x100, 0x8, [0x0]}}, &(0x7f0000000dc0)={0x40, 0x7, 0x2, 0x1ff}, &(0x7f0000000a80)={0x40, 0x9, 0x1, 0x9b}, &(0x7f0000000ac0)={0x40, 0xb, 0x2, "9f4e"}, &(0x7f0000000b00)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000b40)={0x40, 0x13, 0x6, @local}, &(0x7f0000000b80)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000bc0)={0x40, 0x19, 0x2, "9843"}, &(0x7f0000000c00)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000c40)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000000c80)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000cc0)={0x40, 0x21, 0x1, 0x80}}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001400)={0x2c, &(0x7f0000001180)={0x20, 0x21, 0x46, {0x46, 0xd, "1c97d8cdfe358720a2634895ac8213b440b6fb9912f91004b0e14240783aee1adf331a6a8598428a85f830c17c12ca50cfbea390458c4138306887cbffc462a3389b5852"}}, &(0x7f0000001200)={0x0, 0x3, 0xde, @string={0xde, 0x3, "2d6494fa27abee0e6ec898e7e374f03c6fab803c5a434127dab589d0720bd634ffc679399d46c04b2cbd67297f9c6405afb951fc34458e331c77c2de968a73315500903b1ce5d5236da4bab2bda499b92af2d3ad716c16f966f6141dbd6ef980f8b23ae370c22b9fb193e7da7326fcef2d0ec549fa520089db216abaa0342f8c33e3b1eb88cf90b377a55b887d4bbccd869f32962eebcc6d28af876143081b277cb7b139869b4142656ff6b6c766e51f1fe5247e6d5ff667e3bc288ca6a85c07bbc8c52ea91d914ede19d2fe92ffa2ef7ff97c69f0756f7506181d10"}}, &(0x7f0000001300)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x3}]}}, &(0x7f0000001340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x10, 0x0, 0xfd, "009cb423", "653e5682"}}, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x1, 0x73, 0x3b, 0x8, 0x9, 0xc64c}}}, &(0x7f0000001900)={0x84, &(0x7f0000001440)={0x0, 0x12, 0xee, "f507f359d64a988744f397ca124957b73bef46d057bfa6c2fbc24b4eaee440d6590d327f53d8ae899914dc764084c1ed7784ad40b882e8d6b455b684ff825d212da074d0db459b3ee52a0d04a8b747b5bc0551431aeb0c6112c20cacac4df460adafcb41c9f7dac9cf19276b687a15ee567a32398d5a3f4370c4a6c329ebbd6c73837e101456638cb784bdae39b90bb3f52ff3230fc40bbdd575d14d3aeabe110911d23a77d44986533bcbf94d80151295849bce3004f0ea3010fd829afeacb09c7cf1d47961383b4c250788bd5787428f9be7520bc26a4a8b64051f48825a03144ed0716413c1708f004ef57934"}, &(0x7f0000001540)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001580)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000015c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000001600)={0x20, 0x0, 0x8, {0xe0, 0x4, [0xf00]}}, &(0x7f0000001640)={0x40, 0x7, 0x2, 0xfff}, &(0x7f0000001680)={0x40, 0x9, 0x1, 0x8}, &(0x7f00000016c0)={0x40, 0xb, 0x2, "f1c2"}, &(0x7f0000001700)={0x40, 0xf, 0x2, 0xdbe}, &(0x7f0000001740)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001780)={0x40, 0x17, 0x6, @random="ec40f731d75d"}, &(0x7f00000017c0)={0x40, 0x19, 0x2, "a5fe"}, &(0x7f0000001800)={0x40, 0x1a, 0x2, 0xdec}, &(0x7f0000001840)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000001880)={0x40, 0x1e, 0x1, 0x5}, &(0x7f00000018c0)={0x40, 0x21, 0x1, 0x6}}) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x0, 0x31, 0xad, {0xad, 0x31, "bda259356dcb9c3ce7cfd1156e9a2df849f6d4594ee7dab3118f21799afcda0c69a67d3fb909a892e30ba307d272d4b27f496fff555ac1b8d39e339963e6abec6b1e85e0260a5a8d2b1f9a416d480d9530cc85b19c36ae60027700922074d8803824f191b5fb998f93c13e26026a7b70b2c5b9b52cc27bd58bfb9722d187e20b0a9e1348ad329d637cd53c855c25d1b80c2e4c2e41160410d919e06f3d3caeac2e9fe56cf8380c9c24d78d"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}, &(0x7f0000000100)={0x0, 0x22, 0x3, {[@local=@item_012={0x2, 0x2, 0x8, "5aa9"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x80, 0x1, {0x22, 0xd70}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x20, 0xf, 0x9b, "489d16ff021acbc1be5efb23919fc5e901be848a281642ccf3ca89937669ef5cffd9c29a3b293f79b3d5a4c644e8ad87b6fb77c730408342d7c0fd103019caac2421bd25b09c71b88fba41b8508c3c90aaac2aa3510c676cc7788cb11c61f72f3c1a0d0d335bbad5d5e953ba8e5afbce1914b98d6e75c539308aa04a7dc34f7c24aa70088616eecc3ebc2b0e2806bcbbf11ed194709cb263c863c7"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000340)={0x20, 0x1, 0xee, "85dd377608b6ccd05499467b8a7ecdc266d5810f19fd6cbca096b9831d026f4dd6dd924f0a337ccf923452144f2eca24b333e9b4bae24ed8b0138a4e44aa5dd4c81e90af6e817e78752b0f66887776ba0db33555da635f939c27705c065836bf8bf65947bcd681c8752ee0023f36194f10e1766139cacf72ca53ae5d73032f955a8ad6d87164ac85f22597c78763863e16e8887a2dbde06e870cf11c63e13560def8059f4166b3208581b44d3d888bbfd0a78f2155e534348491dfb6300183bd71ee3c23a9b69ae518c4eb8118927842892859f637b5e8e5cefb09a2bd82275ffa99649d038eb3cbe9a283f0fa36"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001b80)={0x24, &(0x7f00000019c0)={0x40, 0x12, 0x57, {0x57, 0x4, "ecbb4536b8d969626775c242986e7cba3ab97c090232de6d9ffa3614f1fac598e8ac13bdb7a5dfa2ba7476cb260f65c73f520d4bb8062aacd780bff88c5cc180c983679c0eba35a4c281d9c9e43bf64b4b7f3ffb3f"}}, &(0x7f0000001a40)={0x0, 0x3, 0xa7, @string={0xa7, 0x3, "21a8a9f534143ad31ec9a07641dbddc2c04a70841a798018cfb5cfe9ea999a9651ea46b15397d80b6d2e6fa9857b228e99bbc17d1866a41511ffbae47680e9df11ae99b4d6e2f305648c9f89a6229f64f655e58348734e66d33f2feeba8048cc65a5c393a43d86f7339062fafaf5191d28cf3acd7dffd64cc5c17d2e5fe6049eb4ce1174651bf342828e20cdd12a451ea861e12d0721edebb664af645c4fd64c41912fe793"}}, &(0x7f0000001b00)={0x0, 0x22, 0xe, {[@main=@item_012={0x0, 0x0, 0xc}, @global=@item_012={0x1, 0x1, 0x0, 'Q'}, @main=@item_4={0x3, 0x0, 0x8, "61665784"}, @global=@item_012={0x0, 0x1, 0x4}, @global=@item_4={0x3, 0x1, 0x0, "b980e090"}]}}, &(0x7f0000001b40)={0x0, 0x21, 0x9, {0x9, 0x21, 0xbd4d, 0x66, 0x1, {0x22, 0xe44}}}}, &(0x7f0000001e00)={0x2c, &(0x7f0000001bc0)={0x20, 0x30, 0x8b, "ab045b0f3fd19eba0bf48ce46ca162a8bd77d9fa24ff6ae31b4c3b75ed8c793fb21ee9e653b4cd3ed63d8c4172dc2932393c5274bee16370734db72ce07e37dc692d2591dad633165ff433188f0db0582dd7f18cf128d84ce968b5b03cf1c49336cefb853a7003990807ce8e626cf4bc94440c795e9ea6230a9c1d49b3f8519472594b4c175b2318fb18a2"}, &(0x7f0000001c80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001cc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001d40)={0x20, 0x1, 0x4f, "07fb1305a584926253b019a681877da2a4a79534ad88b5feebd4e5467cfe4b1aa6e30ca2ec466626f5288b1cff532efecc88926c055ea6461af0ca0fc535b45ff1ddc354171096e9ee87968c658984"}, &(0x7f0000001dc0)={0x20, 0x3, 0x1}}) (async) r1 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x81a7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x50, 0x3f, [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x3, 0x1, 0x0, 0x3, {0x9, 0x21, 0x9, 0x7, 0x1, {0x22, 0xd7b}}, {{{0x9, 0x5, 0x81, 0x3, 0x1ff, 0x20, 0x40, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xc3, 0x9, 0x3f}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x42, 0x0, 0x5, 0x8, 0x40}, 0x19, &(0x7f00000000c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x86, "cb331baba482907c626cd3505829a3d5"}]}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x70, &(0x7f0000000200)=ANY=[@ANYBLOB="70039a803b59f979981d0f5347a24209ada32f4edddda373b12adb787b608ff0d02bbceab54aa06ce3a27ea05ce4c3956fa97281cce984551097807695e7d175bed0467c61d5d749f309e360f98d4f666faec69405756d808e644ed9ecee46cea9eac0871a7e8b80ad3946c868d9a2e1"]}]}) syz_usb_ep_write(r1, 0x9, 0x100, &(0x7f0000000300)="9d3e321feb1d3b4dde98ccc482267c03b1ecd2f0ce94ec45bf050c15ebe99e8a443eea45e6c57afcc298ebf7018eb8d38361c5e259994bd834433ec431a7136c201780f955f13d495f6e23fbcfb8c3015b1e8a124f77638030352a24c277a3112eea6a15eb2dabab0bf4ac9c3d29e2cbc9fece7ba5df8aa70ee64f4d20c23dc9ec62951a82a50f6b4713f3a94e3b967fe8be6e748bae0606a87902fe446d45d415b4013aead4d5e754668ff100a2ba8c587fb9aac90d106758943fe2f9b188056be714214a9716f02af7539f1f93dc8c464bbbb3588804743eb4ec247e4e05f584e6e52b768fcc19298f5fb9f44c85566cd558d74ed754d99c6c964f994910f9") (async) syz_usb_control_io$hid(r1, &(0x7f0000000f00)={0x24, &(0x7f0000000e00)={0x40, 0xd, 0x4c, {0x4c, 0x24, "992f4438f21d8ebd67eb770b4c690d66b52033aae9ae17b3d901b278a8235d55fa6071caf5464f19dff71265444669e0d88f2d98b6f80af1824c33cc17ae473ed31eaf125f0d26cc366e"}}, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x423}}, &(0x7f0000000e80)={0x0, 0x22, 0xd, {[@local=@item_4={0x3, 0x2, 0x9, "9c9fbc61"}, @local=@item_012={0x2, 0x2, 0x6, "68b7"}, @global=@item_4={0x3, 0x1, 0x1, "da49591d"}]}}, &(0x7f0000000ec0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0xe0, 0x1, {0x22, 0x6b0}}}}, &(0x7f0000001140)={0x2c, &(0x7f0000000f40)={0x40, 0x31, 0xa7, "3095cc578ab400b97c1e8b1312641fb3c6416d92f934541565238d86c46a59417f3ebf468b79ae2ff302f75cc101aa5c5a0960e3e344755bee04d09766ea020dd94a14fda0ff281e3b1485d1fc43e4cd6b16e209d53b32b47790e25480c1c5759411152eaafce4bf6cf015e6a007621eb965c264d74fdc1754a5befe10fc7222e5538fc994cc3730f0764755615af89be21583e9e781f59bcc5dc5fd4976e7f7bd30e74dd8334b"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001080)={0x20, 0x1, 0x52, "7c2a6c8ae836661facebff40f3e913854b6945d93930f81a07425c998769a931b5a0132fce37940dba20fb48db8d087d3682426164b7bbb8e16b38d13dd96aebafa7b969c4753576b91f4f9c48ce5db43d90"}, &(0x7f0000001100)={0x20, 0x3, 0x1, 0x1}}) 21:53:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="2f010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x8100}, 0x0) 21:53:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6503}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:33 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x4, @thr={0x0, 0x0}}) [ 1757.666258][T28801] validate_nla: 18 callbacks suppressed [ 1757.666270][T28801] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 21:53:33 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x0) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "ae7de02966351739f80d6aabc0c38326"}) 21:53:33 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0xca6, 0x400) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x44402, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f00000000c0)=0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x90, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x90}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) syz_open_dev$dri(&(0x7f00000004c0), 0x0, 0x0) syz_clone(0x0, &(0x7f0000000880)="7846f889ad4b97962b404d8a8f858561dc163572de7f24d4fa9670586d35651ce843fe8d716673985caf2ee93beeafa08cb3224d0512ed938a5baeecab591ebf2ee4844760d61ac69602fddca581e0a49c4438a3f6c2957dfb402be109459a32854062e5dcf456f18613dd74d0ecd43e8ffe1dba3ab1c81b653c6ec4e35ee433b449472962664037f24ac436263a047d6c0808626135a4a7725878dbcee51447d2a8c3b0e58e96f460ee78", 0xab, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)="5352f2706cf8e810c551cf0a8cd34591ac9f46fce53c0b1f8dbdaf021ca8988b70edb17bc243154669612d3a55473016e94f293d8d50ee1599d8772566c65037eecbd58598beed2199ca92603cd648a6ebbbe5e1924115a3e3d4dab04630a16d17f99cec2cecfcd148d091beb8bcb2dfa7243fec606d8f2a74bb26449b0a494c2f41046d6309123bcc717754ae14262819641ce2e5434604cf260ae7268f68806eef160ac73bf666d96750416a403af19c2b6e55f565c5bd556acc") syz_genetlink_get_family_id$l2tp(&(0x7f0000002280), 0xffffffffffffffff) [ 1757.698215][T28801] bond93: entered promiscuous mode [ 1757.701906][T28800] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:53:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8949, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) [ 1757.721237][T28800] bond1675: entered promiscuous mode [ 1757.723279][T28800] 8021q: adding VLAN 0 to HW filter on device bond1675 [ 1757.726530][T28803] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 21:53:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="3a010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1757.747181][T28803] bond1982: entered promiscuous mode [ 1757.758417][T28801] 8021q: adding VLAN 0 to HW filter on device batadv1073 [ 1757.760862][T28801] batadv1073: entered promiscuous mode [ 1757.766067][T28801] bond93: (slave batadv1073): Enslaving as an active interface with an up link [ 1757.768579][T28816] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:33 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x5452, &(0x7f0000000080)={0x11}) [ 1757.786477][T28816] 8021q: adding VLAN 0 to HW filter on device batadv1791 [ 1757.789076][T28816] batadv1791: entered promiscuous mode [ 1757.791625][T28816] bond1982: (slave batadv1791): Enslaving as an active interface with an up link [ 1757.800706][T28819] bond93 (unregistering): (slave batadv1073): Releasing backup interface 21:53:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6600}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8921, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) 21:53:33 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0x4d00, 0x0) [ 1757.849522][T28819] batadv1073: left promiscuous mode [ 1757.856546][T28819] bond93 (unregistering): Released all slaves [ 1757.872789][T28820] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1757.888714][T28820] bond1676: entered promiscuous mode [ 1757.892033][T28824] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 21:53:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="48010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:33 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000100)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x20) 21:53:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x8847}, 0x0) [ 1757.937217][T28824] bond1983: entered promiscuous mode [ 1757.943834][T28827] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:33 executing program 3: timer_create(0x3, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) [ 1757.982317][T28827] 8021q: adding VLAN 0 to HW filter on device batadv1792 [ 1757.985352][T28827] batadv1792: entered promiscuous mode 21:53:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x7, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 1757.993419][T28827] bond1983: (slave batadv1792): Enslaving as an active interface with an up link [ 1757.995860][T28833] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:53:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6601}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1758.022445][T28833] bond1677: entered promiscuous mode [ 1758.025807][T28837] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 21:53:34 executing program 3: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) [ 1758.042169][T28837] bond93: entered promiscuous mode 21:53:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="4c010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1758.057542][T28843] 8021q: adding VLAN 0 to HW filter on device batadv1074 21:53:34 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4028af11, &(0x7f0000000080)) [ 1758.060310][T28843] batadv1074: entered promiscuous mode [ 1758.062719][T28843] bond93: (slave batadv1074): Enslaving as an active interface with an up link [ 1758.068040][T28846] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1758.078132][T20034] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1758.086725][T28846] bond1984: entered promiscuous mode [ 1758.088675][T28856] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1758.099817][T28856] 8021q: adding VLAN 0 to HW filter on device batadv1793 [ 1758.102374][T28856] batadv1793: entered promiscuous mode 21:53:34 executing program 3: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/177, 0xb1}], 0x1}, 0x0) [ 1758.104917][T28856] bond1984: (slave batadv1793): Enslaving as an active interface with an up link [ 1758.110623][T28851] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:53:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6602}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1758.138541][T28851] bond1678: entered promiscuous mode [ 1758.142642][T28837] bond93 (unregistering): (slave batadv1074): Releasing backup interface 21:53:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="60010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1758.180310][T28837] batadv1074: left promiscuous mode [ 1758.186892][T28837] bond93 (unregistering): Released all slaves [ 1758.194796][T28858] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1758.210795][T28858] bond1985: entered promiscuous mode [ 1758.222787][T28863] bond1679: entered promiscuous mode [ 1758.224497][T28864] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="64010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x8848}, 0x0) [ 1758.260919][T28864] 8021q: adding VLAN 0 to HW filter on device batadv1794 [ 1758.268016][T28864] batadv1794: entered promiscuous mode [ 1758.270437][T28864] bond1985: (slave batadv1794): Enslaving as an active interface with an up link 21:53:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6603}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1758.294410][T28868] bond1680: entered promiscuous mode 21:53:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="68010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1758.319118][T28870] bond93: entered promiscuous mode [ 1758.338249][T28874] bond1986: entered promiscuous mode [ 1758.348253][T28870] 8021q: adding VLAN 0 to HW filter on device batadv1075 [ 1758.350712][T28870] batadv1075: entered promiscuous mode [ 1758.353066][T28870] bond93: (slave batadv1075): Enslaving as an active interface with an up link [ 1758.367805][T28877] bond1681: entered promiscuous mode [ 1758.369497][T28874] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="6c010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1758.388318][T28874] 8021q: adding VLAN 0 to HW filter on device batadv1795 [ 1758.396664][T28874] batadv1795: entered promiscuous mode [ 1758.399980][T28874] bond1986: (slave batadv1795): Enslaving as an active interface with an up link [ 1758.404919][T28870] bond93 (unregistering): (slave batadv1075): Releasing backup interface 21:53:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6700}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1758.447626][T20034] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1758.449008][T28870] batadv1075: left promiscuous mode [ 1758.450867][T20034] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1758.460430][T28870] bond93 (unregistering): Released all slaves [ 1758.478555][T28880] bond1682: entered promiscuous mode 21:53:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="74010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1758.504923][T28882] bond1987: entered promiscuous mode [ 1758.506679][T28884] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1758.533787][T28884] 8021q: adding VLAN 0 to HW filter on device batadv1796 [ 1758.536169][T28884] batadv1796: entered promiscuous mode [ 1758.538674][T28884] bond1987: (slave batadv1796): Enslaving as an active interface with an up link [ 1758.559458][T28887] bond1683: entered promiscuous mode [ 1758.569509][T20034] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1758.571822][T20034] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1758.574016][T20034] usb 1-1: Manufacturer: syz [ 1758.575316][T20034] usb 1-1: SerialNumber: syz [ 1758.828190][T20034] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 1758.830399][T20034] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input268 21:53:34 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090587e3"], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f00000004c0)={0x0, 0x5, 0xc7, {0xc7, 0xa, "230ef9dcace7920434d56711c2e25310bb4b5373030b2f701c756c4fc00a9104562661de8cd92bdf9df4baf5959ecd8501f483d9dff6658946dee6fa829b6d594f48711d75512d13eb56bafed151e11f95a5c2e84fc93965b37c3f03da641f0935f81c2c842e66e4e0ae0e788cc17b40ddcfc10f3bdbc1d82ae4c01cdd8bf641fc6f8a3fdc6fc816e49100ba054ac2b243da8594fa20c265d50c4afea962579d650e44458c15a2e7df7db2239f4c760c9b83af50706d79231469be5d9bd3aba9fb8b1733db"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}, &(0x7f0000000600)={0x0, 0xf, 0x18d, {0x5, 0xf, 0x18d, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x2, 0x8, 0x2}, @generic={0x5c, 0x10, 0x4, "80b5779e8af704c159fbc9a013e5ce4f38dd6fc3ef286f160d7ce8f71e3a76a7ae3f77c98736a7b6ab19ed63d586881b849b5c96d0375388541a8c7df265afd6d0c0823589e548951dfd6f892b91470196e8c91610e989fdb0"}, @generic={0x103, 0x10, 0x2, "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"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x2, 0x1f}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "10a49aceffac3ec0dee04e61d847da60"}, @ext_cap={0x7, 0x10, 0x2, 0x11, 0xb, 0x3, 0x3}]}}, &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x3, 0x2, 0x81, "7fa27fe1", "fad06c88"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x80, 0x7, 0x1f, 0xf, 0x1ff, 0x7}}}, &(0x7f0000000d00)={0x84, &(0x7f0000000880)={0x20, 0xe, 0xa4, "85f527676fa5a7e0ed46bac5b8b3933c6e114d8ce9059e46fadbd3cfbd8fc56f9c46dc8343c06df27d72650972c7c1da13974315cade2ba3c41ee3896b9446967a61e062fc35b1d760845484e5027cee92feb9d32ebf5d3b8a546cabb8fe0dc868c09149a7684dae84ed364d5f21ec910a7b1d1d55f5511df9f4411001632ceee98c2a31268db71e225b7d6346a46807b0451847371de32e0fdbb49ec5eae90fb969b8e0"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0xf6}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000a00)={0x20, 0x0, 0x8, {0x100, 0x8, [0x0]}}, &(0x7f0000000dc0)={0x40, 0x7, 0x2, 0x1ff}, &(0x7f0000000a80)={0x40, 0x9, 0x1, 0x9b}, &(0x7f0000000ac0)={0x40, 0xb, 0x2, "9f4e"}, &(0x7f0000000b00)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000b40)={0x40, 0x13, 0x6, @local}, &(0x7f0000000b80)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000bc0)={0x40, 0x19, 0x2, "9843"}, &(0x7f0000000c00)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000c40)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000000c80)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000cc0)={0x40, 0x21, 0x1, 0x80}}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r0, &(0x7f0000001400)={0x2c, &(0x7f0000001180)={0x20, 0x21, 0x46, {0x46, 0xd, "1c97d8cdfe358720a2634895ac8213b440b6fb9912f91004b0e14240783aee1adf331a6a8598428a85f830c17c12ca50cfbea390458c4138306887cbffc462a3389b5852"}}, &(0x7f0000001200)={0x0, 0x3, 0xde, @string={0xde, 0x3, "2d6494fa27abee0e6ec898e7e374f03c6fab803c5a434127dab589d0720bd634ffc679399d46c04b2cbd67297f9c6405afb951fc34458e331c77c2de968a73315500903b1ce5d5236da4bab2bda499b92af2d3ad716c16f966f6141dbd6ef980f8b23ae370c22b9fb193e7da7326fcef2d0ec549fa520089db216abaa0342f8c33e3b1eb88cf90b377a55b887d4bbccd869f32962eebcc6d28af876143081b277cb7b139869b4142656ff6b6c766e51f1fe5247e6d5ff667e3bc288ca6a85c07bbc8c52ea91d914ede19d2fe92ffa2ef7ff97c69f0756f7506181d10"}}, &(0x7f0000001300)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x3}]}}, &(0x7f0000001340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x10, 0x0, 0xfd, "009cb423", "653e5682"}}, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x1, 0x73, 0x3b, 0x8, 0x9, 0xc64c}}}, &(0x7f0000001900)={0x84, &(0x7f0000001440)={0x0, 0x12, 0xee, "f507f359d64a988744f397ca124957b73bef46d057bfa6c2fbc24b4eaee440d6590d327f53d8ae899914dc764084c1ed7784ad40b882e8d6b455b684ff825d212da074d0db459b3ee52a0d04a8b747b5bc0551431aeb0c6112c20cacac4df460adafcb41c9f7dac9cf19276b687a15ee567a32398d5a3f4370c4a6c329ebbd6c73837e101456638cb784bdae39b90bb3f52ff3230fc40bbdd575d14d3aeabe110911d23a77d44986533bcbf94d80151295849bce3004f0ea3010fd829afeacb09c7cf1d47961383b4c250788bd5787428f9be7520bc26a4a8b64051f48825a03144ed0716413c1708f004ef57934"}, &(0x7f0000001540)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001580)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000015c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000001600)={0x20, 0x0, 0x8, {0xe0, 0x4, [0xf00]}}, &(0x7f0000001640)={0x40, 0x7, 0x2, 0xfff}, &(0x7f0000001680)={0x40, 0x9, 0x1, 0x8}, &(0x7f00000016c0)={0x40, 0xb, 0x2, "f1c2"}, &(0x7f0000001700)={0x40, 0xf, 0x2, 0xdbe}, &(0x7f0000001740)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001780)={0x40, 0x17, 0x6, @random="ec40f731d75d"}, &(0x7f00000017c0)={0x40, 0x19, 0x2, "a5fe"}, &(0x7f0000001800)={0x40, 0x1a, 0x2, 0xdec}, &(0x7f0000001840)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000001880)={0x40, 0x1e, 0x1, 0x5}, &(0x7f00000018c0)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (rerun: 32) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x0, 0x31, 0xad, {0xad, 0x31, "bda259356dcb9c3ce7cfd1156e9a2df849f6d4594ee7dab3118f21799afcda0c69a67d3fb909a892e30ba307d272d4b27f496fff555ac1b8d39e339963e6abec6b1e85e0260a5a8d2b1f9a416d480d9530cc85b19c36ae60027700922074d8803824f191b5fb998f93c13e26026a7b70b2c5b9b52cc27bd58bfb9722d187e20b0a9e1348ad329d637cd53c855c25d1b80c2e4c2e41160410d919e06f3d3caeac2e9fe56cf8380c9c24d78d"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}, &(0x7f0000000100)={0x0, 0x22, 0x3, {[@local=@item_012={0x2, 0x2, 0x8, "5aa9"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x80, 0x1, {0x22, 0xd70}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x20, 0xf, 0x9b, "489d16ff021acbc1be5efb23919fc5e901be848a281642ccf3ca89937669ef5cffd9c29a3b293f79b3d5a4c644e8ad87b6fb77c730408342d7c0fd103019caac2421bd25b09c71b88fba41b8508c3c90aaac2aa3510c676cc7788cb11c61f72f3c1a0d0d335bbad5d5e953ba8e5afbce1914b98d6e75c539308aa04a7dc34f7c24aa70088616eecc3ebc2b0e2806bcbbf11ed194709cb263c863c7"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000340)={0x20, 0x1, 0xee, "85dd377608b6ccd05499467b8a7ecdc266d5810f19fd6cbca096b9831d026f4dd6dd924f0a337ccf923452144f2eca24b333e9b4bae24ed8b0138a4e44aa5dd4c81e90af6e817e78752b0f66887776ba0db33555da635f939c27705c065836bf8bf65947bcd681c8752ee0023f36194f10e1766139cacf72ca53ae5d73032f955a8ad6d87164ac85f22597c78763863e16e8887a2dbde06e870cf11c63e13560def8059f4166b3208581b44d3d888bbfd0a78f2155e534348491dfb6300183bd71ee3c23a9b69ae518c4eb8118927842892859f637b5e8e5cefb09a2bd82275ffa99649d038eb3cbe9a283f0fa36"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001b80)={0x24, &(0x7f00000019c0)={0x40, 0x12, 0x57, {0x57, 0x4, "ecbb4536b8d969626775c242986e7cba3ab97c090232de6d9ffa3614f1fac598e8ac13bdb7a5dfa2ba7476cb260f65c73f520d4bb8062aacd780bff88c5cc180c983679c0eba35a4c281d9c9e43bf64b4b7f3ffb3f"}}, &(0x7f0000001a40)={0x0, 0x3, 0xa7, @string={0xa7, 0x3, "21a8a9f534143ad31ec9a07641dbddc2c04a70841a798018cfb5cfe9ea999a9651ea46b15397d80b6d2e6fa9857b228e99bbc17d1866a41511ffbae47680e9df11ae99b4d6e2f305648c9f89a6229f64f655e58348734e66d33f2feeba8048cc65a5c393a43d86f7339062fafaf5191d28cf3acd7dffd64cc5c17d2e5fe6049eb4ce1174651bf342828e20cdd12a451ea861e12d0721edebb664af645c4fd64c41912fe793"}}, &(0x7f0000001b00)={0x0, 0x22, 0xe, {[@main=@item_012={0x0, 0x0, 0xc}, @global=@item_012={0x1, 0x1, 0x0, 'Q'}, @main=@item_4={0x3, 0x0, 0x8, "61665784"}, @global=@item_012={0x0, 0x1, 0x4}, @global=@item_4={0x3, 0x1, 0x0, "b980e090"}]}}, &(0x7f0000001b40)={0x0, 0x21, 0x9, {0x9, 0x21, 0xbd4d, 0x66, 0x1, {0x22, 0xe44}}}}, &(0x7f0000001e00)={0x2c, &(0x7f0000001bc0)={0x20, 0x30, 0x8b, "ab045b0f3fd19eba0bf48ce46ca162a8bd77d9fa24ff6ae31b4c3b75ed8c793fb21ee9e653b4cd3ed63d8c4172dc2932393c5274bee16370734db72ce07e37dc692d2591dad633165ff433188f0db0582dd7f18cf128d84ce968b5b03cf1c49336cefb853a7003990807ce8e626cf4bc94440c795e9ea6230a9c1d49b3f8519472594b4c175b2318fb18a2"}, &(0x7f0000001c80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001cc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001d40)={0x20, 0x1, 0x4f, "07fb1305a584926253b019a681877da2a4a79534ad88b5feebd4e5467cfe4b1aa6e30ca2ec466626f5288b1cff532efecc88926c055ea6461af0ca0fc535b45ff1ddc354171096e9ee87968c658984"}, &(0x7f0000001dc0)={0x20, 0x3, 0x1}}) (async) r1 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x81a7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x50, 0x3f, [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x3, 0x1, 0x0, 0x3, {0x9, 0x21, 0x9, 0x7, 0x1, {0x22, 0xd7b}}, {{{0x9, 0x5, 0x81, 0x3, 0x1ff, 0x20, 0x40, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xc3, 0x9, 0x3f}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x42, 0x0, 0x5, 0x8, 0x40}, 0x19, &(0x7f00000000c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x86, "cb331baba482907c626cd3505829a3d5"}]}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x70, &(0x7f0000000200)=ANY=[@ANYBLOB="70039a803b59f979981d0f5347a24209ada32f4edddda373b12adb787b608ff0d02bbceab54aa06ce3a27ea05ce4c3956fa97281cce984551097807695e7d175bed0467c61d5d749f309e360f98d4f666faec69405756d808e644ed9ecee46cea9eac0871a7e8b80ad3946c868d9a2e1"]}]}) syz_usb_ep_write(r1, 0x9, 0x100, &(0x7f0000000300)="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") (async) syz_usb_control_io$hid(r1, &(0x7f0000000f00)={0x24, &(0x7f0000000e00)={0x40, 0xd, 0x4c, {0x4c, 0x24, "992f4438f21d8ebd67eb770b4c690d66b52033aae9ae17b3d901b278a8235d55fa6071caf5464f19dff71265444669e0d88f2d98b6f80af1824c33cc17ae473ed31eaf125f0d26cc366e"}}, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x423}}, &(0x7f0000000e80)={0x0, 0x22, 0xd, {[@local=@item_4={0x3, 0x2, 0x9, "9c9fbc61"}, @local=@item_012={0x2, 0x2, 0x6, "68b7"}, @global=@item_4={0x3, 0x1, 0x1, "da49591d"}]}}, &(0x7f0000000ec0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0xe0, 0x1, {0x22, 0x6b0}}}}, &(0x7f0000001140)={0x2c, &(0x7f0000000f40)={0x40, 0x31, 0xa7, "3095cc578ab400b97c1e8b1312641fb3c6416d92f934541565238d86c46a59417f3ebf468b79ae2ff302f75cc101aa5c5a0960e3e344755bee04d09766ea020dd94a14fda0ff281e3b1485d1fc43e4cd6b16e209d53b32b47790e25480c1c5759411152eaafce4bf6cf015e6a007621eb965c264d74fdc1754a5befe10fc7222e5538fc994cc3730f0764755615af89be21583e9e781f59bcc5dc5fd4976e7f7bd30e74dd8334b"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001080)={0x20, 0x1, 0x52, "7c2a6c8ae836661facebff40f3e913854b6945d93930f81a07425c998769a931b5a0132fce37940dba20fb48db8d087d3682426164b7bbb8e16b38d13dd96aebafa7b969c4753576b91f4f9c48ce5db43d90"}, &(0x7f0000001100)={0x20, 0x3, 0x1, 0x1}}) 21:53:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0xb651}, 0x0) 21:53:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6701}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="7a010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1758.906765][T29001] bond1988: entered promiscuous mode [ 1758.916820][T29003] bond93: entered promiscuous mode [ 1758.927925][T29002] bond1684: entered promiscuous mode [ 1758.929603][T29001] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="b5010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1758.951411][T29001] 8021q: adding VLAN 0 to HW filter on device batadv1797 [ 1758.953958][T29001] batadv1797: entered promiscuous mode [ 1758.956402][T29001] bond1988: (slave batadv1797): Enslaving as an active interface with an up link 21:53:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6702}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1758.970687][T20034] usb 1-1: USB disconnect, device number 69 21:53:34 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) [ 1758.987295][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -2 [ 1759.003443][T29003] 8021q: adding VLAN 0 to HW filter on device batadv1076 21:53:34 executing program 3: sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x94b39cddc9da7216}, 0x0) [ 1759.012884][T29003] batadv1076: entered promiscuous mode 21:53:35 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)="041609ea36dca868831a7f3217c744b4020000006e18c8fa76bb30b78f3d5ef959a737fc81519667bc49edb930eccdf827e73ecc3fc486276f9b2b", 0x3b}, {&(0x7f00000000c0)="b5462be32d4c5a2d5681f3fb62fb1717c2b397d26b8856094d678da91ee1c3c291a87226c4cce828701686ffe4f2a20a541fe45f338b2d391621ea026cc31883b8", 0xfffffda2}, {&(0x7f0000000140)="d199cec1164474b8a9adf520268ea94c03d609312f5f823b729787f3db0a2f7649fc0115a0f277a146b69ea38de4148caabd92c9a73ddbe5a9b39d88a668d7e489957dd6be2fddaea74336263d4685210ce2d6728dd308b5b82ba0374271bbb2be385e4673301a10b86c11bbe093fde456209896eb5498b270835f4c3cb26c43a484c653f25a9ebee3050e0120f3f5f9dcd69c323bb211637bc63810034b7a807aa9ef9d2fb7b82ddedcd0f21930ef91f74966b224", 0xb5}, {&(0x7f0000000200)="6636284c33c839a05048921ce211b380d99af79f264ed978291a1d5088bfa596b4", 0x21}], 0x4, &(0x7f0000000300), 0xe8}, 0x0) [ 1759.022021][T29003] bond93: (slave batadv1076): Enslaving as an active interface with an up link [ 1759.053059][T29010] bond1685: entered promiscuous mode [ 1759.059780][T29010] 8021q: adding VLAN 0 to HW filter on device bond1685 21:53:35 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) [ 1759.081702][T29012] bond93 (unregistering): (slave batadv1076): Releasing backup interface 21:53:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00050000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:35 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) 21:53:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}}}}) [ 1759.129775][T29012] batadv1076: left promiscuous mode [ 1759.136019][T29012] bond93 (unregistering): Released all slaves [ 1759.157816][T29013] bond1989: entered promiscuous mode [ 1759.159437][T29021] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1759.171693][T29021] 8021q: adding VLAN 0 to HW filter on device batadv1798 [ 1759.174156][T29021] batadv1798: entered promiscuous mode [ 1759.177120][T29021] bond1989: (slave batadv1798): Enslaving as an active interface with an up link 21:53:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6703}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1759.206958][T29025] bond1686: entered promiscuous mode 21:53:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0xb751}, 0x0) 21:53:35 executing program 3: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f", 0x1}], 0x1}, 0x0) 21:53:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00060000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:35 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f", 0x1}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/177, 0xb1}], 0x1}, 0x0) [ 1759.261367][T29035] bond1990: entered promiscuous mode [ 1759.276991][T29036] bond93: entered promiscuous mode 21:53:35 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1759.293270][T29041] bond1687: entered allmulticast mode [ 1759.294744][T29035] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:35 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff70}, 0x0) 21:53:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00090000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1759.317754][T29035] 8021q: adding VLAN 0 to HW filter on device batadv1799 [ 1759.320264][T29035] batadv1799: entered promiscuous mode [ 1759.324673][T29035] bond1990: (slave batadv1799): Enslaving as an active interface with an up link [ 1759.343260][T29036] 8021q: adding VLAN 0 to HW filter on device batadv1077 [ 1759.345373][T29036] batadv1077: entered promiscuous mode 21:53:35 executing program 3: add_key(&(0x7f0000000a00)='ceph\x00', 0x0, &(0x7f00000001c0)='\x00'/12, 0xc, 0xfffffffffffffffe) [ 1759.347990][T29036] bond93: (slave batadv1077): Enslaving as an active interface with an up link 21:53:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6800}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1759.357220][T29052] bond93 (unregistering): (slave batadv1077): Releasing backup interface 21:53:35 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8994, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) [ 1759.407337][T20034] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1759.409663][T29052] batadv1077: left promiscuous mode [ 1759.418137][T29052] bond93 (unregistering): Released all slaves [ 1759.445502][T29053] bond1688: entered promiscuous mode 21:53:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="000a0000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1759.477969][T29055] bond1991: entered promiscuous mode [ 1759.482663][T29060] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0xcd16}, 0x0) 21:53:35 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000240), 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={'sha224-asm\x00'}}) [ 1759.512444][T29060] 8021q: adding VLAN 0 to HW filter on device batadv1800 [ 1759.517191][T29060] batadv1800: entered promiscuous mode [ 1759.523671][T29060] bond1991: (slave batadv1800): Enslaving as an active interface with an up link [ 1759.551641][T29064] bond1689: entered allmulticast mode 21:53:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6801}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="000b0000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1759.580923][T29068] bond93: entered promiscuous mode [ 1759.587049][T29067] could not allocate digest TFM handle sha224-asm 21:53:35 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x0) read$hidraw(r0, &(0x7f0000000180)=""/212, 0xd4) [ 1759.605848][T29073] 8021q: adding VLAN 0 to HW filter on device batadv1078 [ 1759.611082][T29073] batadv1078: entered promiscuous mode [ 1759.615798][T29073] bond93: (slave batadv1078): Enslaving as an active interface with an up link 21:53:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002b0000010a"], 0x38}}, 0x0) [ 1759.639047][T29076] bond1992: entered promiscuous mode [ 1759.655110][T29078] bond1690: entered promiscuous mode [ 1759.656771][T29078] bond1690: entered allmulticast mode 21:53:35 executing program 3: timer_create(0x0, 0x0, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x3938700}}, 0x0) [ 1759.676135][T29068] bond93 (unregistering): (slave batadv1078): Releasing backup interface [ 1759.719458][T29068] batadv1078: left promiscuous mode [ 1759.727885][T29068] bond93 (unregistering): Released all slaves [ 1759.744774][T29076] 8021q: adding VLAN 0 to HW filter on device batadv1801 [ 1759.747760][T29076] batadv1801: entered promiscuous mode [ 1759.750680][T29076] bond1992: (slave batadv1801): Enslaving as an active interface with an up link [ 1759.797802][T20034] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1759.800515][T20034] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1759.937484][T20034] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1759.939751][T20034] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1759.941808][T20034] usb 1-1: Manufacturer: syz [ 1759.942948][T20034] usb 1-1: SerialNumber: syz [ 1760.188515][T20034] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 1760.190624][T20034] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input269 21:53:36 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000092f6203"], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 21:53:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00110000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:36 executing program 3: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 21:53:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6802}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x34000}, 0x0) 21:53:36 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x103401, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000640)=0x39d7) [ 1760.465683][T29199] bond1993: entered promiscuous mode [ 1760.474066][T29202] bond93: entered promiscuous mode [ 1760.480074][T20034] usb 1-1: USB disconnect, device number 70 21:53:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1760.491695][T29201] bond1691: entered promiscuous mode [ 1760.497289][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -2 21:53:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00140000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1760.511671][T29199] 8021q: adding VLAN 0 to HW filter on device batadv1802 21:53:36 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af00, &(0x7f0000000080)={0x11}) [ 1760.515275][T29199] batadv1802: entered promiscuous mode [ 1760.521884][T29199] bond1993: (slave batadv1802): Enslaving as an active interface with an up link 21:53:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6803}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1760.547686][T29202] 8021q: adding VLAN 0 to HW filter on device batadv1079 [ 1760.552954][T29202] batadv1079: entered promiscuous mode [ 1760.555310][T29202] bond93: (slave batadv1079): Enslaving as an active interface with an up link 21:53:36 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0x5000, 0x0) [ 1760.582732][T29216] bond93 (unregistering): (slave batadv1079): Releasing backup interface 21:53:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00150000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:36 executing program 3: add_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) [ 1760.610547][T29216] batadv1079: left promiscuous mode [ 1760.617765][T29216] bond93 (unregistering): Released all slaves 21:53:36 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4004af61, &(0x7f0000000080)={0x11}) [ 1760.639872][T29221] bond1994: entered promiscuous mode [ 1760.663205][T29227] bond1693: entered promiscuous mode 21:53:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00160000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1760.680826][T29229] 8021q: adding VLAN 0 to HW filter on device batadv1803 21:53:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x40000}, 0x0) [ 1760.683243][T29229] batadv1803: entered promiscuous mode [ 1760.688103][T29229] bond1994: (slave batadv1803): Enslaving as an active interface with an up link [ 1760.702308][T29239] bond93: entered promiscuous mode 21:53:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6900}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:36 executing program 3: request_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0xfffffffffffffffb) [ 1760.723274][T29243] bond1694: entered allmulticast mode 21:53:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00180000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1760.736046][T29239] 8021q: adding VLAN 0 to HW filter on device batadv1080 [ 1760.738504][T29239] batadv1080: entered promiscuous mode [ 1760.740763][T29239] bond93: (slave batadv1080): Enslaving as an active interface with an up link 21:53:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16}, 0x48) [ 1760.758230][T29247] bond1995: entered promiscuous mode 21:53:36 executing program 3: bpf$MAP_CREATE(0x2, &(0x7f0000000140), 0x86) [ 1760.779713][T29239] bond93 (unregistering): (slave batadv1080): Releasing backup interface 21:53:36 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045007, 0x0) 21:53:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="01180000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:36 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0x401c5820, &(0x7f0000000140)=0x7fffffff) [ 1760.832212][T29239] batadv1080: left promiscuous mode [ 1760.843653][T29239] bond93 (unregistering): Released all slaves 21:53:36 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x0) read$hidraw(r0, &(0x7f0000000380)=""/215, 0xfffffffffffffed4) [ 1760.872546][T29247] 8021q: adding VLAN 0 to HW filter on device batadv1804 [ 1760.878824][T29247] batadv1804: entered promiscuous mode [ 1760.881157][T29247] bond1995: (slave batadv1804): Enslaving as an active interface with an up link 21:53:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6901}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:36 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="00000000158c00"/16, @ANYRES32, @ANYBLOB="0020001000000002fffff001459c00540065000008049078e0"]}) [ 1760.904746][T29262] 8021q: adding VLAN 0 to HW filter on device bond1696 21:53:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="001f0000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1760.928593][T20034] usb 1-1: new high-speed USB device number 71 using dummy_hcd 21:53:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x80000}, 0x0) [ 1760.933479][T29270] bond1996: entered promiscuous mode 21:53:36 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) [ 1760.953262][T29275] bond1697: entered promiscuous mode [ 1760.957007][T29275] bond1697: entered allmulticast mode 21:53:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8912, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) 21:53:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="03240000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1760.981112][T29270] 8021q: adding VLAN 0 to HW filter on device batadv1805 [ 1760.983529][T29270] batadv1805: entered promiscuous mode [ 1760.986061][T29270] bond1996: (slave batadv1805): Enslaving as an active interface with an up link [ 1761.002565][T29278] bond93: entered promiscuous mode [ 1761.018888][T29285] 8021q: adding VLAN 0 to HW filter on device bond1698 [ 1761.034173][T29278] 8021q: adding VLAN 0 to HW filter on device batadv1081 [ 1761.040394][T29278] batadv1081: entered promiscuous mode [ 1761.042685][T29278] bond93: (slave batadv1081): Enslaving as an active interface with an up link [ 1761.049865][T29278] bond93 (unregistering): (slave batadv1081): Releasing backup interface [ 1761.089285][T29278] batadv1081: left promiscuous mode [ 1761.096993][T29278] bond93 (unregistering): Released all slaves [ 1761.317369][T20034] usb 1-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1761.447360][T20034] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1761.449689][T20034] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1761.451717][T20034] usb 1-1: Manufacturer: syz [ 1761.452894][T20034] usb 1-1: SerialNumber: syz [ 1761.720072][T20034] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 1763.005599][T20034] usb 1-1: USB disconnect, device number 71 21:53:39 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000092f6203"], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000092f6203"], 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) 21:53:39 executing program 3: socketpair(0x10, 0x2, 0x7, &(0x7f00000001c0)) 21:53:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6902}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00250000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x400300}, 0x0) [ 1763.037705][T29406] validate_nla: 38 callbacks suppressed [ 1763.037719][T29406] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 21:53:39 executing program 3: timer_create(0x1, &(0x7f0000000140)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000180)) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000280)) [ 1763.081540][T29406] bond1997: entered promiscuous mode [ 1763.083146][T29413] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 21:53:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9}, 0x48) [ 1763.103031][T29413] bond93: entered promiscuous mode [ 1763.105731][T29409] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1763.120943][T29409] bond1699: entered promiscuous mode [ 1763.122624][T29406] __nla_validate_parse: 5 callbacks suppressed [ 1763.122634][T29406] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:39 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)) 21:53:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="03360000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1763.149163][T29406] 8021q: adding VLAN 0 to HW filter on device batadv1806 [ 1763.156015][T29406] batadv1806: entered promiscuous mode [ 1763.158837][T29406] bond1997: (slave batadv1806): Enslaving as an active interface with an up link [ 1763.166409][T29418] 8021q: adding VLAN 0 to HW filter on device batadv1082 [ 1763.175192][T29418] batadv1082: entered promiscuous mode 21:53:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6903}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1763.178140][T29418] bond93: (slave batadv1082): Enslaving as an active interface with an up link [ 1763.180496][T29423] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1763.200480][T29423] bond1700: entered allmulticast mode [ 1763.202165][T29423] 8021q: adding VLAN 0 to HW filter on device bond1700 [ 1763.210507][T29413] bond93 (unregistering): (slave batadv1082): Releasing backup interface 21:53:39 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x220840, 0x0) fcntl$getflags(r0, 0xb) 21:53:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00390000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408c5623d552c44d}, 0x90) [ 1763.239671][T29413] batadv1082: left promiscuous mode 21:53:39 executing program 3: syz_clone(0x0, &(0x7f0000000080), 0x0, &(0x7f0000000000), &(0x7f0000000180), 0x0) syz_clone(0x47000000, 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)) [ 1763.251322][T29413] bond93 (unregistering): Released all slaves [ 1763.260747][T29428] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1763.279235][T29428] bond1998: entered promiscuous mode [ 1763.283123][T29435] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1763.307370][T29435] 8021q: adding VLAN 0 to HW filter on device batadv1807 [ 1763.312900][T29435] batadv1807: entered promiscuous mode [ 1763.316332][T29435] bond1998: (slave batadv1807): Enslaving as an active interface with an up link [ 1763.326354][T29434] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:53:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x1000000}, 0x0) 21:53:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6a00}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1763.361203][T29434] bond1701: entered promiscuous mode 21:53:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="03390000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1763.389421][T29443] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1763.400267][T29443] bond93: entered promiscuous mode [ 1763.404506][T29447] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1763.427777][T20034] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1763.439460][T29447] bond1702: entered promiscuous mode [ 1763.441132][T29447] 8021q: adding VLAN 0 to HW filter on device bond1702 [ 1763.444365][T29444] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 21:53:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="003f0000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1763.470870][T29444] bond1999: entered promiscuous mode [ 1763.482970][T29443] 8021q: adding VLAN 0 to HW filter on device batadv1083 [ 1763.485389][T29443] batadv1083: entered promiscuous mode [ 1763.488401][T29443] bond93: (slave batadv1083): Enslaving as an active interface with an up link [ 1763.490993][T29449] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1763.502493][T29449] 8021q: adding VLAN 0 to HW filter on device batadv1808 [ 1763.504942][T29449] batadv1808: entered promiscuous mode [ 1763.507201][T29449] bond1999: (slave batadv1808): Enslaving as an active interface with an up link 21:53:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6a01}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1763.528816][T29450] bond93 (unregistering): (slave batadv1083): Releasing backup interface [ 1763.568951][T29450] batadv1083: left promiscuous mode [ 1763.576723][T29450] bond93 (unregistering): Released all slaves [ 1763.584505][T29453] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1763.600723][T29453] bond1703: entered promiscuous mode [ 1763.602332][T29453] bond1703: entered allmulticast mode 21:53:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00400000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1763.628160][T29455] bond2000: entered promiscuous mode [ 1763.632512][T29456] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x2000000}, 0x0) [ 1763.646379][T29456] 8021q: adding VLAN 0 to HW filter on device batadv1809 [ 1763.652307][T29456] batadv1809: entered promiscuous mode [ 1763.654590][T29456] bond2000: (slave batadv1809): Enslaving as an active interface with an up link 21:53:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6a02}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00640000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1763.701460][T29463] bond93: entered promiscuous mode 21:53:39 executing program 3: syz_clone(0x204400, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1763.721316][T29468] bond2001: entered promiscuous mode [ 1763.733021][T29463] 8021q: adding VLAN 0 to HW filter on device batadv1084 [ 1763.735228][T29463] batadv1084: entered promiscuous mode [ 1763.747999][T29463] bond93: (slave batadv1084): Enslaving as an active interface with an up link [ 1763.766800][T29468] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="7fff0000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1763.790636][T29468] 8021q: adding VLAN 0 to HW filter on device batadv1810 [ 1763.794278][T29468] batadv1810: entered promiscuous mode [ 1763.796541][T29468] bond2001: (slave batadv1810): Enslaving as an active interface with an up link [ 1763.802278][T29463] bond93 (unregistering): (slave batadv1084): Releasing backup interface 21:53:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6a03}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1763.817785][T20034] usb 1-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1763.850638][T29463] batadv1084: left promiscuous mode [ 1763.856207][T29463] bond93 (unregistering): Released all slaves [ 1763.891552][T29478] bond1706: entered promiscuous mode [ 1763.893233][T29478] bond1706: entered allmulticast mode [ 1763.894980][T29478] 8021q: adding VLAN 0 to HW filter on device bond1706 21:53:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00020000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000400)={0xfffffffffffffffe, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) [ 1763.924921][T29480] bond2002: entered promiscuous mode [ 1763.936102][T29482] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x3000000}, 0x0) [ 1763.948908][T20034] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1763.951421][T20034] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1763.953529][T20034] usb 1-1: Manufacturer: syz [ 1763.954711][T20034] usb 1-1: SerialNumber: syz 21:53:39 executing program 3: syz_clone(0x47000000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1763.961250][T29482] 8021q: adding VLAN 0 to HW filter on device batadv1811 [ 1763.968389][T29482] batadv1811: entered promiscuous mode [ 1763.971829][T29482] bond2002: (slave batadv1811): Enslaving as an active interface with an up link 21:53:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6b00}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1764.005944][T29486] bond1707: entered allmulticast mode 21:53:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00040000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1764.027089][T29489] bond93: entered promiscuous mode [ 1764.041125][T29494] 8021q: adding VLAN 0 to HW filter on device batadv1085 [ 1764.043650][T29494] batadv1085: entered promiscuous mode [ 1764.046006][T29494] bond93: (slave batadv1085): Enslaving as an active interface with an up link [ 1764.064191][T29495] bond2003: entered promiscuous mode [ 1764.093105][T29489] bond93 (unregistering): (slave batadv1085): Releasing backup interface [ 1764.129891][T29489] batadv1085: left promiscuous mode [ 1764.136435][T29489] bond93 (unregistering): Released all slaves [ 1764.143819][T29499] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1764.158934][T29499] 8021q: adding VLAN 0 to HW filter on device batadv1812 [ 1764.161468][T29499] batadv1812: entered promiscuous mode [ 1764.163834][T29499] bond2003: (slave batadv1812): Enslaving as an active interface with an up link [ 1764.208587][T20034] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 1765.494232][T21206] usb 1-1: USB disconnect, device number 72 21:53:41 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000092f6203"], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000092f6203"], 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) 21:53:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00050000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6b01}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:41 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x2000000) 21:53:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x4000000}, 0x0) 21:53:41 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000001380)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) [ 1765.551023][T29613] bond1709: entered promiscuous mode 21:53:41 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x1}}, 0x14) 21:53:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00060000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1765.584603][T29615] bond2004: entered promiscuous mode [ 1765.593707][T29618] bond93: entered promiscuous mode [ 1765.596862][T29626] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1765.611531][T29626] 8021q: adding VLAN 0 to HW filter on device batadv1813 [ 1765.613921][T29626] batadv1813: entered promiscuous mode [ 1765.616374][T29626] bond2004: (slave batadv1813): Enslaving as an active interface with an up link 21:53:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6b02}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1765.635010][T29628] bond1710: entered allmulticast mode 21:53:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00080000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1765.648592][T29630] 8021q: adding VLAN 0 to HW filter on device batadv1086 [ 1765.651133][T29630] batadv1086: entered promiscuous mode [ 1765.653562][T29630] bond93: (slave batadv1086): Enslaving as an active interface with an up link 21:53:41 executing program 3: add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000280)='syz', 0x0) 21:53:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x34}}, 0x0) [ 1765.691369][T29634] bond2005: entered promiscuous mode [ 1765.696110][T29618] bond93 (unregistering): (slave batadv1086): Releasing backup interface [ 1765.719727][T29618] batadv1086: left promiscuous mode [ 1765.726228][T29618] bond93 (unregistering): Released all slaves [ 1765.744489][T29634] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00090000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1765.766866][T29634] 8021q: adding VLAN 0 to HW filter on device batadv1814 [ 1765.774064][T29634] batadv1814: entered promiscuous mode [ 1765.776479][T29634] bond2005: (slave batadv1814): Enslaving as an active interface with an up link 21:53:41 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x0) 21:53:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6b03}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1765.796510][T29645] bond1712: entered promiscuous mode 21:53:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x5000000}, 0x0) 21:53:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="000a0000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:41 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000800)='net/vlan/config\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000840)=""/4096, 0x1100}], 0x1, 0x47, 0x0) [ 1765.865155][T29653] bond93: entered promiscuous mode 21:53:41 executing program 3: timerfd_settime(0xffffffffffffffff, 0x47430653f9cda2d3, &(0x7f0000000200), 0x0) [ 1765.898095][T21206] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1765.906580][T29651] bond2006: entered promiscuous mode 21:53:41 executing program 3: request_key(&(0x7f0000000300)='encrypted\x00', &(0x7f00000005c0)={'syz', 0x2}, 0x0, 0x0) [ 1765.941512][T29657] bond1713: entered allmulticast mode 21:53:41 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) read$FUSE(r0, 0x0, 0x42) 21:53:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="000b0000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1765.976628][T29653] 8021q: adding VLAN 0 to HW filter on device batadv1087 [ 1765.979442][T29653] batadv1087: entered promiscuous mode [ 1765.982000][T29653] bond93: (slave batadv1087): Enslaving as an active interface with an up link [ 1765.984666][T29651] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1765.996349][T29651] 8021q: adding VLAN 0 to HW filter on device batadv1815 [ 1766.000200][T29651] batadv1815: entered promiscuous mode [ 1766.002557][T29651] bond2006: (slave batadv1815): Enslaving as an active interface with an up link 21:53:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6c00}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:42 executing program 3: socket(0x9, 0x4, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "cb70ad27d6a63c6c956f02af822f6b393b2dc96eb9fe4792fcb140d78c25b71644699d057317063f8e824f727988f240863602876741347f19f34484b26b2545", "b70ca4bf8c9ff1e5beda14146b1991e27f3147ddf407cbace18dddbd54f0f9fc"}) [ 1766.020880][T29664] bond93 (unregistering): (slave batadv1087): Releasing backup interface [ 1766.059345][T29664] batadv1087: left promiscuous mode 21:53:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x2c}}, 0x0) [ 1766.070185][T29664] bond93 (unregistering): Released all slaves [ 1766.110176][T29668] bond1714: entered promiscuous mode [ 1766.114044][T29668] bond1714: entered allmulticast mode 21:53:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x6000000}, 0x0) 21:53:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00100000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1766.154811][T29672] bond2007: entered promiscuous mode [ 1766.178708][T29677] 8021q: adding VLAN 0 to HW filter on device batadv1816 [ 1766.184413][T29677] batadv1816: entered promiscuous mode [ 1766.189095][T29677] bond2007: (slave batadv1816): Enslaving as an active interface with an up link 21:53:42 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84002, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 21:53:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6c01}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:42 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "07c3c1e025ff9a6b8a02f64cf1318fcb5ca2dd7c96887135e96341cab81351fbfc07c85533ad8f1971a34042d444991da44a76486e0d45c2a6786efc94b16110", "9c0f0851ccee36bb134da825cd8aac5d4095ffa94e01f1ea2cb31328466073867b8a05f24bd7093c4209800a72ac97d5827310332e59fc50146b09004c237523", "12f2f3b19ce7d665afa7af4750a6e3fa4d0faed4bd78a09ee265db55fade2814"}}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x100, 0x0, 0x9, 0x0, "cb70ad27d6a63c6c956f02af822f6b393b2dc96eb9fe4792fcb140d78c25b71644699d057317063f8e824f727988f240863602876741347f19f34484b26b2545", "b70ca4bf8c9ff1e5beda14146b1991e27f3147ddf407cbace18dddbd54f0f9fc"}) [ 1766.257340][T21206] usb 1-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 21:53:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00110000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1766.275328][T29681] bond93: entered promiscuous mode [ 1766.297117][T29685] 8021q: adding VLAN 0 to HW filter on device batadv1088 [ 1766.303395][T29685] batadv1088: entered promiscuous mode 21:53:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) [ 1766.306547][T29685] bond93: (slave batadv1088): Enslaving as an active interface with an up link [ 1766.328458][T29690] bond2008: entered promiscuous mode [ 1766.340637][T29694] bond1716: entered promiscuous mode [ 1766.351761][T29681] bond93 (unregistering): (slave batadv1088): Releasing backup interface [ 1766.378082][T21206] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1766.382147][T29681] batadv1088: left promiscuous mode [ 1766.383762][T21206] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1766.386254][T21206] usb 1-1: Manufacturer: syz [ 1766.387957][T21206] usb 1-1: SerialNumber: syz [ 1766.391069][T29681] bond93 (unregistering): Released all slaves [ 1766.411819][T29697] 8021q: adding VLAN 0 to HW filter on device batadv1817 [ 1766.414426][T29697] batadv1817: entered promiscuous mode [ 1766.416796][T29697] bond2008: (slave batadv1817): Enslaving as an active interface with an up link [ 1766.658437][T21206] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 1767.942168][T20957] usb 1-1: USB disconnect, device number 73 21:53:43 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090587e3"], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x0, 0xa, 0x4a, {0x4a, 0xc, "c34bc3e5b32f5901230b06c7c547a1ed5faa918dffb20f03bbe97405533fb868f2f26828f9bdde034698a351690bd493b421986c42910d55f072b1f02d6c22d2df8f23fb22fe03cb"}}, &(0x7f0000000080)={0x0, 0x3, 0xdd, @string={0xdd, 0x3, "eb71a4a0ae1eb2699cda77e59c24670c55c7ac915f27de00122e799290126b3daf8eae15a1d925bf1515a1f473276269c515ac2d2b6f960aba2cb7ba800cbd5248c4d42dc3080973c0717716f5a884771bee333af1c36cfb80bebbecd7b909e603317e839516b5fc927e26865c09f70d06d5b71639b16e208e05928c80d89954cbf11e28eac6567adc42c4190e404d3b42cca87b52c8ec5c5bf820a1274c051d7b8e11e89d9f99e5a34f3e5bb7cc11dc3a82e9c8d27612baf503061cb464427b142122e2a8b865485becd0da1d300532a963ed28d4971e073e642d"}}, &(0x7f0000000180)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0x1, "44522cf6"}, @main=@item_4={0x3, 0x0, 0xc, "4be00217"}, @global=@item_012={0x2, 0x1, 0x9, "43cc"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x7, 0x1, {0x22, 0x9a6}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x40, 0x14, 0xf7, "5ece7b1fc293d2bda772850ceeb01261ba2bcb5f54d17754876fec408b838581c12d4f3f6e5cea3c197307cceb93a2575ecbd040c9ad8d0523c528309c2a0bf4bd93dbd02570f4b17fa990d11e3608321ed7618f3803fb63b9744e1179094b3c04a140a9a6b6cdc6d42083578f9ecf082be3fceb3ede6610c6304cb09aa5d7bf17611b10010718e9603c9da45b1d4156546375e09c81e03db1e14b74c55494b1ec953c74dee08bc8201d8731fe5d9023d15ef5dc2c1f3ec0f6a50c4c0001185a4424190604fa214ca426b19fc8e1ebeb87f35e2d4c58e074eb8c1928f899ceb558ada5a8ce646ea5df9f5fec5da69e52999062c9ddd160"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000400)={0x20, 0x1, 0x7d, "8f91e7702ad4230e50c0e348bc51b1c1ed0b285d58bce7f56e4d63cb976385a977e19e31b8efa853a0bc733a905aee072d913bd35b7f13fcfe7aeff33349677d08624c97a87fd2a14ef202ae2683222a1239a23d5ce697e034793bb5f8181104ade87674e2ce60e931cdaf3fb071f97e8fa19015e1e693dd59a604f4b2"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x1f}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 21:53:43 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{}, {0x3}, {0x5d}]}) 21:53:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00140000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6c02}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x7000000}, 0x0) 21:53:43 executing program 3: r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$clear(0x7, r1) [ 1767.976372][T29828] bond93: entered promiscuous mode 21:53:43 executing program 3: utimensat(0xffffffffffffffff, 0x0, 0x0, 0x36bcc62633cd032c) [ 1768.002744][T29830] bond2009: entered promiscuous mode 21:53:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00150000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1768.039351][T29828] 8021q: adding VLAN 0 to HW filter on device batadv1089 [ 1768.041804][T29828] batadv1089: entered promiscuous mode [ 1768.044091][T29828] bond93: (slave batadv1089): Enslaving as an active interface with an up link 21:53:44 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$pppoe(r0, 0x0, 0x0) [ 1768.055160][T29830] 8021q: adding VLAN 0 to HW filter on device batadv1818 [ 1768.057673][T29830] batadv1818: entered promiscuous mode [ 1768.059965][T29830] bond2009: (slave batadv1818): Enslaving as an active interface with an up link [ 1768.065767][T29828] bond93 (unregistering): (slave batadv1089): Releasing backup interface 21:53:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6c03}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:44 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0xfffffffffffffdb3) 21:53:44 executing program 3: add_key$keyring(&(0x7f0000000580), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) [ 1768.109126][T29828] batadv1089: left promiscuous mode 21:53:44 executing program 3: keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x0}) [ 1768.119881][T29828] bond93 (unregistering): Released all slaves [ 1768.129862][T29846] validate_nla: 30 callbacks suppressed [ 1768.129872][T29846] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:53:44 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0xaa201, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0x4) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)) [ 1768.153077][T29846] bond1718: entered promiscuous mode [ 1768.156843][T29851] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 21:53:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00160000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x8000000}, 0x0) 21:53:44 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0xc901) [ 1768.193690][T29851] bond2010: entered promiscuous mode [ 1768.196186][T29862] __nla_validate_parse: 3 callbacks suppressed [ 1768.196197][T29862] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1768.212052][T29862] 8021q: adding VLAN 0 to HW filter on device batadv1819 21:53:44 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x0, 0x0, [@mcast2]}}}], 0x28}}], 0x1, 0x0) [ 1768.218761][T29862] batadv1819: entered promiscuous mode [ 1768.221100][T29862] bond2010: (slave batadv1819): Enslaving as an active interface with an up link [ 1768.225553][T29869] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 21:53:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6d00}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1768.241232][T29869] bond93: entered promiscuous mode [ 1768.244969][T29868] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:53:44 executing program 3: r0 = semget$private(0x0, 0x1, 0x0) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f0000000000)=""/4096) [ 1768.259410][T29868] bond1719: entered allmulticast mode [ 1768.260972][T29877] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 21:53:44 executing program 3: add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="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", 0x681, 0xfffffffffffffffd) 21:53:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00180000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:44 executing program 3: r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) r1 = dup(r0) write$binfmt_script(r1, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'ATx'}]}, 0xfdff) [ 1768.293076][T29877] bond2011: entered promiscuous mode [ 1768.304206][T29869] 8021q: adding VLAN 0 to HW filter on device batadv1090 [ 1768.307194][T29869] batadv1090: entered promiscuous mode [ 1768.310018][T29869] bond93: (slave batadv1090): Enslaving as an active interface with an up link [ 1768.312554][T29884] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:53:44 executing program 3: r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) r1 = dup(r0) write$binfmt_script(r1, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'ATx'}]}, 0xfdff) [ 1768.329293][T29877] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:53:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00250000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:44 executing program 3: r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) r1 = dup(r0) write$binfmt_script(r1, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'ATx'}]}, 0xfdff) [ 1768.348301][T29877] 8021q: adding VLAN 0 to HW filter on device batadv1820 21:53:44 executing program 3: r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) r1 = dup(r0) write$binfmt_script(r1, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'ATx'}]}, 0xfdff) [ 1768.357869][T29877] batadv1820: entered promiscuous mode [ 1768.364105][T29877] bond2011: (slave batadv1820): Enslaving as an active interface with an up link 21:53:44 executing program 3: openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'ATx'}]}, 0xfdff) [ 1768.376536][T29869] bond93 (unregistering): (slave batadv1090): Releasing backup interface 21:53:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6d01}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:44 executing program 3: openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'ATx'}]}, 0xfdff) [ 1768.407997][T20957] usb 1-1: new high-speed USB device number 74 using dummy_hcd 21:53:44 executing program 3: openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'ATx'}]}, 0xfdff) [ 1768.429584][T29869] batadv1090: left promiscuous mode 21:53:44 executing program 3: r0 = dup(0xffffffffffffffff) write$binfmt_script(r0, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'ATx'}]}, 0xfdff) [ 1768.441937][T29869] bond93 (unregistering): Released all slaves [ 1768.454040][T29895] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1768.467634][T29895] bond1721: entered promiscuous mode [ 1768.469263][T29901] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1768.495218][T29901] bond2012: entered promiscuous mode [ 1768.496791][T29908] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1768.512867][T29908] 8021q: adding VLAN 0 to HW filter on device batadv1821 [ 1768.515325][T29908] batadv1821: entered promiscuous mode [ 1768.518541][T29908] bond2012: (slave batadv1821): Enslaving as an active interface with an up link [ 1768.767430][T20957] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1768.770338][T20957] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1768.897391][T20957] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1768.899945][T20957] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1768.902050][T20957] usb 1-1: Manufacturer: syz [ 1768.903207][T20957] usb 1-1: SerialNumber: syz [ 1769.148294][T20957] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 1769.150344][T20957] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input270 [ 1771.957288][ C1] yealink 1-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1772.160128][ T23] usb 1-1: USB disconnect, device number 74 [ 1772.647542][ T9022] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) 21:53:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00390000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:48 executing program 3: r0 = dup(0xffffffffffffffff) write$binfmt_script(r0, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'ATx'}]}, 0xfdff) 21:53:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x8060000}, 0x0) 21:53:48 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090587e3"], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x0, 0xa, 0x4a, {0x4a, 0xc, "c34bc3e5b32f5901230b06c7c547a1ed5faa918dffb20f03bbe97405533fb868f2f26828f9bdde034698a351690bd493b421986c42910d55f072b1f02d6c22d2df8f23fb22fe03cb"}}, &(0x7f0000000080)={0x0, 0x3, 0xdd, @string={0xdd, 0x3, "eb71a4a0ae1eb2699cda77e59c24670c55c7ac915f27de00122e799290126b3daf8eae15a1d925bf1515a1f473276269c515ac2d2b6f960aba2cb7ba800cbd5248c4d42dc3080973c0717716f5a884771bee333af1c36cfb80bebbecd7b909e603317e839516b5fc927e26865c09f70d06d5b71639b16e208e05928c80d89954cbf11e28eac6567adc42c4190e404d3b42cca87b52c8ec5c5bf820a1274c051d7b8e11e89d9f99e5a34f3e5bb7cc11dc3a82e9c8d27612baf503061cb464427b142122e2a8b865485becd0da1d300532a963ed28d4971e073e642d"}}, &(0x7f0000000180)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0x1, "44522cf6"}, @main=@item_4={0x3, 0x0, 0xc, "4be00217"}, @global=@item_012={0x2, 0x1, 0x9, "43cc"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x7, 0x1, {0x22, 0x9a6}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x40, 0x14, 0xf7, "5ece7b1fc293d2bda772850ceeb01261ba2bcb5f54d17754876fec408b838581c12d4f3f6e5cea3c197307cceb93a2575ecbd040c9ad8d0523c528309c2a0bf4bd93dbd02570f4b17fa990d11e3608321ed7618f3803fb63b9744e1179094b3c04a140a9a6b6cdc6d42083578f9ecf082be3fceb3ede6610c6304cb09aa5d7bf17611b10010718e9603c9da45b1d4156546375e09c81e03db1e14b74c55494b1ec953c74dee08bc8201d8731fe5d9023d15ef5dc2c1f3ec0f6a50c4c0001185a4424190604fa214ca426b19fc8e1ebeb87f35e2d4c58e074eb8c1928f899ceb558ada5a8ce646ea5df9f5fec5da69e52999062c9ddd160"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000400)={0x20, 0x1, 0x7d, "8f91e7702ad4230e50c0e348bc51b1c1ed0b285d58bce7f56e4d63cb976385a977e19e31b8efa853a0bc733a905aee072d913bd35b7f13fcfe7aeff33349677d08624c97a87fd2a14ef202ae2683222a1239a23d5ce697e034793bb5f8181104ade87674e2ce60e931cdaf3fb071f97e8fa19015e1e693dd59a604f4b2"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x1f}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090587e3"], 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x0, 0xa, 0x4a, {0x4a, 0xc, "c34bc3e5b32f5901230b06c7c547a1ed5faa918dffb20f03bbe97405533fb868f2f26828f9bdde034698a351690bd493b421986c42910d55f072b1f02d6c22d2df8f23fb22fe03cb"}}, &(0x7f0000000080)={0x0, 0x3, 0xdd, @string={0xdd, 0x3, "eb71a4a0ae1eb2699cda77e59c24670c55c7ac915f27de00122e799290126b3daf8eae15a1d925bf1515a1f473276269c515ac2d2b6f960aba2cb7ba800cbd5248c4d42dc3080973c0717716f5a884771bee333af1c36cfb80bebbecd7b909e603317e839516b5fc927e26865c09f70d06d5b71639b16e208e05928c80d89954cbf11e28eac6567adc42c4190e404d3b42cca87b52c8ec5c5bf820a1274c051d7b8e11e89d9f99e5a34f3e5bb7cc11dc3a82e9c8d27612baf503061cb464427b142122e2a8b865485becd0da1d300532a963ed28d4971e073e642d"}}, &(0x7f0000000180)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0x1, "44522cf6"}, @main=@item_4={0x3, 0x0, 0xc, "4be00217"}, @global=@item_012={0x2, 0x1, 0x9, "43cc"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x7, 0x1, {0x22, 0x9a6}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x40, 0x14, 0xf7, "5ece7b1fc293d2bda772850ceeb01261ba2bcb5f54d17754876fec408b838581c12d4f3f6e5cea3c197307cceb93a2575ecbd040c9ad8d0523c528309c2a0bf4bd93dbd02570f4b17fa990d11e3608321ed7618f3803fb63b9744e1179094b3c04a140a9a6b6cdc6d42083578f9ecf082be3fceb3ede6610c6304cb09aa5d7bf17611b10010718e9603c9da45b1d4156546375e09c81e03db1e14b74c55494b1ec953c74dee08bc8201d8731fe5d9023d15ef5dc2c1f3ec0f6a50c4c0001185a4424190604fa214ca426b19fc8e1ebeb87f35e2d4c58e074eb8c1928f899ceb558ada5a8ce646ea5df9f5fec5da69e52999062c9ddd160"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000400)={0x20, 0x1, 0x7d, "8f91e7702ad4230e50c0e348bc51b1c1ed0b285d58bce7f56e4d63cb976385a977e19e31b8efa853a0bc733a905aee072d913bd35b7f13fcfe7aeff33349677d08624c97a87fd2a14ef202ae2683222a1239a23d5ce697e034793bb5f8181104ade87674e2ce60e931cdaf3fb071f97e8fa19015e1e693dd59a604f4b2"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x1f}}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) 21:53:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6d02}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1772.685376][T29921] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 21:53:48 executing program 3: r0 = dup(0xffffffffffffffff) write$binfmt_script(r0, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'ATx'}]}, 0xfdff) [ 1772.706413][T29921] bond93: entered promiscuous mode [ 1772.711081][T29918] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:53:48 executing program 3: r0 = openat$smackfs_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = dup(r0) write$binfmt_script(r1, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'ATx'}]}, 0xfdff) [ 1772.732174][T29918] bond1722: entered promiscuous mode 21:53:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00640000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:48 executing program 3: r0 = openat$smackfs_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = dup(r0) write$binfmt_script(r1, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'ATx'}]}, 0xfdff) [ 1772.755411][T29926] bond2013: entered promiscuous mode [ 1772.771120][T29921] 8021q: adding VLAN 0 to HW filter on device batadv1091 [ 1772.775565][T29921] batadv1091: entered promiscuous mode [ 1772.781997][T29921] bond93: (slave batadv1091): Enslaving as an active interface with an up link 21:53:48 executing program 3: r0 = openat$smackfs_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = dup(r0) write$binfmt_script(r1, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'ATx'}]}, 0xfdff) [ 1772.786452][T29933] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1772.810144][T29933] 8021q: adding VLAN 0 to HW filter on device batadv1822 [ 1772.812672][T29933] batadv1822: entered promiscuous mode [ 1772.815528][T29933] bond2013: (slave batadv1822): Enslaving as an active interface with an up link 21:53:48 executing program 3: openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$binfmt_script(r0, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'ATx'}]}, 0xfdff) [ 1772.856951][T29937] bond93 (unregistering): (slave batadv1091): Releasing backup interface 21:53:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00180100000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6d03}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:53:48 executing program 3: openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$binfmt_script(r0, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'ATx'}]}, 0xfdff) 21:53:48 executing program 3: openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$binfmt_script(r0, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'ATx'}]}, 0xfdff) 21:53:48 executing program 3: r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) dup(r0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'ATx'}]}, 0xfdff) [ 1772.909823][T29937] batadv1091: left promiscuous mode [ 1772.919269][T29937] bond93 (unregistering): Released all slaves 21:53:48 executing program 3: r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) dup(r0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'ATx'}]}, 0xfdff) [ 1772.947911][T20034] usb 1-1: new high-speed USB device number 75 using dummy_hcd 21:53:48 executing program 3: r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) dup(r0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'ATx'}]}, 0xfdff) 21:53:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00240300000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x9000000}, 0x0) [ 1773.011034][T29952] bond2014: entered promiscuous mode [ 1773.021120][T29948] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 21:53:49 executing program 3: r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) r1 = dup(r0) write$binfmt_script(r1, 0x0, 0x0) [ 1773.028779][T29948] CPU: 0 PID: 29948 Comm: syz-executor.1 Tainted: G B 6.8.0-rc4-syzkaller-g905b00721763 #0 [ 1773.031805][T29948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1773.034493][T29948] Call trace: [ 1773.035363][T29948] dump_backtrace+0x1b8/0x1e4 [ 1773.036535][T29948] show_stack+0x2c/0x3c [ 1773.037646][T29948] dump_stack_lvl+0xd0/0x124 [ 1773.038822][T29948] dump_stack+0x1c/0x28 [ 1773.039952][T29948] dump_header+0xac/0x5f4 [ 1773.041060][T29948] oom_kill_process+0x324/0x9a4 [ 1773.042346][T29948] out_of_memory+0xd5c/0x1014 [ 1773.043577][T29948] mem_cgroup_out_of_memory+0x250/0x324 [ 1773.045070][T29948] try_charge_memcg+0xaf4/0x148c [ 1773.046371][T29948] mem_cgroup_swapin_charge_folio+0x2e8/0x4e0 [ 1773.047992][T29948] __read_swap_cache_async+0x428/0x6a4 [ 1773.049338][T29948] swapin_readahead+0xb90/0xde8 [ 1773.050659][T29948] do_swap_page+0x4b0/0x257c [ 1773.051248][T29964] bond93: entered promiscuous mode [ 1773.051892][T29948] handle_mm_fault+0xfec/0x546c [ 1773.054323][T29948] do_page_fault+0x4f8/0xa64 [ 1773.055584][T29948] do_translation_fault+0x94/0xc8 [ 1773.056833][T29948] do_mem_abort+0x74/0x200 [ 1773.057989][T29948] el1_abort+0x3c/0x5c [ 1773.059094][T29948] el1h_64_sync_handler+0x60/0xac [ 1773.060422][T29948] el1h_64_sync+0x64/0x68 [ 1773.061543][T29948] __rseq_handle_notify_resume+0x318/0x19c8 [ 1773.063167][T29948] do_notify_resume+0x1938/0x393c [ 1773.064461][T29948] el0_da+0xac/0x168 [ 1773.065533][T29948] el0t_64_sync_handler+0xcc/0xfc [ 1773.066889][T29948] el0t_64_sync+0x190/0x194 21:53:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00360300000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1773.074309][T29964] 8021q: adding VLAN 0 to HW filter on device batadv1092 [ 1773.076512][T29964] batadv1092: entered promiscuous mode [ 1773.079757][T29964] bond93: (slave batadv1092): Enslaving as an active interface with an up link [ 1773.085568][T29964] bond93 (unregistering): (slave batadv1092): Releasing backup interface [ 1773.087849][T29948] memory: usage 307200kB, limit 307200kB, failcnt 2669 [ 1773.091480][T29948] memory+swap: usage 309796kB, limit 9007199254740988kB, failcnt 0 [ 1773.093443][T29948] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0 [ 1773.095210][T29948] Memory cgroup stats for /syz1: [ 1773.095296][T29948] cache 28672 21:53:49 executing program 3: r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) r1 = dup(r0) write$binfmt_script(r1, 0x0, 0x0) [ 1773.097480][T29948] rss 12288 [ 1773.098532][T29948] rss_huge 0 [ 1773.099349][T29948] shmem 0 [ 1773.100059][T29948] mapped_file 0 [ 1773.101520][T29948] dirty 16384 [ 1773.102426][T29948] writeback 0 [ 1773.103204][T29948] workingset_refault_anon 158 [ 1773.104394][T29948] workingset_refault_file 22 [ 1773.105509][T29948] swap 2658304 [ 1773.106312][T29948] swapcached 8192 [ 1773.107158][T29948] pgpgin 1238649 [ 1773.108643][T29948] pgpgout 1243236 [ 1773.109565][T29948] pgfault 1465905 [ 1773.110408][T29948] pgmajfault 106 [ 1773.111282][T29948] inactive_anon 12288 [ 1773.112276][T29948] active_anon 0 [ 1773.113107][T29948] inactive_file 20480 [ 1773.114120][T29948] active_file 16384 [ 1773.115056][T29948] unevictable 0 [ 1773.115882][T29948] hierarchical_memory_limit 314572800 [ 1773.117187][T29948] hierarchical_memsw_limit 9223372036854771712 [ 1773.120180][T29948] total_cache 28672 21:53:49 executing program 3: r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) r1 = dup(r0) write$binfmt_script(r1, 0x0, 0x0) [ 1773.124210][T29964] batadv1092: left promiscuous mode [ 1773.127686][T29948] total_rss 12288 [ 1773.128849][T29948] total_rss_huge 0 [ 1773.129751][T29948] total_shmem 0 [ 1773.130806][T29948] total_mapped_file 0 [ 1773.131977][T29948] total_dirty 16384 [ 1773.132911][T29948] total_writeback 0 [ 1773.134080][T29948] total_workingset_refault_anon 158 [ 1773.135571][T29948] total_workingset_refault_file 22 [ 1773.136988][T29948] total_swap 2658304 [ 1773.138369][T29948] total_swapcached 8192 [ 1773.138699][T29964] bond93 (unregistering): Released all slaves [ 1773.139634][T29948] total_pgpgin 1238649 [ 1773.142237][T29948] total_pgpgout 1243236 [ 1773.143359][T29948] total_pgfault 1465905 [ 1773.144550][T29948] total_pgmajfault 106 [ 1773.145994][T29948] total_inactive_anon 12288 [ 1773.147642][T29948] total_active_anon 0 [ 1773.148856][T29948] total_inactive_file 20480 [ 1773.150220][T29948] total_active_file 16384 [ 1773.150754][T29970] validate_nla: 6 callbacks suppressed [ 1773.150764][T29970] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1773.151428][T29948] total_unevictable 0 [ 1773.155736][T29948] anon_cost 8 [ 1773.156618][T29948] file_cost 1 [ 1773.157769][T29948] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=22118,uid=0 [ 1773.161838][T29948] Memory cgroup out of memory: Killed process 22120 (syz-executor.1) total-vm:186352kB, anon-rss:516kB, file-rss:8832kB, shmem-rss:128kB, UID:0 pgtables:84kB oom_score_adj:1000 21:53:49 executing program 3: r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) r1 = dup(r0) write$binfmt_script(r1, &(0x7f0000000480)={'#! ', './file0'}, 0xb) [ 1773.176560][T29970] bond1726: entered allmulticast mode 21:53:49 executing program 3: r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) r1 = dup(r0) write$binfmt_script(r1, &(0x7f0000000480)={'#! ', './file0'}, 0xb) 21:53:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00390300000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1773.209155][T29983] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:53:49 executing program 3: r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) r1 = dup(r0) write$binfmt_script(r1, &(0x7f0000000480)={'#! ', './file0'}, 0xb) 21:53:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0xa000000}, 0x0) [ 1773.240318][T29983] bond1727: entered promiscuous mode [ 1773.245143][T29990] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 21:53:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00f2ffff7f0000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:49 executing program 3: r0 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) 21:53:49 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) [ 1773.274692][T29990] bond93: entered promiscuous mode [ 1773.299377][T29990] 8021q: adding VLAN 0 to HW filter on device batadv1093 21:53:49 executing program 3: add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000080)="80", 0x1, 0xfffffffffffffffd) [ 1773.307559][T20034] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1773.317520][T20034] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1773.320999][T29990] batadv1093: entered promiscuous mode [ 1773.327229][T29990] bond93: (slave batadv1093): Enslaving as an active interface with an up link [ 1773.335073][T29993] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:53:49 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='x', 0x1, r0) [ 1773.368307][T29990] bond93 (unregistering): (slave batadv1093): Releasing backup interface 21:53:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00f8ffff7f0000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1773.419152][T29990] batadv1093: left promiscuous mode [ 1773.422574][T29990] bond93 (unregistering): Released all slaves [ 1773.438489][T20034] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1773.440986][T20034] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1773.445007][T20034] usb 1-1: Manufacturer: syz [ 1773.447626][T20034] usb 1-1: SerialNumber: syz [ 1773.450650][T30010] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1773.708283][T20034] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 1773.710388][T20034] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input271 [ 1775.202094][ T30] oom_reaper: reaped process 22120 (syz-executor.1), now anon-rss:140kB, file-rss:8128kB, shmem-rss:0kB [ 1775.464833][T22512] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1775.469260][T22512] CPU: 0 PID: 22512 Comm: syz-executor.1 Tainted: G B 6.8.0-rc4-syzkaller-g905b00721763 #0 [ 1775.472049][T22512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1775.474429][T22512] Call trace: [ 1775.475199][T22512] dump_backtrace+0x1b8/0x1e4 [ 1775.476331][T22512] show_stack+0x2c/0x3c [ 1775.477382][T22512] dump_stack_lvl+0xd0/0x124 [ 1775.478531][T22512] dump_stack+0x1c/0x28 [ 1775.479549][T22512] dump_header+0xac/0x5f4 [ 1775.480637][T22512] oom_kill_process+0x324/0x9a4 [ 1775.481868][T22512] out_of_memory+0xd5c/0x1014 [ 1775.482996][T22512] mem_cgroup_out_of_memory+0x250/0x324 [ 1775.484408][T22512] try_charge_memcg+0xaf4/0x148c [ 1775.485729][T22512] mem_cgroup_swapin_charge_folio+0x2e8/0x4e0 [ 1775.487287][T22512] __read_swap_cache_async+0x428/0x6a4 [ 1775.488641][T22512] swapin_readahead+0xb90/0xde8 [ 1775.489916][T22512] do_swap_page+0x4b0/0x257c [ 1775.491101][T22512] handle_mm_fault+0xfec/0x546c [ 1775.492335][T22512] do_page_fault+0x4f8/0xa64 [ 1775.493494][T22512] do_translation_fault+0x94/0xc8 [ 1775.494829][T22512] do_mem_abort+0x74/0x200 [ 1775.495964][T22512] el1_abort+0x3c/0x5c [ 1775.497068][T22512] el1h_64_sync_handler+0x60/0xac [ 1775.498457][T22512] el1h_64_sync+0x64/0x68 [ 1775.499626][T22512] __rseq_handle_notify_resume+0x318/0x19c8 [ 1775.501057][T22512] do_notify_resume+0x1938/0x393c [ 1775.502411][T22512] el0_svc+0x9c/0x158 [ 1775.503394][T22512] el0t_64_sync_handler+0x84/0xfc [ 1775.504716][T22512] el0t_64_sync+0x190/0x194 [ 1775.550370][T22512] memory: usage 307200kB, limit 307200kB, failcnt 16269 [ 1775.552239][T22512] memory+swap: usage 309424kB, limit 9007199254740988kB, failcnt 0 [ 1775.554148][T22512] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0 [ 1775.555966][T22512] Memory cgroup stats for /syz1: [ 1775.556053][T22512] cache 28672 [ 1775.568143][T22512] rss 4096 [ 1775.568939][T22512] rss_huge 0 [ 1775.569737][T22512] shmem 0 [ 1775.570464][T22512] mapped_file 0 [ 1775.571255][T22512] dirty 16384 [ 1775.572043][T22512] writeback 0 [ 1775.572875][T22512] workingset_refault_anon 7593 [ 1775.574031][T22512] workingset_refault_file 22 [ 1775.575113][T22512] swap 2285568 [ 1775.575904][T22512] swapcached 4096 [ 1775.576761][T22512] pgpgin 1246084 [ 1775.589997][T22512] pgpgout 1250673 [ 1775.591010][T22512] pgfault 1475529 [ 1775.591882][T22512] pgmajfault 7394 [ 1775.592734][T22512] inactive_anon 4096 [ 1775.593748][T22512] active_anon 0 [ 1775.594636][T22512] inactive_file 20480 [ 1775.595581][T22512] active_file 16384 [ 1775.596465][T22512] unevictable 0 [ 1775.606860][T22512] hierarchical_memory_limit 314572800 [ 1775.611097][T22512] hierarchical_memsw_limit 9223372036854771712 [ 1775.612626][T22512] total_cache 28672 [ 1775.613569][T22512] total_rss 4096 [ 1775.614455][T22512] total_rss_huge 0 [ 1775.615413][T22512] total_shmem 0 [ 1775.616274][T22512] total_mapped_file 0 [ 1775.625310][T22512] total_dirty 16384 [ 1775.626264][T22512] total_writeback 0 [ 1775.627229][T22512] total_workingset_refault_anon 7593 [ 1775.631317][T22512] total_workingset_refault_file 22 [ 1775.632582][T22512] total_swap 2285568 [ 1775.633477][T22512] total_swapcached 4096 [ 1775.634496][T22512] total_pgpgin 1246084 [ 1775.635461][T22512] total_pgpgout 1250673 [ 1775.636520][T22512] total_pgfault 1475529 [ 1775.647051][T22512] total_pgmajfault 7394 [ 1775.648207][T22512] total_inactive_anon 4096 [ 1775.649239][T22512] total_active_anon 0 [ 1775.650235][T22512] total_inactive_file 20480 [ 1775.651340][T22512] total_active_file 16384 [ 1775.652355][T22512] total_unevictable 0 [ 1775.653312][T22512] anon_cost 0 [ 1775.654095][T22512] file_cost 2 [ 1775.654842][T22512] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=29948,uid=0 [ 1775.665151][T22512] Memory cgroup out of memory: Killed process 29948 (syz-executor.1) total-vm:54640kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1776.557436][ C0] yealink 1-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1776.761995][T29917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1776.764744][T29917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1776.793858][ T6170] usb 1-1: USB disconnect, device number 75 21:53:52 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090587e3"], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x0, 0xa, 0x4a, {0x4a, 0xc, "c34bc3e5b32f5901230b06c7c547a1ed5faa918dffb20f03bbe97405533fb868f2f26828f9bdde034698a351690bd493b421986c42910d55f072b1f02d6c22d2df8f23fb22fe03cb"}}, &(0x7f0000000080)={0x0, 0x3, 0xdd, @string={0xdd, 0x3, "eb71a4a0ae1eb2699cda77e59c24670c55c7ac915f27de00122e799290126b3daf8eae15a1d925bf1515a1f473276269c515ac2d2b6f960aba2cb7ba800cbd5248c4d42dc3080973c0717716f5a884771bee333af1c36cfb80bebbecd7b909e603317e839516b5fc927e26865c09f70d06d5b71639b16e208e05928c80d89954cbf11e28eac6567adc42c4190e404d3b42cca87b52c8ec5c5bf820a1274c051d7b8e11e89d9f99e5a34f3e5bb7cc11dc3a82e9c8d27612baf503061cb464427b142122e2a8b865485becd0da1d300532a963ed28d4971e073e642d"}}, &(0x7f0000000180)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0x1, "44522cf6"}, @main=@item_4={0x3, 0x0, 0xc, "4be00217"}, @global=@item_012={0x2, 0x1, 0x9, "43cc"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x7, 0x1, {0x22, 0x9a6}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x40, 0x14, 0xf7, "5ece7b1fc293d2bda772850ceeb01261ba2bcb5f54d17754876fec408b838581c12d4f3f6e5cea3c197307cceb93a2575ecbd040c9ad8d0523c528309c2a0bf4bd93dbd02570f4b17fa990d11e3608321ed7618f3803fb63b9744e1179094b3c04a140a9a6b6cdc6d42083578f9ecf082be3fceb3ede6610c6304cb09aa5d7bf17611b10010718e9603c9da45b1d4156546375e09c81e03db1e14b74c55494b1ec953c74dee08bc8201d8731fe5d9023d15ef5dc2c1f3ec0f6a50c4c0001185a4424190604fa214ca426b19fc8e1ebeb87f35e2d4c58e074eb8c1928f899ceb558ada5a8ce646ea5df9f5fec5da69e52999062c9ddd160"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000400)={0x20, 0x1, 0x7d, "8f91e7702ad4230e50c0e348bc51b1c1ed0b285d58bce7f56e4d63cb976385a977e19e31b8efa853a0bc733a905aee072d913bd35b7f13fcfe7aeff33349677d08624c97a87fd2a14ef202ae2683222a1239a23d5ce697e034793bb5f8181104ade87674e2ce60e931cdaf3fb071f97e8fa19015e1e693dd59a604f4b2"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x1f}}) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 32) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 21:53:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00f9ffff7f0000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x18, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0) 21:53:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0xb000000}, 0x0) 21:53:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6e00}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1776.821436][T30131] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:53:52 executing program 3: syz_clone(0x4064000, 0x0, 0x0, 0x0, 0x0, 0x0) getuid() [ 1776.862806][T30133] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 21:53:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00fcffff7f0000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1776.898043][T30133] bond93: entered promiscuous mode [ 1776.902653][T30141] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1776.929502][T30133] 8021q: adding VLAN 0 to HW filter on device batadv1094 [ 1776.931805][T30133] batadv1094: entered promiscuous mode [ 1776.934100][T30133] bond93: (slave batadv1094): Enslaving as an active interface with an up link 21:53:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="0001000000000000100012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1776.951755][T30133] bond93 (unregistering): (slave batadv1094): Releasing backup interface 21:53:52 executing program 3: mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x29c1012, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x0) socket$inet(0x2, 0x800, 0x101) socket$inet6_udp(0xa, 0x2, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001a00)={&(0x7f0000000000), 0xc, &(0x7f00000017c0)=[{0x0}, {0x0, 0xb4}], 0x2, &(0x7f0000001900)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}, 0x0) [ 1777.003558][T30133] batadv1094: left promiscuous mode [ 1777.015502][T30133] bond93 (unregistering): Released all slaves 21:53:53 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x139840, 0x0) [ 1777.046601][T30147] bond1732: entered promiscuous mode 21:53:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0xc000000}, 0x0) 21:53:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010200000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1777.085775][T30258] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 21:53:53 executing program 3: syz_clone(0x40284000, &(0x7f0000000580), 0x0, 0x0, 0x0, &(0x7f0000000680)) [ 1777.114194][T30258] bond93: entered promiscuous mode [ 1777.116238][T30260] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1777.150551][T30260] bond1733: entered promiscuous mode [ 1777.167935][T30258] 8021q: adding VLAN 0 to HW filter on device batadv1095 21:53:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010300000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1777.172387][T30258] batadv1095: entered promiscuous mode [ 1777.178231][T30258] bond93: (slave batadv1095): Enslaving as an active interface with an up link [ 1777.197827][T30265] bond93 (unregistering): (slave batadv1095): Releasing backup interface [ 1777.217341][ T6170] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1777.251447][T30265] batadv1095: left promiscuous mode [ 1777.262082][T30265] bond93 (unregistering): Released all slaves [ 1777.294311][T30267] bond1734: entered promiscuous mode 21:53:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010400000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0xd000000}, 0x0) [ 1777.380728][T30272] bond1735: entered promiscuous mode 21:53:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010500000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1777.412439][T30275] bond93: entered promiscuous mode [ 1777.441133][T30275] 8021q: adding VLAN 0 to HW filter on device batadv1096 [ 1777.458671][T30275] batadv1096: entered promiscuous mode [ 1777.461265][T30275] bond93: (slave batadv1096): Enslaving as an active interface with an up link 21:53:53 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) [ 1777.495789][T30278] bond1736: entered promiscuous mode [ 1777.504185][T30275] bond93 (unregistering): (slave batadv1096): Releasing backup interface 21:53:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010600000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:53 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28}) [ 1777.570061][T30275] batadv1096: left promiscuous mode [ 1777.577718][ T6170] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1777.580342][ T6170] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1777.584100][T30275] bond93 (unregistering): Released all slaves 21:53:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x4b70, 0x0) [ 1777.619634][T30281] bond1737: entered promiscuous mode 21:53:53 executing program 3: syz_open_dev$ptys(0xc, 0x3, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) 21:53:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010700000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:53 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x1c2) [ 1777.690894][T30293] bond1738: entered promiscuous mode 21:53:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0xe000000}, 0x0) [ 1777.697426][ T6170] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1777.699801][ T6170] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1777.701865][ T6170] usb 1-1: Manufacturer: syz [ 1777.703005][ T6170] usb 1-1: SerialNumber: syz 21:53:53 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1]) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) 21:53:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010800000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1777.762141][T30299] bond93: entered promiscuous mode 21:53:53 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 21:53:53 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x1e, 0x1, &(0x7f00000001c0)=@raw=[@exit], 0x0}, 0x90) [ 1777.784677][T30304] bond1739: entered promiscuous mode 21:53:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010900000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:53 executing program 3: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x220180, 0x0) 21:53:53 executing program 3: futex_waitv(&(0x7f00000007c0)=[{0x0, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000000940)={0x77359400}, 0x0) [ 1777.878596][T30136] syz-executor.1 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=2, oom_score_adj=1000 [ 1777.894898][T30136] CPU: 1 PID: 30136 Comm: syz-executor.1 Tainted: G B 6.8.0-rc4-syzkaller-g905b00721763 #0 [ 1777.898020][T30136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1777.900748][T30136] Call trace: [ 1777.901621][T30136] dump_backtrace+0x1b8/0x1e4 [ 1777.902868][T30136] show_stack+0x2c/0x3c [ 1777.904006][T30136] dump_stack_lvl+0xd0/0x124 [ 1777.905208][T30136] dump_stack+0x1c/0x28 [ 1777.906299][T30136] dump_header+0xac/0x5f4 [ 1777.907468][T30136] oom_kill_process+0x324/0x9a4 [ 1777.908780][T30136] out_of_memory+0xd5c/0x1014 [ 1777.910029][T30136] mem_cgroup_out_of_memory+0x250/0x324 [ 1777.911524][T30136] try_charge_memcg+0xaf4/0x148c [ 1777.912839][T30136] obj_cgroup_charge+0x174/0x29c [ 1777.914149][T30136] __memcg_slab_pre_alloc_hook+0x290/0x2cc [ 1777.915693][T30136] __kmalloc_node_track_caller+0x3f8/0x620 [ 1777.917247][T30136] kmemdup+0x44/0x80 [ 1777.918292][T30136] __devinet_sysctl_register+0xbc/0x23c [ 1777.919776][T30136] devinet_sysctl_register+0x158/0x1dc [ 1777.921217][T30136] inetdev_init+0x244/0x484 [ 1777.922439][T30136] inetdev_event+0xee4/0x12dc [ 1777.923672][T30136] notifier_call_chain+0x1a4/0x510 [ 1777.925021][T30136] raw_notifier_call_chain+0x3c/0x50 [ 1777.926414][T30136] call_netdevice_notifiers+0x13c/0x1bc [ 1777.927944][T30136] register_netdevice+0xd4c/0x1108 [ 1777.929299][T30136] bond_newlink+0x50/0xa8 [ 1777.930398][T30136] rtnl_newlink+0x1184/0x1bcc [ 1777.931663][T30136] rtnetlink_rcv_msg+0x748/0xdbc [ 1777.932948][T30136] netlink_rcv_skb+0x214/0x3c4 [ 1777.934177][T30136] rtnetlink_rcv+0x28/0x38 [ 1777.935333][T30136] netlink_unicast+0x65c/0x898 [ 1777.936567][T30136] netlink_sendmsg+0x83c/0xb20 [ 1777.937820][T30136] ____sys_sendmsg+0x56c/0x840 [ 1777.939112][T30136] __sys_sendmsg+0x26c/0x33c [ 1777.940398][T30136] __arm64_sys_sendmsg+0x80/0x94 [ 1777.941714][T30136] invoke_syscall+0x98/0x2b8 [ 1777.942904][T30136] el0_svc_common+0x130/0x23c [ 1777.944197][T30136] do_el0_svc+0x48/0x58 [ 1777.945306][T30136] el0_svc+0x54/0x158 [ 1777.946362][T30136] el0t_64_sync_handler+0x84/0xfc [ 1777.947721][T30136] el0t_64_sync+0x190/0x194 [ 1777.952183][T30136] memory: usage 307200kB, limit 307200kB, failcnt 19186 [ 1777.953996][T30136] memory+swap: usage 309260kB, limit 9007199254740988kB, failcnt 0 [ 1777.955961][T30136] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 1777.959379][T30136] Memory cgroup stats for /syz1: [ 1777.959468][T30136] cache 28672 [ 1777.961549][T30136] rss 0 [ 1777.962223][T30136] rss_huge 0 [ 1777.963029][T30136] shmem 0 [ 1777.963771][T30136] mapped_file 0 [ 1777.964634][T30136] dirty 16384 [ 1777.965445][T30136] writeback 0 [ 1777.966226][T30136] workingset_refault_anon 9578 [ 1777.968956][T30136] workingset_refault_file 22 [ 1777.970154][T30136] swap 2109440 [ 1777.971009][T30136] swapcached 0 [ 1777.971824][T30136] pgpgin 1248090 [ 1777.972700][T30136] pgpgout 1252680 [ 1777.973579][T30136] pgfault 1478330 [ 1777.974487][T30136] pgmajfault 9165 [ 1777.975402][T30136] inactive_anon 0 [ 1777.976245][T30136] active_anon 0 [ 1777.977140][T30136] inactive_file 24576 [ 1777.978196][ T6170] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 1777.978983][ T6170] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input272 [ 1777.982825][T30136] active_file 12288 [ 1777.983868][T30136] unevictable 0 [ 1777.984801][T30136] hierarchical_memory_limit 314572800 [ 1777.986241][T30136] hierarchical_memsw_limit 9223372036854771712 [ 1777.988027][T30136] total_cache 28672 [ 1777.988970][T30136] total_rss 0 [ 1777.989889][T30136] total_rss_huge 0 [ 1777.990804][T30136] total_shmem 0 [ 1777.991745][T30136] total_mapped_file 0 [ 1777.992732][T30136] total_dirty 16384 [ 1777.993826][T30136] total_writeback 0 [ 1777.994731][T30136] total_workingset_refault_anon 9578 [ 1777.996112][T30136] total_workingset_refault_file 22 [ 1777.997664][T30136] total_swap 2109440 [ 1777.998785][T30136] total_swapcached 0 [ 1777.999755][T30136] total_pgpgin 1248090 [ 1778.000903][T30136] total_pgpgout 1252680 [ 1778.002038][T30136] total_pgfault 1478330 [ 1778.003208][T30136] total_pgmajfault 9165 [ 1778.004355][T30136] total_inactive_anon 0 [ 1778.005508][T30136] total_active_anon 0 [ 1778.006603][T30136] total_inactive_file 24576 [ 1778.007941][T30136] total_active_file 12288 [ 1778.009169][T30136] total_unevictable 0 [ 1778.010283][T30136] anon_cost 0 [ 1778.011137][T30136] file_cost 2 [ 1778.012089][T30136] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=30130,uid=0 [ 1778.016324][T30136] Memory cgroup out of memory: Killed process 30130 (syz-executor.1) total-vm:54640kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1778.029448][T30136] bond2015 (unregistering): Released all slaves [ 1778.043503][T30299] 8021q: adding VLAN 0 to HW filter on device batadv1097 [ 1778.046712][T30299] batadv1097: entered promiscuous mode [ 1778.051541][T30299] bond93: (slave batadv1097): Enslaving as an active interface with an up link [ 1778.066876][T30312] bond1740: entered promiscuous mode [ 1778.078870][T30313] bond93 (unregistering): (slave batadv1097): Releasing backup interface [ 1778.119312][T30313] batadv1097: left promiscuous mode [ 1778.128710][T30313] bond93 (unregistering): Released all slaves [ 1778.998295][T20957] usb 1-1: USB disconnect, device number 76 21:53:54 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090587e3"], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, &(0x7f0000000000)={0x40, 0x1, 0x39, {0x39, 0x10, "8241fa49bc32a6fb80850fb34d993c43e502bf77e1f261551a6c454dfea4e65c79fc6f90fdc632fb2fb24743e53ad5d4519e21801cbb88"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x415}}, &(0x7f0000000080)={0x0, 0x22, 0x15, {[@global=@item_4={0x3, 0x1, 0x2, "4dd5566d"}, @local=@item_012={0x2, 0x2, 0x0, "0be5"}, @local=@item_4={0x3, 0x2, 0xa, "ea190284"}, @local=@item_012={0x2, 0x2, 0x4, "ae12"}, @main=@item_4={0x3, 0x0, 0xb, "5ec125f9"}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3ff, 0x84, 0x1, {0x22, 0x81b}}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)={0x20, 0xa, 0x90, "e1024edda01c6eb49681e42a95af1e28534fbea0c2ab94ce0c2d4ca080f0ee73f9f9638f8e38703c0c2aed8b6d865c8c23b739445fae9970b182b8c19eb10dc11e3f067f58cf22784f71ae0780351e328db6743f4b3668328f91fccdd3b249b75db80e600ba9ab75a4b0c643b0df052dfe9a5b55653de5889a98b7c2b0d1c04df370fc5b461ed078e80b4ab65609eaa9"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000002c0)={0x20, 0x1, 0xac, "bc083ace86c0e6db955ffc46517a90322e5221bffd8b1e6b57643a6ce623f2e2a26e17e1f4c12c87d90e162c31cd4d668df9aefc2e43dd7730d17d080fd4d4e53fa1fc7cc78be8afe91db4ea1496fd211157d4c4a8954c222275ad04ec86d6af8635753a32c38870432d4fc3f131aca2d7e364b5255c2d6100b771e832a517a1d87b810f36b30f0f0f606570b3f617628f202be9a2b6304bababcc6718f5b8fec12fe8a2cb3543d99e8ca3fb"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x8}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 21:53:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0xf000000}, 0x0) 21:53:54 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="25062dbd7000ffdb040004"], 0x24}}, 0x0) 21:53:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010a00000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6e01}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1779.010390][T30430] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1779.017277][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -2 21:53:55 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff}) [ 1779.046011][T30434] validate_nla: 10 callbacks suppressed [ 1779.046027][T30434] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 21:53:55 executing program 3: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0xfffffffd}, 0x8) [ 1779.075824][T30434] bond93: entered promiscuous mode [ 1779.081442][T30438] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1779.101063][T30438] bond1741: entered promiscuous mode 21:53:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010b00000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1779.114999][T30434] 8021q: adding VLAN 0 to HW filter on device batadv1098 21:53:55 executing program 3: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x48) [ 1779.120500][T30434] batadv1098: entered promiscuous mode [ 1779.122776][T30434] bond93: (slave batadv1098): Enslaving as an active interface with an up link 21:53:55 executing program 3: socketpair(0x1e, 0x0, 0x9, &(0x7f0000000040)) [ 1779.148789][T30434] bond93 (unregistering): (slave batadv1098): Releasing backup interface 21:53:55 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@map, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 1779.189631][T30434] batadv1098: left promiscuous mode [ 1779.197084][T30434] bond93 (unregistering): Released all slaves 21:53:55 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 1779.222447][T30446] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1779.255497][T30446] bond1742: entered promiscuous mode 21:53:55 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x5451, 0x0) 21:53:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x10000000}, 0x0) 21:53:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010c00000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1779.311148][T30458] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 21:53:55 executing program 3: futex_waitv(&(0x7f0000001a00)=[{0x0, &(0x7f0000000000)=0x5, 0x82}, {0x0, &(0x7f0000000200), 0x2}], 0x2, 0x0, 0x0, 0x0) [ 1779.341827][T30458] bond93: entered promiscuous mode [ 1779.344539][T30460] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:53:55 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@map, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 1779.378128][T30460] bond1743: entered promiscuous mode 21:53:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010d00000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1779.411348][T30458] 8021q: adding VLAN 0 to HW filter on device batadv1099 21:53:55 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x4b2f, 0x0) [ 1779.418979][T30458] batadv1099: entered promiscuous mode [ 1779.421659][T30458] bond93: (slave batadv1099): Enslaving as an active interface with an up link [ 1779.437765][T20957] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1779.438046][T30467] bond93 (unregistering): (slave batadv1099): Releasing backup interface 21:53:55 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f00000000c0)=@framed={{}, [@generic={0x7f}]}, &(0x7f0000000100)='syzkaller\x00', 0x7}, 0x90) [ 1779.479285][T30467] batadv1099: left promiscuous mode [ 1779.488924][T30467] bond93 (unregistering): Released all slaves [ 1779.500296][T30471] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:53:55 executing program 3: futex_waitv(&(0x7f0000001a00)=[{0x0, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000002400), 0x0) [ 1779.527719][T30471] bond1744: entered promiscuous mode 21:53:55 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000002c0)={0x28, 0x0, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000}) ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000180)={0x8, r3}) 21:53:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010e00000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1779.555384][T30478] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:53:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x11000000}, 0x0) 21:53:55 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x4b3c, 0x0) [ 1779.595031][T30478] bond1745: entered promiscuous mode [ 1779.600575][T30483] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 21:53:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010f00000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:55 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5}, 0x48) [ 1779.631209][T30483] bond93: entered promiscuous mode [ 1779.646991][T30483] 8021q: adding VLAN 0 to HW filter on device batadv1100 [ 1779.651073][T30483] batadv1100: entered promiscuous mode [ 1779.655870][T30483] bond93: (slave batadv1100): Enslaving as an active interface with an up link [ 1779.658687][T30489] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:53:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000026003f6fcb9de82ac2de002dbd7000ff", @ANYRES32, @ANYBLOB="0c0004000200f3ff0d00ffff04000a"], 0x2c}}, 0x0) [ 1779.682912][T30489] bond1746: entered promiscuous mode [ 1779.691835][T30483] bond93 (unregistering): (slave batadv1100): Releasing backup interface 21:53:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00011000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1779.729201][T30483] batadv1100: left promiscuous mode [ 1779.740083][T30483] bond93 (unregistering): Released all slaves [ 1779.757750][T30493] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1779.761231][T30496] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:53:55 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x5460, 0x0) [ 1779.795582][T30496] bond1747: entered promiscuous mode 21:53:55 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) recvfrom$rxrpc(r0, 0x0, 0x0, 0x40014163, 0x0, 0x0) 21:53:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x12000000}, 0x0) [ 1779.817346][T20957] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1779.820235][T20957] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1779.852528][T30503] bond93: entered promiscuous mode [ 1779.900375][T30503] 8021q: adding VLAN 0 to HW filter on device batadv1101 [ 1779.908307][T30503] batadv1101: entered promiscuous mode [ 1779.912147][T30503] bond93: (slave batadv1101): Enslaving as an active interface with an up link [ 1779.933597][T30503] bond93 (unregistering): (slave batadv1101): Releasing backup interface [ 1779.937593][T20957] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1779.939961][T20957] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1779.942224][T20957] usb 1-1: Manufacturer: syz [ 1779.944508][T20957] usb 1-1: SerialNumber: syz [ 1779.989146][T30503] batadv1101: left promiscuous mode [ 1779.996897][T30503] bond93 (unregistering): Released all slaves [ 1780.126834][T30432] syz-executor.1 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 1780.134238][T30432] CPU: 0 PID: 30432 Comm: syz-executor.1 Tainted: G B 6.8.0-rc4-syzkaller-g905b00721763 #0 [ 1780.137030][T30432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1780.139586][T30432] Call trace: [ 1780.140413][T30432] dump_backtrace+0x1b8/0x1e4 [ 1780.141655][T30432] show_stack+0x2c/0x3c [ 1780.142707][T30432] dump_stack_lvl+0xd0/0x124 [ 1780.143857][T30432] dump_stack+0x1c/0x28 [ 1780.144946][T30432] dump_header+0xac/0x5f4 [ 1780.146009][T30432] oom_kill_process+0x324/0x9a4 [ 1780.147278][T30432] out_of_memory+0xd5c/0x1014 [ 1780.148504][T30432] mem_cgroup_out_of_memory+0x250/0x324 [ 1780.149938][T30432] try_charge_memcg+0xaf4/0x148c [ 1780.151181][T30432] obj_cgroup_charge+0x174/0x29c [ 1780.152426][T30432] __memcg_slab_pre_alloc_hook+0x290/0x2cc [ 1780.153914][T30432] __kmalloc_node_track_caller+0x3f8/0x620 [ 1780.155409][T30432] kmemdup+0x44/0x80 [ 1780.156426][T30432] neigh_sysctl_register+0xc4/0x8ec [ 1780.157753][T30432] devinet_sysctl_register+0xb8/0x1dc [ 1780.159083][T30432] inetdev_init+0x244/0x484 [ 1780.160328][T30432] inetdev_event+0xee4/0x12dc [ 1780.161544][T30432] notifier_call_chain+0x1a4/0x510 [ 1780.162823][T30432] raw_notifier_call_chain+0x3c/0x50 [ 1780.164225][T30432] call_netdevice_notifiers+0x13c/0x1bc [ 1780.165574][T30432] register_netdevice+0xd4c/0x1108 [ 1780.166911][T30432] bond_newlink+0x50/0xa8 [ 1780.167967][T30432] rtnl_newlink+0x1184/0x1bcc [ 1780.169110][T30432] rtnetlink_rcv_msg+0x748/0xdbc [ 1780.170336][T30432] netlink_rcv_skb+0x214/0x3c4 [ 1780.171542][T30432] rtnetlink_rcv+0x28/0x38 [ 1780.172579][T30432] netlink_unicast+0x65c/0x898 [ 1780.173780][T30432] netlink_sendmsg+0x83c/0xb20 [ 1780.175067][T30432] ____sys_sendmsg+0x56c/0x840 [ 1780.176334][T30432] __sys_sendmsg+0x26c/0x33c [ 1780.177512][T30432] __arm64_sys_sendmsg+0x80/0x94 [ 1780.178727][T30432] invoke_syscall+0x98/0x2b8 [ 1780.179898][T30432] el0_svc_common+0x130/0x23c [ 1780.181116][T30432] do_el0_svc+0x48/0x58 [ 1780.182165][T30432] el0_svc+0x54/0x158 [ 1780.183197][T30432] el0t_64_sync_handler+0x84/0xfc [ 1780.184469][T30432] el0t_64_sync+0x190/0x194 [ 1780.189988][T30432] memory: usage 307200kB, limit 307200kB, failcnt 22630 [ 1780.191804][T30432] memory+swap: usage 309244kB, limit 9007199254740988kB, failcnt 0 [ 1780.193713][T30432] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0 [ 1780.195585][T30432] Memory cgroup stats for /syz1: [ 1780.195683][T30432] cache 28672 [ 1780.207053][T30432] rss 4096 [ 1780.209102][T30432] rss_huge 0 [ 1780.209907][T30432] shmem 0 [ 1780.212323][T30432] mapped_file 0 [ 1780.214374][T30432] dirty 16384 [ 1780.215203][T30432] writeback 4096 [ 1780.220823][T20957] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 1780.222797][T30432] workingset_refault_anon 12029 [ 1780.224020][T30432] workingset_refault_file 22 [ 1780.225210][T30432] swap 2097152 [ 1780.226127][T30432] swapcached 8192 [ 1780.227028][T30432] pgpgin 1250561 [ 1780.228387][T20957] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input273 [ 1780.236188][T30432] pgpgout 1255149 [ 1780.237164][T30432] pgfault 1481395 [ 1780.240330][T30432] pgmajfault 11371 [ 1780.241301][T30432] inactive_anon 8192 [ 1780.244140][T30432] active_anon 0 [ 1780.245058][T30432] inactive_file 32768 [ 1780.246399][T30432] active_file 4096 [ 1780.249135][T30432] unevictable 0 [ 1780.250042][T30432] hierarchical_memory_limit 314572800 [ 1780.251334][T30432] hierarchical_memsw_limit 9223372036854771712 [ 1780.252901][T30432] total_cache 28672 [ 1780.253807][T30432] total_rss 4096 [ 1780.254677][T30432] total_rss_huge 0 [ 1780.255644][T30432] total_shmem 0 [ 1780.256493][T30432] total_mapped_file 0 [ 1780.258637][T30432] total_dirty 16384 [ 1780.259634][T30432] total_writeback 4096 [ 1780.262099][T30432] total_workingset_refault_anon 12029 [ 1780.265137][T30432] total_workingset_refault_file 22 [ 1780.268513][T30432] total_swap 2097152 [ 1780.271223][T30432] total_swapcached 8192 [ 1780.273988][T30432] total_pgpgin 1250561 [ 1780.274974][T30432] total_pgpgout 1255149 [ 1780.277061][T30432] total_pgfault 1481395 [ 1780.279524][T30432] total_pgmajfault 11371 [ 1780.281593][T30432] total_inactive_anon 8192 [ 1780.282730][T30432] total_active_anon 0 [ 1780.283692][T30432] total_inactive_file 32768 [ 1780.284793][T30432] total_active_file 4096 [ 1780.285850][T30432] total_unevictable 0 [ 1780.286805][T30432] anon_cost 0 [ 1780.289049][T30432] file_cost 2 [ 1780.289940][T30432] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=30429,uid=0 [ 1780.295508][T30432] Memory cgroup out of memory: Killed process 30429 (syz-executor.1) total-vm:54448kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1780.338442][T30432] bond2015 (unregistering): Released all slaves [ 1783.017295][ C1] yealink 1-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1783.218147][T21206] usb 1-1: USB disconnect, device number 77 21:53:59 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090587e3"], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, &(0x7f0000000000)={0x40, 0x1, 0x39, {0x39, 0x10, "8241fa49bc32a6fb80850fb34d993c43e502bf77e1f261551a6c454dfea4e65c79fc6f90fdc632fb2fb24743e53ad5d4519e21801cbb88"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x415}}, &(0x7f0000000080)={0x0, 0x22, 0x15, {[@global=@item_4={0x3, 0x1, 0x2, "4dd5566d"}, @local=@item_012={0x2, 0x2, 0x0, "0be5"}, @local=@item_4={0x3, 0x2, 0xa, "ea190284"}, @local=@item_012={0x2, 0x2, 0x4, "ae12"}, @main=@item_4={0x3, 0x0, 0xb, "5ec125f9"}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3ff, 0x84, 0x1, {0x22, 0x81b}}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)={0x20, 0xa, 0x90, "e1024edda01c6eb49681e42a95af1e28534fbea0c2ab94ce0c2d4ca080f0ee73f9f9638f8e38703c0c2aed8b6d865c8c23b739445fae9970b182b8c19eb10dc11e3f067f58cf22784f71ae0780351e328db6743f4b3668328f91fccdd3b249b75db80e600ba9ab75a4b0c643b0df052dfe9a5b55653de5889a98b7c2b0d1c04df370fc5b461ed078e80b4ab65609eaa9"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000002c0)={0x20, 0x1, 0xac, "bc083ace86c0e6db955ffc46517a90322e5221bffd8b1e6b57643a6ce623f2e2a26e17e1f4c12c87d90e162c31cd4d668df9aefc2e43dd7730d17d080fd4d4e53fa1fc7cc78be8afe91db4ea1496fd211157d4c4a8954c222275ad04ec86d6af8635753a32c38870432d4fc3f131aca2d7e364b5255c2d6100b771e832a517a1d87b810f36b30f0f0f606570b3f617628f202be9a2b6304bababcc6718f5b8fec12fe8a2cb3543d99e8ca3fb"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x8}}) (async, rerun: 64) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 21:53:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00011100000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:53:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x18000000}, 0x0) 21:53:59 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x48) 21:53:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6e02}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1783.762583][T30508] bond1748: entered promiscuous mode 21:53:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000001c0)={0x10, 0xfffffffffffffe89, 0xfa00, {&(0x7f0000000040), 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x38) 21:53:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00011200000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1783.782487][T30510] bond93: entered promiscuous mode [ 1783.806575][T30510] 8021q: adding VLAN 0 to HW filter on device batadv1102 21:53:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "887cef8a04e5dccf2f79ea9f685f1907311601e7eb83cef9fea82031f47fc3ff"}}) [ 1783.812139][T30510] batadv1102: entered promiscuous mode [ 1783.818831][T30510] bond93: (slave batadv1102): Enslaving as an active interface with an up link [ 1783.837821][T30522] bond1749: entered promiscuous mode 21:53:59 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8940, &(0x7f0000000000)) [ 1783.844124][T30510] bond93 (unregistering): (slave batadv1102): Releasing backup interface 21:53:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00011800000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1783.879302][T30510] batadv1102: left promiscuous mode [ 1783.891297][T30510] bond93 (unregistering): Released all slaves 21:53:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x20000000}, 0x0) [ 1783.961822][T22512] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1783.970095][T30516] syz-executor.1: vmalloc error: size 4096, failed to allocate pages, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_RETRY_MAYFAIL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 1783.980252][T22512] CPU: 1 PID: 22512 Comm: syz-executor.1 Tainted: G B 6.8.0-rc4-syzkaller-g905b00721763 #0 [ 1783.983000][T22512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1783.985661][T22512] Call trace: [ 1783.986447][T22512] dump_backtrace+0x1b8/0x1e4 [ 1783.987695][T22512] show_stack+0x2c/0x3c [ 1783.988740][T22512] dump_stack_lvl+0xd0/0x124 [ 1783.989863][T22512] dump_stack+0x1c/0x28 [ 1783.990888][T22512] dump_header+0xac/0x5f4 [ 1783.991921][T22512] oom_kill_process+0x324/0x9a4 [ 1783.993143][T22512] out_of_memory+0xd5c/0x1014 [ 1783.994411][T22512] mem_cgroup_out_of_memory+0x250/0x324 [ 1783.995861][T22512] try_charge_memcg+0xaf4/0x148c [ 1783.997142][T22512] mem_cgroup_swapin_charge_folio+0x2e8/0x4e0 [ 1783.998712][T22512] __read_swap_cache_async+0x428/0x6a4 [ 1784.000189][T22512] swapin_readahead+0xb90/0xde8 [ 1784.001456][T22512] do_swap_page+0x4b0/0x257c [ 1784.002613][T22512] handle_mm_fault+0xfec/0x546c [ 1784.003853][T22512] do_page_fault+0x4f8/0xa64 [ 1784.005069][T22512] do_translation_fault+0x94/0xc8 [ 1784.006355][T22512] do_mem_abort+0x74/0x200 [ 1784.007473][T22512] el1_abort+0x3c/0x5c [ 1784.008518][T22512] el1h_64_sync_handler+0x60/0xac [ 1784.009804][T22512] el1h_64_sync+0x64/0x68 [ 1784.010957][T22512] __rseq_handle_notify_resume+0x318/0x19c8 [ 1784.012469][T22512] do_notify_resume+0x1938/0x393c [ 1784.013729][T22512] el0_da+0xac/0x168 [ 1784.014698][T22512] el0t_64_sync_handler+0xcc/0xfc [ 1784.015952][T22512] el0t_64_sync+0x190/0x194 [ 1784.018996][T22512] memory: usage 307200kB, limit 307200kB, failcnt 23479 [ 1784.021151][T22512] memory+swap: usage 309264kB, limit 9007199254740988kB, failcnt 0 [ 1784.023310][T22512] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0 [ 1784.025475][T22512] Memory cgroup stats for /syz1: [ 1784.025565][T22512] cache 28672 [ 1784.027421][T20034] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1784.028817][T22512] rss 8192 [ 1784.030909][T22512] rss_huge 0 [ 1784.031745][T22512] shmem 0 [ 1784.032622][T22512] mapped_file 0 [ 1784.033450][T22512] dirty 16384 [ 1784.034453][T22512] writeback 0 [ 1784.035286][T22512] workingset_refault_anon 12406 [ 1784.036758][T22512] workingset_refault_file 22 [ 1784.038837][T22512] swap 2113536 [ 1784.039865][T22512] swapcached 8192 [ 1784.040977][T22512] pgpgin 1250960 [ 1784.041863][T22512] pgpgout 1255548 [ 1784.042939][T30516] CPU: 1 PID: 30516 Comm: syz-executor.1 Tainted: G B 6.8.0-rc4-syzkaller-g905b00721763 #0 [ 1784.045748][T30516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1784.048343][T30516] Call trace: [ 1784.049178][T30516] dump_backtrace+0x1b8/0x1e4 [ 1784.050395][T30516] show_stack+0x2c/0x3c [ 1784.051482][T30516] dump_stack_lvl+0xd0/0x124 [ 1784.052629][T30516] dump_stack+0x1c/0x28 [ 1784.053709][T30516] warn_alloc+0x220/0x3a4 [ 1784.054808][T30516] __vmalloc_node_range+0xcc0/0xec0 [ 1784.056113][T30516] kvmalloc_node+0x158/0x1cc [ 1784.057309][T30516] alloc_netdev_mqs+0xac/0xc58 [ 1784.058485][T30516] rtnl_create_link+0x2bc/0xc8c [ 1784.059691][T30516] rtnl_newlink+0x10d4/0x1bcc [ 1784.060911][T30516] rtnetlink_rcv_msg+0x748/0xdbc [ 1784.062159][T30516] netlink_rcv_skb+0x214/0x3c4 [ 1784.063425][T30516] rtnetlink_rcv+0x28/0x38 [ 1784.064558][T30516] netlink_unicast+0x65c/0x898 [ 1784.065791][T30516] netlink_sendmsg+0x83c/0xb20 [ 1784.067053][T30516] ____sys_sendmsg+0x56c/0x840 [ 1784.068230][T30516] __sys_sendmsg+0x26c/0x33c [ 1784.069376][T30516] __arm64_sys_sendmsg+0x80/0x94 [ 1784.070631][T30516] invoke_syscall+0x98/0x2b8 [ 1784.071728][T30516] el0_svc_common+0x130/0x23c [ 1784.073005][T30516] do_el0_svc+0x48/0x58 [ 1784.074071][T30516] el0_svc+0x54/0x158 [ 1784.075134][T30516] el0t_64_sync_handler+0x84/0xfc [ 1784.076494][T30516] el0t_64_sync+0x190/0x194 [ 1784.081068][T22512] pgfault 1481982 [ 1784.082402][T22512] pgmajfault 11731 [ 1784.083717][T22512] inactive_anon 0 [ 1784.084824][T22512] active_anon 4096 [ 1784.085721][T22512] inactive_file 0 [ 1784.086771][T22512] active_file 36864 [ 1784.088481][T22512] unevictable 0 [ 1784.089559][T22512] hierarchical_memory_limit 314572800 [ 1784.091049][T22512] hierarchical_memsw_limit 9223372036854771712 [ 1784.092802][T22512] total_cache 28672 [ 1784.093697][T22512] total_rss 8192 [ 1784.094770][T22512] total_rss_huge 0 [ 1784.095666][T22512] total_shmem 0 [ 1784.096682][T22512] total_mapped_file 0 [ 1784.098598][T22512] total_dirty 16384 [ 1784.099765][T22512] total_writeback 0 [ 1784.100732][T22512] total_workingset_refault_anon 12406 [ 1784.102370][T22512] total_workingset_refault_file 22 [ 1784.103798][T22512] total_swap 2113536 [ 1784.104931][T22512] total_swapcached 8192 [ 1784.106126][T22512] total_pgpgin 1250960 [ 1784.107804][T22512] total_pgpgout 1255548 [ 1784.109095][T22512] total_pgfault 1481982 [ 1784.110274][T22512] total_pgmajfault 11731 [ 1784.111465][T22512] total_inactive_anon 0 [ 1784.112705][T22512] total_active_anon 4096 [ 1784.113849][T22512] total_inactive_file 0 [ 1784.115011][T22512] total_active_file 36864 [ 1784.116234][T22512] total_unevictable 0 [ 1784.117182][T22512] anon_cost 1 [ 1784.118913][T22512] file_cost 2 [ 1784.119962][T22512] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=30512,uid=0 [ 1784.124337][T30516] Mem-Info: [ 1784.125142][T30516] active_anon:3156 inactive_anon:189234 isolated_anon:0 [ 1784.125142][T30516] active_file:4775 inactive_file:6501 isolated_file:0 [ 1784.125142][T30516] unevictable:0 dirty:43 writeback:0 [ 1784.125142][T30516] slab_reclaimable:14083 slab_unreclaimable:689812 [ 1784.125142][T30516] mapped:21671 shmem:9687 pagetables:2128 [ 1784.125142][T30516] sec_pagetables:0 bounce:0 [ 1784.125142][T30516] kernel_misc_reclaimable:0 [ 1784.125142][T30516] free:637713 free_pcp:804 free_cma:7362 [ 1784.137210][T22512] Memory cgroup out of memory: Killed process 30512 (syz-executor.1) total-vm:54832kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1784.144840][T30516] Node 0 active_anon:12624kB inactive_anon:756936kB active_file:19100kB inactive_file:26004kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:86684kB dirty:172kB writeback:0kB shmem:38748kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:135168kB pagetables:8512kB sec_pagetables:0kB all_unreclaimable? no [ 1784.153639][T30516] Node 0 DMA free:2465512kB boost:0kB min:20624kB low:25780kB high:30936kB reserved_highatomic:0KB active_anon:132kB inactive_anon:2536kB active_file:268kB inactive_file:156kB unevictable:0kB writepending:8kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:1680kB local_pcp:856kB free_cma:29448kB [ 1784.162157][T30516] lowmem_reserve[]: 0 0 3562 3562 3562 [ 1784.163800][T30516] Node 0 Normal free:85340kB boost:54952kB min:79380kB low:85484kB high:91588kB reserved_highatomic:0KB active_anon:12492kB inactive_anon:754400kB active_file:18832kB inactive_file:25848kB unevictable:0kB writepending:164kB present:5242880kB managed:3652364kB mlocked:0kB bounce:0kB free_pcp:1728kB local_pcp:840kB free_cma:0kB [ 1784.172100][T30516] lowmem_reserve[]: 0 0 0 0 0 [ 1784.173583][T30516] Node 0 DMA: 146*4kB (UME) 194*8kB (UMEC) 29*16kB (UME) 30*32kB (ME) 16*64kB (UME) 10*128kB (ME) 6*256kB (UMEC) 7*512kB (UMC) 7*1024kB (UME) 3*2048kB (UME) 596*4096kB (MC) = 2465512kB [ 1784.178918][T30516] Node 0 Normal: 2307*4kB (UME) 2876*8kB (UME) 1895*16kB (UM) 668*32kB (UM) 22*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 85340kB [ 1784.183158][T30516] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1784.185792][T30516] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 1784.189406][T30516] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1784.192043][T30516] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 1784.194559][T30516] 20586 total pagecache pages [ 1784.195928][T30516] 14 pages in swap cache [ 1784.197140][T30516] Free swap = 117316kB [ 1784.198899][T30516] Total swap = 124996kB [ 1784.200203][T30516] 2097152 pages RAM [ 1784.201375][T30516] 0 pages HighMem/MovableOnly [ 1784.202757][T30516] 414013 pages reserved [ 1784.203958][T30516] 8192 pages cma reserved [ 1784.205247][T30516] 172 pages hwpoisoned [ 1784.206665][T30531] validate_nla: 6 callbacks suppressed [ 1784.206674][T30531] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:54:00 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040), 0x4) 21:54:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 21:54:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6e03}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1784.239025][T30531] bond1750: entered promiscuous mode [ 1784.243964][T30535] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 21:54:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00012100000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1784.266971][T30535] bond93: entered promiscuous mode [ 1784.284416][T30536] 8021q: adding VLAN 0 to HW filter on device batadv1103 21:54:00 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x101441, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) [ 1784.291450][T30536] batadv1103: entered promiscuous mode [ 1784.299507][T30536] bond93: (slave batadv1103): Enslaving as an active interface with an up link [ 1784.302997][T30554] random: crng reseeded on system resumption [ 1784.314921][T30537] bond93 (unregistering): (slave batadv1103): Releasing backup interface 21:54:00 executing program 3: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x10) [ 1784.352164][T30537] batadv1103: left promiscuous mode [ 1784.359053][T30537] bond93 (unregistering): Released all slaves 21:54:00 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x244080) [ 1784.372346][T30550] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1784.387394][T20034] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1784.390169][T20034] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1784.406485][T30550] bond1751: entered promiscuous mode 21:54:00 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x800, 0xc) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001780)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)=']\xa3$(\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@loopback, @in6=@local}}, {{}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000000300)=0xe8) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getenv(0x420d, r0, 0x403, &(0x7f0000000040)) 21:54:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00012200000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:54:00 executing program 3: r0 = memfd_secret(0x0) bind$802154_raw(r0, 0x0, 0x0) 21:54:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="325de89e6338d09443e76fab40ae5a86", 0x10) [ 1784.477908][T30571] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:54:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x21000000}, 0x0) [ 1784.503208][T30571] bond1752: entered promiscuous mode [ 1784.507872][T20034] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1784.515989][T20034] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 21:54:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00012500000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:54:00 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000900)="1d", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="06", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='htcp\x00', 0x5) sendmmsg$sock(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002000)="1eb7310b7cbfe74bd467135c02a4c978855a56ae077b5fac02b1aa1e0b8401e8264adf52af7322a0b5ad04ba509d480908c8190084f18ae9e4e451308584fdd12697fdf5a7b2708944ba9a9c36541ae132c656cb96a97ed979c220f8656840f0169ff512db4c5df47c88898db3529c", 0x6f}], 0x1}}], 0x1, 0x0) [ 1784.526436][T30576] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1784.529004][T20034] usb 1-1: Manufacturer: syz [ 1784.530210][T20034] usb 1-1: SerialNumber: syz [ 1784.554312][T30576] bond93: entered promiscuous mode [ 1784.559124][T30580] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:54:00 executing program 3: openat$dsp(0xffffff9c, 0x0, 0x8400, 0x0) openat$binderfs(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) [ 1784.592241][T30580] bond1753: entered promiscuous mode 21:54:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'erspan0\x00', 0x0}) [ 1784.616384][T30576] 8021q: adding VLAN 0 to HW filter on device batadv1104 21:54:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00012f00000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1784.625795][T30576] batadv1104: entered promiscuous mode [ 1784.628453][T30576] bond93: (slave batadv1104): Enslaving as an active interface with an up link [ 1784.635949][T30590] bond93 (unregistering): (slave batadv1104): Releasing backup interface [ 1784.678723][T30590] batadv1104: left promiscuous mode [ 1784.684927][T30590] bond93 (unregistering): Released all slaves [ 1784.692039][T30591] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:54:00 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000480)) [ 1784.724236][T30591] bond1754: entered promiscuous mode 21:54:00 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000b40)={'virt_wifi0\x00', 0x4cdd5976}) [ 1784.751127][T30599] virt_wifi0: mtu greater than device maximum 21:54:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00013a00000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:54:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x24000000}, 0x0) [ 1784.779256][T30605] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1784.788294][T20034] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 1784.790858][T20034] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input274 [ 1784.799892][T30605] bond1755: entered promiscuous mode [ 1784.806709][T30608] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1784.810527][ T2251] ieee802154 phy0 wpan0: encryption failed: -22 [ 1784.812253][ T2251] ieee802154 phy1 wpan1: encryption failed: -22 [ 1784.825500][T30608] bond93: entered promiscuous mode [ 1784.834298][T30608] 8021q: adding VLAN 0 to HW filter on device batadv1105 [ 1784.836658][T30608] batadv1105: entered promiscuous mode [ 1784.840097][T30608] bond93: (slave batadv1105): Enslaving as an active interface with an up link [ 1784.846077][T30608] bond93 (unregistering): (slave batadv1105): Releasing backup interface [ 1784.898949][T30608] batadv1105: left promiscuous mode [ 1784.908217][T30608] bond93 (unregistering): Released all slaves [ 1785.126139][T30552] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1785.597491][T20034] usb 1-1: USB disconnect, device number 78 21:54:01 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090587e3"], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, &(0x7f0000000000)={0x40, 0x1, 0x39, {0x39, 0x10, "8241fa49bc32a6fb80850fb34d993c43e502bf77e1f261551a6c454dfea4e65c79fc6f90fdc632fb2fb24743e53ad5d4519e21801cbb88"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x415}}, &(0x7f0000000080)={0x0, 0x22, 0x15, {[@global=@item_4={0x3, 0x1, 0x2, "4dd5566d"}, @local=@item_012={0x2, 0x2, 0x0, "0be5"}, @local=@item_4={0x3, 0x2, 0xa, "ea190284"}, @local=@item_012={0x2, 0x2, 0x4, "ae12"}, @main=@item_4={0x3, 0x0, 0xb, "5ec125f9"}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3ff, 0x84, 0x1, {0x22, 0x81b}}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)={0x20, 0xa, 0x90, "e1024edda01c6eb49681e42a95af1e28534fbea0c2ab94ce0c2d4ca080f0ee73f9f9638f8e38703c0c2aed8b6d865c8c23b739445fae9970b182b8c19eb10dc11e3f067f58cf22784f71ae0780351e328db6743f4b3668328f91fccdd3b249b75db80e600ba9ab75a4b0c643b0df052dfe9a5b55653de5889a98b7c2b0d1c04df370fc5b461ed078e80b4ab65609eaa9"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000002c0)={0x20, 0x1, 0xac, "bc083ace86c0e6db955ffc46517a90322e5221bffd8b1e6b57643a6ce623f2e2a26e17e1f4c12c87d90e162c31cd4d668df9aefc2e43dd7730d17d080fd4d4e53fa1fc7cc78be8afe91db4ea1496fd211157d4c4a8954c222275ad04ec86d6af8635753a32c38870432d4fc3f131aca2d7e364b5255c2d6100b771e832a517a1d87b810f36b30f0f0f606570b3f617628f202be9a2b6304bababcc6718f5b8fec12fe8a2cb3543d99e8ca3fb"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x8}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 21:54:01 executing program 3: r0 = openat$dsp(0xffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) 21:54:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00014800000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:54:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x25000000}, 0x0) [ 1785.607295][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -2 21:54:01 executing program 3: r0 = openat$dsp(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000200)) [ 1785.644661][T30723] bond1756: entered promiscuous mode 21:54:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00014c00000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1785.679641][T30727] bond93: entered promiscuous mode 21:54:01 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="c6d71519140a41929d0ae62776e6bfe2", 0x10) [ 1785.706245][T30734] 8021q: adding VLAN 0 to HW filter on device batadv1106 [ 1785.710815][T30734] batadv1106: entered promiscuous mode [ 1785.720259][T30734] bond93: (slave batadv1106): Enslaving as an active interface with an up link 21:54:01 executing program 3: r0 = openat$qrtrtun(0xffffff9c, &(0x7f00000001c0), 0x0) mmap$qrtrtun(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x104050, r0, 0x0) 21:54:01 executing program 3: r0 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc04c5609, &(0x7f0000001800)=@multiplanar_overlay={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "75e220a7"}, 0x0, 0x3, {0x0}}) [ 1785.743786][T30735] bond1757: entered promiscuous mode [ 1785.760460][T30727] bond93 (unregistering): (slave batadv1106): Releasing backup interface 21:54:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00016000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:54:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @loopback}}}}) [ 1785.799410][T30727] batadv1106: left promiscuous mode [ 1785.807154][T30727] bond93 (unregistering): Released all slaves [ 1785.821706][T30745] bond1758: entered promiscuous mode 21:54:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00016400000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:54:01 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x1a, 0x1, &(0x7f0000000080)=@raw=[@kfunc], &(0x7f0000000140)='GPL\x00'}, 0x90) [ 1785.891439][T30750] bond1759: entered promiscuous mode [ 1786.037331][T20034] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1786.189630][T30552] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1786.206756][T30552] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=2, oom_score_adj=1000 [ 1786.210054][T30552] CPU: 0 PID: 30552 Comm: syz-executor.1 Tainted: G B 6.8.0-rc4-syzkaller-g905b00721763 #0 [ 1786.212815][T30552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1786.215327][T30552] Call trace: [ 1786.216163][T30552] dump_backtrace+0x1b8/0x1e4 [ 1786.217306][T30552] show_stack+0x2c/0x3c [ 1786.218380][T30552] dump_stack_lvl+0xd0/0x124 [ 1786.219562][T30552] dump_stack+0x1c/0x28 [ 1786.220623][T30552] dump_header+0xac/0x5f4 [ 1786.221696][T30552] oom_kill_process+0x324/0x9a4 [ 1786.222946][T30552] out_of_memory+0xd5c/0x1014 [ 1786.224125][T30552] mem_cgroup_out_of_memory+0x250/0x324 [ 1786.225533][T30552] try_charge_memcg+0xaf4/0x148c [ 1786.226698][T30552] obj_cgroup_charge+0x174/0x29c [ 1786.227962][T30552] __memcg_slab_pre_alloc_hook+0x290/0x2cc [ 1786.229411][T30552] kmalloc_trace+0x2bc/0x49c [ 1786.230562][T30552] ipv6_add_dev+0x454/0xee4 [ 1786.231726][T30552] addrconf_notify+0x514/0xce8 [ 1786.232853][T30552] notifier_call_chain+0x1a4/0x510 [ 1786.234120][T30552] raw_notifier_call_chain+0x3c/0x50 [ 1786.235444][T30552] call_netdevice_notifiers+0x13c/0x1bc [ 1786.236864][T30552] register_netdevice+0xd4c/0x1108 [ 1786.238164][T30552] batadv_softif_newlink+0x90/0xa0 [ 1786.239388][T30552] rtnl_newlink+0x1184/0x1bcc [ 1786.240535][T30552] rtnetlink_rcv_msg+0x748/0xdbc [ 1786.241807][T30552] netlink_rcv_skb+0x214/0x3c4 [ 1786.242933][T30552] rtnetlink_rcv+0x28/0x38 [ 1786.244036][T30552] netlink_unicast+0x65c/0x898 [ 1786.245189][T30552] netlink_sendmsg+0x83c/0xb20 [ 1786.246380][T30552] ____sys_sendmsg+0x56c/0x840 [ 1786.247529][T30552] __sys_sendmsg+0x26c/0x33c [ 1786.248661][T30552] __arm64_sys_sendmsg+0x80/0x94 [ 1786.249925][T30552] invoke_syscall+0x98/0x2b8 [ 1786.251102][T30552] el0_svc_common+0x130/0x23c [ 1786.252288][T30552] do_el0_svc+0x48/0x58 [ 1786.253330][T30552] el0_svc+0x54/0x158 [ 1786.254340][T30552] el0t_64_sync_handler+0x84/0xfc [ 1786.255661][T30552] el0t_64_sync+0x190/0x194 [ 1786.256813][ C0] vkms_vblank_simulate: vblank timer overrun [ 1786.260780][T30552] memory: usage 307200kB, limit 307200kB, failcnt 32066 [ 1786.264902][T30552] memory+swap: usage 309248kB, limit 9007199254740988kB, failcnt 0 [ 1786.268350][T30552] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0 [ 1786.270324][T30552] Memory cgroup stats for /syz1: [ 1786.270413][T30552] cache 28672 [ 1786.274437][T30552] rss 4096 [ 1786.276232][T30552] rss_huge 0 [ 1786.278366][T30552] shmem 0 [ 1786.279116][T30552] mapped_file 0 [ 1786.281302][T30552] dirty 16384 [ 1786.282174][T30552] writeback 0 [ 1786.283778][T30552] workingset_refault_anon 18655 [ 1786.286672][T30552] workingset_refault_file 22 [ 1786.290006][T30552] swap 2101248 [ 1786.291871][T30552] swapcached 4096 [ 1786.294255][T30552] pgpgin 1257230 [ 1786.296477][T30552] pgpgout 1261819 [ 1786.298197][T30552] pgfault 1490037 [ 1786.300953][T30552] pgmajfault 17265 [ 1786.301905][T30552] inactive_anon 4096 [ 1786.302952][T30552] active_anon 0 [ 1786.303793][T30552] inactive_file 24576 [ 1786.306978][T30552] active_file 12288 [ 1786.309590][T30552] unevictable 0 [ 1786.311511][T30552] hierarchical_memory_limit 314572800 [ 1786.314677][T30552] hierarchical_memsw_limit 9223372036854771712 [ 1786.319791][T30552] total_cache 28672 [ 1786.320714][T30552] total_rss 4096 [ 1786.329421][T30552] total_rss_huge 0 [ 1786.330447][T30552] total_shmem 0 [ 1786.331286][T30552] total_mapped_file 0 [ 1786.332217][T30552] total_dirty 16384 [ 1786.333162][T30552] total_writeback 0 [ 1786.334076][T30552] total_workingset_refault_anon 18655 [ 1786.335387][T30552] total_workingset_refault_file 22 [ 1786.336603][T30552] total_swap 2101248 [ 1786.355149][T30552] total_swapcached 4096 [ 1786.356212][T30552] total_pgpgin 1257230 [ 1786.357197][T30552] total_pgpgout 1261819 [ 1786.363650][T30552] total_pgfault 1490037 [ 1786.364722][T30552] total_pgmajfault 17265 [ 1786.365798][T30552] total_inactive_anon 4096 [ 1786.366929][T30552] total_active_anon 0 [ 1786.378527][T30552] total_inactive_file 24576 [ 1786.379738][T30552] total_active_file 12288 [ 1786.380746][T30552] total_unevictable 0 [ 1786.381643][T30552] anon_cost 0 [ 1786.382458][T30552] file_cost 1 [ 1786.383219][T30552] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=30546,uid=0 [ 1786.387049][T30552] Memory cgroup out of memory: Killed process 30546 (syz-executor.1) total-vm:54448kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1786.427471][T20034] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1786.430501][T20034] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 21:54:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000100)={0x3}) 21:54:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x40000000}, 0x0) 21:54:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00016800000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:54:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6f00}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1786.479059][T30756] bond93: entered promiscuous mode [ 1786.481836][T22512] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1786.490156][T22512] CPU: 0 PID: 22512 Comm: syz-executor.1 Tainted: G B 6.8.0-rc4-syzkaller-g905b00721763 #0 [ 1786.492979][T22512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1786.495318][T22512] Call trace: [ 1786.496155][T22512] dump_backtrace+0x1b8/0x1e4 [ 1786.497338][T22512] show_stack+0x2c/0x3c [ 1786.498407][T22512] dump_stack_lvl+0xd0/0x124 [ 1786.499675][T22512] dump_stack+0x1c/0x28 [ 1786.500748][T22512] dump_header+0xac/0x5f4 [ 1786.501923][T22512] oom_kill_process+0x324/0x9a4 [ 1786.503244][T22512] out_of_memory+0xd5c/0x1014 [ 1786.504358][T22512] mem_cgroup_out_of_memory+0x250/0x324 [ 1786.505787][T22512] try_charge_memcg+0xaf4/0x148c [ 1786.507020][T22512] obj_cgroup_charge+0x174/0x29c [ 1786.508278][T22512] __memcg_slab_pre_alloc_hook+0x290/0x2cc [ 1786.509746][T22512] kmem_cache_alloc+0x2a8/0x488 [ 1786.510955][T22512] anon_vma_fork+0x190/0x478 [ 1786.512147][T22512] copy_mm+0xb78/0x1bbc [ 1786.513180][T22512] copy_process+0x1980/0x3478 [ 1786.514365][T22512] kernel_clone+0x1d8/0x80c [ 1786.515455][T22512] __arm64_sys_clone+0x1f8/0x24c [ 1786.516695][T22512] invoke_syscall+0x98/0x2b8 [ 1786.517864][T22512] el0_svc_common+0x130/0x23c [ 1786.519021][T22512] do_el0_svc+0x48/0x58 [ 1786.520045][T22512] el0_svc+0x54/0x158 [ 1786.521047][T22512] el0t_64_sync_handler+0x84/0xfc 21:54:02 executing program 3: r0 = openat$dsp(0xffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000240)) [ 1786.522357][T22512] el0t_64_sync+0x190/0x194 [ 1786.523582][ C0] vkms_vblank_simulate: vblank timer overrun [ 1786.527781][T22512] memory: usage 307100kB, limit 307200kB, failcnt 32582 [ 1786.529596][T22512] memory+swap: usage 309152kB, limit 9007199254740988kB, failcnt 0 [ 1786.532767][T22512] kmem: usage 307064kB, limit 9007199254740988kB, failcnt 0 [ 1786.536192][T22512] Memory cgroup stats for /syz1: [ 1786.536299][T22512] cache 28672 [ 1786.541889][T22512] rss 0 [ 1786.542571][T22512] rss_huge 0 [ 1786.544901][T22512] shmem 0 [ 1786.545618][T22512] mapped_file 0 [ 1786.548890][T22512] dirty 16384 [ 1786.549720][T22512] writeback 0 [ 1786.553872][T22512] workingset_refault_anon 18832 [ 1786.555556][T30757] bond1760: entered promiscuous mode [ 1786.556989][T22512] workingset_refault_file 22 21:54:02 executing program 3: r0 = openat$tun(0xffffff9c, &(0x7f0000000200), 0x1, 0x0) write$tun(r0, 0x0, 0x0) [ 1786.562969][T22512] swap 2101248 [ 1786.564090][T22512] swapcached 0 [ 1786.566278][T22512] pgpgin 1257407 [ 1786.567191][T22512] pgpgout 1261997 [ 1786.569352][T20034] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1786.570477][T22512] pgfault 1490267 [ 1786.571976][T20034] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1786.576153][T30756] 8021q: adding VLAN 0 to HW filter on device batadv1107 [ 1786.576847][T20034] usb 1-1: Manufacturer: syz [ 1786.578788][T22512] pgmajfault 17433 [ 1786.579893][T20034] usb 1-1: SerialNumber: syz [ 1786.580676][T22512] inactive_anon 0 [ 1786.582378][T22512] active_anon 0 [ 1786.584279][T22512] inactive_file 24576 21:54:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00016c00000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1786.586076][T22512] active_file 12288 [ 1786.587443][T22512] unevictable 0 [ 1786.588914][T30756] batadv1107: entered promiscuous mode [ 1786.590448][T22512] hierarchical_memory_limit 314572800 [ 1786.593839][T22512] hierarchical_memsw_limit 9223372036854771712 [ 1786.596538][T30756] bond93: (slave batadv1107): Enslaving as an active interface with an up link [ 1786.600008][T22512] total_cache 28672 [ 1786.601094][T22512] total_rss 0 [ 1786.601947][T22512] total_rss_huge 0 [ 1786.604950][T22512] total_shmem 0 [ 1786.607210][T22512] total_mapped_file 0 [ 1786.610690][T22512] total_dirty 16384 [ 1786.611698][T22512] total_writeback 0 [ 1786.613339][T30763] bond93 (unregistering): (slave batadv1107): Releasing backup interface [ 1786.615557][T22512] total_workingset_refault_anon 18832 [ 1786.616956][T22512] total_workingset_refault_file 22 [ 1786.619077][T22512] total_swap 2101248 [ 1786.620202][T22512] total_swapcached 0 [ 1786.621223][T22512] total_pgpgin 1257407 [ 1786.622283][T22512] total_pgpgout 1261997 [ 1786.623498][T22512] total_pgfault 1490267 [ 1786.624663][T22512] total_pgmajfault 17433 [ 1786.625794][T22512] total_inactive_anon 0 [ 1786.626784][T22512] total_active_anon 0 [ 1786.628328][T22512] total_inactive_file 24576 [ 1786.629601][T22512] total_active_file 12288 [ 1786.630728][T22512] total_unevictable 0 [ 1786.631733][T22512] anon_cost 0 [ 1786.632584][T22512] file_cost 2 [ 1786.633365][T22512] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=25476,uid=0 [ 1786.638297][T22512] Memory cgroup out of memory: Killed process 25476 (syz-executor.1) total-vm:50992kB, anon-rss:432kB, file-rss:8448kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 1786.658720][T30763] batadv1107: left promiscuous mode [ 1786.667231][T30763] bond93 (unregistering): Released all slaves 21:54:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x20ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, "0490bbbffaf74bb3266177cfa43a5ea5f7f96c9405c4f11b673f6b253a0dfa7c"}}) [ 1786.701848][T30768] bond1761: entered promiscuous mode 21:54:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0xdf002000, 0x1, 0x11, r0, 0x0) 21:54:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x48000000}, 0x0) 21:54:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00017400000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1786.743037][T30770] bond2015: entered promiscuous mode 21:54:02 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xffffff1f, &(0x7f0000000080)=@raw=[@kfunc], &(0x7f0000000140)='GPL\x00'}, 0x90) [ 1786.774745][T30781] bond93: entered promiscuous mode [ 1786.798672][T30781] 8021q: adding VLAN 0 to HW filter on device batadv1108 21:54:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x1, 0x1}) [ 1786.806421][T30781] batadv1108: entered promiscuous mode [ 1786.815117][T30781] bond93: (slave batadv1108): Enslaving as an active interface with an up link [ 1786.838218][T20034] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 1786.840721][T20034] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input275 [ 1786.844706][T30782] bond1762: entered promiscuous mode [ 1786.851915][T30781] bond93 (unregistering): (slave batadv1108): Releasing backup interface 21:54:02 executing program 3: r0 = openat$dsp(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) read$dsp(r0, 0x0, 0x0) 21:54:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00017a00000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1786.889581][T30781] batadv1108: left promiscuous mode [ 1786.900738][T30781] bond93 (unregistering): Released all slaves 21:54:02 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r0) [ 1786.939142][T30794] bond1763: entered promiscuous mode 21:54:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="0001b500000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:54:02 executing program 3: openat$dsp(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) 21:54:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x4c000000}, 0x0) [ 1787.029533][T30801] bond1764: entered promiscuous mode [ 1787.049023][T30808] bond93: entered promiscuous mode [ 1787.070107][T30808] 8021q: adding VLAN 0 to HW filter on device batadv1109 [ 1787.074681][T30808] batadv1109: entered promiscuous mode [ 1787.079353][T30808] bond93: (slave batadv1109): Enslaving as an active interface with an up link [ 1787.093939][T30808] bond93 (unregistering): (slave batadv1109): Releasing backup interface [ 1787.128888][T30808] batadv1109: left promiscuous mode [ 1787.137766][T30808] bond93 (unregistering): Released all slaves 21:54:03 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2fa7240936901b0293df400100109021b000124a8f87f090587e339ae0c41da3a3970409fd6c5f45fb436f0ad99fd4d7570e1ef026a6098eb3d59c69206d4e54f5228db9579f0c3b6c8785e6bd6ad282f92f9a54b425d856727890b36ec6b33a5303caa5b0000000000ca7976d1ce66ac69cba5a60e5cc09251e541308e831e10843d509bdb51c2dd44c64ecff241a196928c4e1378eaa520de6fe8271f9f3e5fb28628525a30febcc004868eb34b40f45e5f8acf1bce741c1190b57528a5610fc8264f92d7eee1b9"], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, &(0x7f0000000a00)={0xe0, 0xc, 0xc0, {0xc0, 0x1, "665bfda55a0bb33356221f379aeb8b661d88cb44a413560fa5bb554258cc5721b3e1c209a78327726dae5a10190178cd9c24ff5489f99026d14c07e9bf33f9913cd4442070eb2e6fa695cf4502a9877a15ccf841091bcec07aea2a6e1d4b609908e0cba24fda6fcea48eba153aac1b78cee0af315cb5a4504af20c3f075dcf3946a92c91c3faaf90c8675b9b4d25e1c79ea02f399535f5e84bcf2df9247d60a20edfbda207d952cbe0367ddca217d48e501fa2e919debc419c2860a9d9d2"}}, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}, &(0x7f0000000b40), &(0x7f0000000b80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x2f1}}}}, &(0x7f0000000d40)={0x2c, &(0x7f0000000c00)={0x0, 0x12, 0x32, "ebb50523de064b7c8982ced89d7cef3b55340c57c89f1cbaa2eb3b0b8e317406aeb4e31d5ebada798053178c97bb89fa73fb"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000cc0)={0x20, 0x1, 0xe, "14e509415571be50c73c5da05a0e"}, &(0x7f0000000d00)={0x20, 0x3, 0x1, 0x71}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000100)={0x0, 0xf60498082940b446, 0xc6, {0xc6, 0x8, "2f22b7fdbca7300215651513a017ca2fdf93d149288de8487cf35df2fb0ef1ad97e43466338ebfd0114dbf24776125209dee4e5f7ca546f1088e78c35fd9872e07afe1eaf5449a6f2c6d2925af878c2d5c909401a0a87c6befc222c2f89d3cf3f323ada6b60d15511b52d6ba229da8fc4480181cbd529d039af49e742649bfd7210548fd91b54242c8c8ebf788edf2c0a407012d1aa28968e977bd82fe43a480b2dd30c3b46d286fa0a27b4545380badd71ee455637cb58f830431612e05e3fb61010256"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}, &(0x7f0000000280)={0x0, 0xf, 0x19d, {0x5, 0xf, 0x19d, 0x6, [@generic={0xac, 0x10, 0x1, "bdf184323ed4537e5ec5913fbb149313c48029cfc08e62e905c59cfc229e94cc15a914c5f47150832815cc60b3643be100241f1068f8eefe6e5f8581895b0b5ab3ecf2dcaee2cc2e0859158b5ec7369d7e6b6786d520ef4727c60fee510282460e01d991a0b02053fd911cfd7c2c619cb4f069b70f32361bc5da95b0eca1dcfae2871df35a5283d36983dafc476c74c23b4fb4be4629fc9202987302e853d8e39664a7139e91c2b8a9"}, @ssp_cap={0xc, 0x10, 0xa, 0xbb, 0x0, 0xf4, 0x47eeaf4890c7bf02}, @generic={0xb7, 0x10, 0x2, "c2a4b11c85b94952436ca009b1f1f4aea9ed32e9d5bc5d39f7ba3511923b0f0ec2e358d470dfb72a598116ea2b86877d69234a1dae75d8d2d1bdeb9dbb832221d1a5431e7b6f98f3fd3cce76c182d9afa4403b09578e8b07d5b45a12b51ed3074c8e25a30ce449be330a745b9bee46cb8181e4d5d1e742178621f5827e9b3814bc728a711536ff83b1bbc3b5182c40b9ba10c2dfb5e43fc92d550afea625ccf407424d0449cdf9bbfdf9d33ed9faf2341e7e86c9"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "fc355aaa7e3fb744c5d2a49e98a1138a"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1f, 0x5, 0x8, 0x2, 0xff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x5, 0x4, 0x9}]}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x18, 0x0, 0x0, "e412c931", "19f0f8d4"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x8, 0xff, 0x1f, 0x4, 0x8d, 0x5}}}, &(0x7f0000000940)={0x84, &(0x7f0000000500)={0x40, 0x9, 0x6b, "ddcab35899194c859ad37b2bc89e21b0c004df9f1fa8fa8665e037d2ea9856bb11d3ff910f1cc58908b8d97ab01d41a240f5f3ed7fbf1880a1019bc977538ead7edabe3587b5facddf4926e861c5d0a70d98334a4a765c334ae77d636408799accc561f4235818dec438ce"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x45}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x100, 0x20, [0xf00]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000006c0)={0x40, 0x9, 0x1}, &(0x7f0000000700)={0x40, 0xb, 0x2, "27e6"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000780)={0x40, 0x13, 0x6, @remote}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000800)={0x40, 0x19, 0x2, "9a54"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io(r0, &(0x7f0000001000)={0x2c, &(0x7f0000000d80)={0x0, 0x22, 0x81, {0x81, 0x2, "f70ec845904ae148a6220f535d2240eeb858d1a63b421cdd70b6ce69d35a285520ece531fa0b2e999b37e7605133f77f1ca3d99f8a19c69257ee40760bdae9e31155990e693480702c3efad47a21139859f1c46af9be867284fb26bd82dbd5fa30ca32bc11ccda2cfa2ec09ca3aa2a5f81f7d03217544624fbe08227f88f1c"}}, &(0x7f0000000e40)={0x0, 0x3, 0xb5, @string={0xb5, 0x3, "0dd75ecec73327ad1c105de1e54e1d1504a0b06a47e5f7515c93112d53e1edf6ebc79b737e868d04a11c623cbf1cdd0b40c30dc45be2c5cdeba115df8632b7b366be9e3ffae200ed241ee4bcaa17086ea5fa5506b27aa67186a28a201554a9c2325f5a4a09f8fab87c77cc76db4b6b29f8976fcd22a2722bdfa089609d058080e454b935f2eea82eb4eaa71e6e1a2effe07bd548662eee54f771784f9373ae14fe079a3e905178d81156829ac2cf46f64afc83"}}, &(0x7f0000000f00)={0x0, 0xf, 0x3e, {0x5, 0xf, 0x3e, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2, 0x8, 0xff}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x0, 0x9, 0x7, 0x40}, @generic={0x8, 0x10, 0xb, "f8594e7baa"}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x3f, 0xf000, 0x80, [0x808030, 0xff0000, 0xff0030, 0x3f00]}]}}, &(0x7f0000000f80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x8, 0xfe, 0x8, "e0bc1341", "71578f44"}}, &(0x7f0000000fc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x8, 0x4d, 0x0, 0x1, 0x9, 0x1ec}}}, &(0x7f0000001440)={0x84, &(0x7f0000001040)={0x0, 0x12, 0x33, "adea6d51ff8786aa27689cbbdb388d359db40385bd57617aedf2d2e67b5c1ad33d1e663dc4373b2480cd1d4d31791395dff990"}, &(0x7f0000001080)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000010c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000001100)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000001140)={0x20, 0x0, 0x8, {0x200, 0x20, [0xf0]}}, &(0x7f0000001180)={0x40, 0x7, 0x2, 0x41}, &(0x7f00000011c0)={0x40, 0x9, 0x1, 0x6b}, &(0x7f0000001200)={0x40, 0xb, 0x2, "f485"}, &(0x7f0000001240)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000001280)={0x40, 0x13, 0x6}, &(0x7f00000012c0)={0x40, 0x17, 0x6}, &(0x7f0000001300)={0x40, 0x19, 0x2, "9658"}, &(0x7f0000001340)={0x40, 0x1a, 0x2, 0xfbff}, &(0x7f0000001380)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000013c0)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000001400)={0x40, 0x21, 0x1, 0xa3}}) 21:54:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) 21:54:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010801000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:54:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x60000000}, 0x0) [ 1787.427448][T20034] usb 1-1: USB disconnect, device number 79 [ 1787.437338][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 1787.439026][ C0] yealink 1-1:36.0: urb_ctl_callback - usb_submit_urb failed -19 21:54:03 executing program 3: openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) [ 1787.489158][T30921] bond93: entered promiscuous mode 21:54:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06464b8, &(0x7f00000002c0)) 21:54:03 executing program 3: r0 = openat$binderfs(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) [ 1787.526668][T30927] bond1765: entered promiscuous mode [ 1787.541719][T30921] 8021q: adding VLAN 0 to HW filter on device batadv1110 [ 1787.552759][T30921] batadv1110: entered promiscuous mode 21:54:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1787.570214][T30921] bond93: (slave batadv1110): Enslaving as an active interface with an up link 21:54:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000240)={r1}) [ 1787.599772][T30935] bond93 (unregistering): (slave batadv1110): Releasing backup interface 21:54:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) [ 1787.649249][T30935] batadv1110: left promiscuous mode [ 1787.661043][T30935] bond93 (unregistering): Released all slaves 21:54:03 executing program 3: syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000580)) [ 1787.715181][T30937] bond1766: entered promiscuous mode 21:54:03 executing program 3: r0 = openat$vimc1(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000140)={0x0, "8515f6d11de38de3478b48e8998dbbd3cac3dc08ff7b52d475ce1d5603c55348"}) 21:54:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010005000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:54:03 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c022b0304000e0580a7b6070d63e286a5cefe", 0x340) 21:54:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x60}}, 0x0) [ 1787.795896][T30950] bond1767: entered promiscuous mode 21:54:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x64000000}, 0x0) [ 1787.855082][T30956] bond93: entered promiscuous mode [ 1787.874518][T30956] 8021q: adding VLAN 0 to HW filter on device batadv1111 [ 1787.879358][T30956] batadv1111: entered promiscuous mode [ 1787.885854][T30956] bond93: (slave batadv1111): Enslaving as an active interface with an up link [ 1787.897333][T20034] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1787.902728][T30956] bond93 (unregistering): (slave batadv1111): Releasing backup interface [ 1787.959062][T30956] batadv1111: left promiscuous mode [ 1787.964573][T30956] bond93 (unregistering): Released all slaves [ 1788.257370][T20034] usb 1-1: config 36 has an invalid descriptor of length 58, skipping remainder of the config [ 1788.259939][T20034] usb 1-1: config 36 has 0 interfaces, different from the descriptor's value: 1 [ 1788.377451][T20034] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1788.379795][T20034] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1788.381791][T20034] usb 1-1: Manufacturer: syz [ 1788.382865][T20034] usb 1-1: SerialNumber: syz [ 1788.428887][T30769] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1788.431973][T30769] CPU: 1 PID: 30769 Comm: syz-executor.1 Tainted: G B 6.8.0-rc4-syzkaller-g905b00721763 #0 [ 1788.434758][T30769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1788.437307][T30769] Call trace: [ 1788.438202][T30769] dump_backtrace+0x1b8/0x1e4 [ 1788.439390][T30769] show_stack+0x2c/0x3c [ 1788.440476][T30769] dump_stack_lvl+0xd0/0x124 [ 1788.441631][T30769] dump_stack+0x1c/0x28 [ 1788.442706][T30769] dump_header+0xac/0x5f4 [ 1788.443840][T30769] oom_kill_process+0x324/0x9a4 [ 1788.445107][T30769] out_of_memory+0xd5c/0x1014 [ 1788.446283][T30769] mem_cgroup_out_of_memory+0x250/0x324 [ 1788.447577][T30769] try_charge_memcg+0xaf4/0x148c [ 1788.448872][T30769] mem_cgroup_swapin_charge_folio+0x2e8/0x4e0 [ 1788.450395][T30769] __read_swap_cache_async+0x428/0x6a4 [ 1788.451828][T30769] swap_cluster_readahead+0x330/0x7c0 [ 1788.453185][T30769] shmem_swapin_folio+0x52c/0xe48 [ 1788.454403][T30769] shmem_get_folio_gfp+0x318/0x1670 [ 1788.455761][T30769] shmem_fault+0x1d4/0x49c [ 1788.456921][T30769] __do_fault+0x11c/0x374 [ 1788.458026][T30769] handle_mm_fault+0x1da4/0x546c [ 1788.459366][T30769] do_page_fault+0x32c/0xa64 [ 1788.460563][T30769] do_translation_fault+0x94/0xc8 [ 1788.461891][T30769] do_mem_abort+0x74/0x200 [ 1788.462984][T30769] el0_da+0x60/0x168 [ 1788.464038][T30769] el0t_64_sync_handler+0xcc/0xfc [ 1788.465365][T30769] el0t_64_sync+0x190/0x194 [ 1788.466881][T30769] memory: usage 307200kB, limit 307200kB, failcnt 41597 [ 1788.468845][T30769] memory+swap: usage 309164kB, limit 9007199254740988kB, failcnt 0 [ 1788.470913][T30769] kmem: usage 307112kB, limit 9007199254740988kB, failcnt 0 [ 1788.472806][T30769] Memory cgroup stats for /syz1: [ 1788.472894][T30769] cache 28672 [ 1788.474954][T30769] rss 24576 [ 1788.475722][T30769] rss_huge 0 [ 1788.476677][T30769] shmem 0 [ 1788.478209][T30769] mapped_file 0 [ 1788.479109][T30769] dirty 16384 [ 1788.480017][T30769] writeback 4096 [ 1788.480892][T30769] workingset_refault_anon 25742 [ 1788.482149][T30769] workingset_refault_file 22 [ 1788.483314][T30769] swap 2011136 [ 1788.484129][T30769] swapcached 53248 [ 1788.485139][T30769] pgpgin 1264339 [ 1788.486005][T30769] pgpgout 1268916 [ 1788.486962][T30769] pgfault 1497866 [ 1788.488068][T30769] pgmajfault 23371 [ 1788.489081][T30769] inactive_anon 0 [ 1788.490061][T30769] active_anon 0 [ 1788.490987][T30769] inactive_file 24576 [ 1788.492005][T30769] active_file 12288 [ 1788.492919][T30769] unevictable 0 [ 1788.493876][T30769] hierarchical_memory_limit 314572800 [ 1788.495262][T30769] hierarchical_memsw_limit 9223372036854771712 [ 1788.496819][T30769] total_cache 28672 [ 1788.497917][T30769] total_rss 24576 [ 1788.498820][T30769] total_rss_huge 0 [ 1788.499814][T30769] total_shmem 0 [ 1788.500667][T30769] total_mapped_file 0 [ 1788.501713][T30769] total_dirty 16384 [ 1788.502636][T30769] total_writeback 4096 [ 1788.503784][T30769] total_workingset_refault_anon 25742 [ 1788.505142][T30769] total_workingset_refault_file 22 [ 1788.506503][T30769] total_swap 2011136 [ 1788.507541][T30769] total_swapcached 53248 [ 1788.508749][T30769] total_pgpgin 1264339 [ 1788.509697][T30769] total_pgpgout 1268916 [ 1788.510858][T30769] total_pgfault 1497866 [ 1788.512003][T30769] total_pgmajfault 23371 [ 1788.513185][T30769] total_inactive_anon 0 [ 1788.514216][T30769] total_active_anon 0 [ 1788.515280][T30769] total_inactive_file 24576 [ 1788.516296][T30769] total_active_file 12288 [ 1788.517542][T30769] total_unevictable 0 [ 1788.518558][T30769] anon_cost 0 [ 1788.519338][T30769] file_cost 2 [ 1788.520143][T30769] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=30769,uid=0 [ 1788.523944][T30769] Memory cgroup out of memory: Killed process 30769 (syz-executor.1) total-vm:54640kB, anon-rss:372kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 21:54:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6f01}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:54:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010006000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:54:04 executing program 3: r0 = openat$qrtrtun(0xffffff9c, &(0x7f0000000000), 0xb02) write$qrtrtun(r0, 0x0, 0x0) 21:54:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x65580000}, 0x0) [ 1788.619769][T30960] bond1768: entered promiscuous mode 21:54:04 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x12, 0x1, &(0x7f0000000080)=@raw=[@kfunc], 0x0}, 0x90) 21:54:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010007000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1788.636684][T30963] bond93: entered promiscuous mode [ 1788.662157][T30963] 8021q: adding VLAN 0 to HW filter on device batadv1112 [ 1788.667949][T30963] batadv1112: entered promiscuous mode 21:54:04 executing program 3: openat$vimc2(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) [ 1788.676125][T30963] bond93: (slave batadv1112): Enslaving as an active interface with an up link 21:54:04 executing program 3: clock_getres(0x376f6e99a279d48a, 0x0) [ 1788.721850][T30968] syz-executor.1 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=2, oom_score_adj=1000 [ 1788.724673][T30968] CPU: 1 PID: 30968 Comm: syz-executor.1 Tainted: G B 6.8.0-rc4-syzkaller-g905b00721763 #0 [ 1788.727464][T30968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1788.730070][T30968] Call trace: [ 1788.730894][T30968] dump_backtrace+0x1b8/0x1e4 [ 1788.732122][T30968] show_stack+0x2c/0x3c [ 1788.733261][T30968] dump_stack_lvl+0xd0/0x124 [ 1788.734385][T30968] dump_stack+0x1c/0x28 [ 1788.735422][T30968] dump_header+0xac/0x5f4 [ 1788.736484][T30968] oom_kill_process+0x324/0x9a4 [ 1788.737792][T30968] out_of_memory+0xd5c/0x1014 [ 1788.738944][T30968] mem_cgroup_out_of_memory+0x250/0x324 [ 1788.740317][T30968] try_charge_memcg+0xaf4/0x148c [ 1788.741615][T30968] obj_cgroup_charge+0x174/0x29c [ 1788.742914][T30968] __memcg_slab_pre_alloc_hook+0x290/0x2cc [ 1788.744362][T30968] __kmalloc_node_track_caller+0x3f8/0x620 [ 1788.745902][T30968] kmemdup+0x44/0x80 [ 1788.746937][T30968] __addrconf_sysctl_register+0xbc/0x378 [ 1788.748433][T30968] addrconf_sysctl_register+0x148/0x19c [ 1788.749910][T30968] ipv6_add_dev+0xa2c/0xee4 [ 1788.751108][T30968] addrconf_notify+0x514/0xce8 [ 1788.752369][T30968] notifier_call_chain+0x1a4/0x510 [ 1788.753749][T30968] raw_notifier_call_chain+0x3c/0x50 [ 1788.755157][T30968] call_netdevice_notifiers+0x13c/0x1bc [ 1788.756643][T30968] register_netdevice+0xd4c/0x1108 [ 1788.757995][T30968] bond_newlink+0x50/0xa8 [ 1788.759128][T30968] rtnl_newlink+0x1184/0x1bcc [ 1788.760361][T30968] rtnetlink_rcv_msg+0x748/0xdbc [ 1788.761687][T30968] netlink_rcv_skb+0x214/0x3c4 [ 1788.762955][T30968] rtnetlink_rcv+0x28/0x38 [ 1788.764134][T30968] netlink_unicast+0x65c/0x898 [ 1788.765419][T30968] netlink_sendmsg+0x83c/0xb20 [ 1788.766701][T30968] ____sys_sendmsg+0x56c/0x840 [ 1788.767982][T30968] __sys_sendmsg+0x26c/0x33c [ 1788.769205][T30968] __arm64_sys_sendmsg+0x80/0x94 [ 1788.770517][T30968] invoke_syscall+0x98/0x2b8 [ 1788.771758][T30968] el0_svc_common+0x130/0x23c [ 1788.773015][T30968] do_el0_svc+0x48/0x58 [ 1788.774126][T30968] el0_svc+0x54/0x158 [ 1788.775186][T30968] el0t_64_sync_handler+0x84/0xfc [ 1788.776463][T30968] el0t_64_sync+0x190/0x194 [ 1788.785951][T30968] memory: usage 307200kB, limit 307200kB, failcnt 42348 [ 1788.788522][T30968] memory+swap: usage 309212kB, limit 9007199254740988kB, failcnt 0 [ 1788.790813][T30968] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 1788.792813][T30968] Memory cgroup stats for /syz1: [ 1788.792900][T30968] cache 28672 [ 1788.795258][T30968] rss 0 [ 1788.795919][T30968] rss_huge 0 [ 1788.796906][T30968] shmem 0 [ 1788.798933][T30968] mapped_file 0 [ 1788.800092][T30968] dirty 16384 [ 1788.800908][T30968] writeback 0 [ 1788.806415][T30968] workingset_refault_anon 25972 [ 1788.808937][T30968] workingset_refault_file 22 [ 1788.810844][T30968] swap 2060288 [ 1788.811965][T30968] swapcached 0 [ 1788.812816][T30968] pgpgin 1264591 [ 1788.813984][T30968] pgpgout 1269181 [ 1788.815154][T30968] pgfault 1498243 [ 1788.816261][T30968] pgmajfault 23595 [ 1788.817435][T30968] inactive_anon 0 [ 1788.818354][T30968] active_anon 0 [ 1788.819577][T30968] inactive_file 16384 [ 1788.820523][T30968] active_file 20480 [ 1788.825000][T30968] unevictable 0 [ 1788.825904][T30968] hierarchical_memory_limit 314572800 [ 1788.831855][T30968] hierarchical_memsw_limit 9223372036854771712 [ 1788.835930][T30968] total_cache 28672 [ 1788.836909][T30968] total_rss 0 [ 1788.838021][T30968] total_rss_huge 0 [ 1788.838987][T30968] total_shmem 0 [ 1788.839966][T30968] total_mapped_file 0 [ 1788.840928][T30968] total_dirty 16384 [ 1788.841992][T30968] total_writeback 0 [ 1788.842970][T30968] total_workingset_refault_anon 25972 [ 1788.844369][T30968] total_workingset_refault_file 22 [ 1788.845708][T30968] total_swap 2060288 21:54:04 executing program 3: socketpair(0x2, 0x2, 0x7c, &(0x7f0000000000)) [ 1788.846686][T30968] total_swapcached 0 [ 1788.848948][T30968] total_pgpgin 1264591 [ 1788.849961][T30968] total_pgpgout 1269181 [ 1788.854469][T30968] total_pgfault 1498243 [ 1788.857627][T30968] total_pgmajfault 23595 [ 1788.861809][T30968] total_inactive_anon 0 [ 1788.862993][T30968] total_active_anon 0 [ 1788.864016][T30968] total_inactive_file 16384 [ 1788.865260][T30968] total_active_file 20480 21:54:04 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000340)=0x5, 0x4) [ 1788.872292][T30968] total_unevictable 0 [ 1788.873338][T30968] anon_cost 1 [ 1788.874174][T30968] file_cost 2 [ 1788.875003][T30968] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=30966,uid=0 21:54:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) [ 1788.886741][T30968] Memory cgroup out of memory: Killed process 30966 (syz-executor.1) total-vm:54640kB, anon-rss:372kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1788.911663][T30968] bond2016: entered promiscuous mode 21:54:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', 0x0}) 21:54:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6f02}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1788.934070][T30972] bond1769: entered promiscuous mode [ 1788.941181][T30963] bond93 (unregistering): (slave batadv1112): Releasing backup interface 21:54:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010108000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1788.952069][T22512] syz-executor.1 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=0 [ 1788.955440][T22512] CPU: 0 PID: 22512 Comm: syz-executor.1 Tainted: G B 6.8.0-rc4-syzkaller-g905b00721763 #0 [ 1788.958330][T22512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1788.960891][T22512] Call trace: [ 1788.961719][T22512] dump_backtrace+0x1b8/0x1e4 [ 1788.962905][T22512] show_stack+0x2c/0x3c [ 1788.964013][T22512] dump_stack_lvl+0xd0/0x124 [ 1788.965178][T22512] dump_stack+0x1c/0x28 [ 1788.966174][T22512] dump_header+0xac/0x5f4 [ 1788.967314][T22512] oom_kill_process+0x324/0x9a4 [ 1788.968540][T22512] out_of_memory+0xd5c/0x1014 [ 1788.969801][T22512] mem_cgroup_out_of_memory+0x250/0x324 [ 1788.971267][T22512] try_charge_memcg+0xaf4/0x148c [ 1788.972523][T22512] __memcg_kmem_charge_page+0x188/0x304 [ 1788.973958][T22512] __alloc_pages+0x254/0x698 [ 1788.975090][T22512] alloc_pages_mpol+0x328/0x5dc [ 1788.976359][T22512] alloc_pages+0x168/0x200 [ 1788.977497][T22512] pte_alloc_one+0x2c/0x2fc [ 1788.978666][T22512] copy_page_range+0x3218/0x3b90 [ 1788.979860][T22512] copy_mm+0xf4c/0x1bbc [ 1788.980961][T22512] copy_process+0x1980/0x3478 [ 1788.982213][T22512] kernel_clone+0x1d8/0x80c [ 1788.983323][T22512] __arm64_sys_clone+0x1f8/0x24c [ 1788.984641][T22512] invoke_syscall+0x98/0x2b8 [ 1788.985814][T22512] el0_svc_common+0x130/0x23c [ 1788.986968][T22512] do_el0_svc+0x48/0x58 [ 1788.988074][T22512] el0_svc+0x54/0x158 [ 1788.989082][T22512] el0t_64_sync_handler+0x84/0xfc [ 1788.990298][T22512] el0t_64_sync+0x190/0x194 [ 1788.991516][ C0] vkms_vblank_simulate: vblank timer overrun [ 1788.994650][T22512] memory: usage 307200kB, limit 307200kB, failcnt 42469 [ 1788.996501][T22512] memory+swap: usage 309140kB, limit 9007199254740988kB, failcnt 0 [ 1789.000812][T30963] batadv1112: left promiscuous mode [ 1789.007792][T30963] bond93 (unregistering): Released all slaves [ 1789.015310][T22512] kmem: usage 307052kB, limit 9007199254740988kB, failcnt 0 21:54:05 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000140)=0x2a33) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x5) [ 1789.029285][T22512] Memory cgroup stats for /syz1: [ 1789.029376][T22512] cache 24576 [ 1789.029791][T30990] bond1770: entered promiscuous mode [ 1789.030802][T22512] rss 0 [ 1789.033697][T22512] rss_huge 0 [ 1789.034484][T22512] shmem 0 [ 1789.035274][T22512] mapped_file 0 [ 1789.036100][T22512] dirty 0 [ 1789.036926][T22512] writeback 0 [ 1789.039247][T22512] workingset_refault_anon 25998 [ 1789.040665][T22512] workingset_refault_file 22 [ 1789.041937][T22512] swap 1986560 [ 1789.042802][T22512] swapcached 0 21:54:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010009000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1789.043797][T22512] pgpgin 1264617 [ 1789.044898][T22512] pgpgout 1269208 [ 1789.046065][T22512] pgfault 1498285 [ 1789.047048][T22512] pgmajfault 23619 [ 1789.048533][T22512] inactive_anon 0 [ 1789.049698][T22512] active_anon 0 [ 1789.050548][T22512] inactive_file 24576 [ 1789.051626][T22512] active_file 8192 [ 1789.052582][T22512] unevictable 0 [ 1789.053576][T22512] hierarchical_memory_limit 314572800 [ 1789.054972][T22512] hierarchical_memsw_limit 9223372036854771712 [ 1789.056559][T22512] total_cache 24576 [ 1789.058969][T22512] total_rss 0 [ 1789.059988][T22512] total_rss_huge 0 [ 1789.060898][T22512] total_shmem 0 [ 1789.061901][T22512] total_mapped_file 0 [ 1789.062893][T22512] total_dirty 0 [ 1789.063879][T22512] total_writeback 0 [ 1789.064831][T22512] total_workingset_refault_anon 25998 [ 1789.066344][T22512] total_workingset_refault_file 22 [ 1789.068460][T22512] total_swap 1986560 [ 1789.069587][T22512] total_swapcached 0 [ 1789.070562][T22512] total_pgpgin 1264617 [ 1789.078278][T22512] total_pgpgout 1269208 [ 1789.081671][T22512] total_pgfault 1498285 [ 1789.083960][T22512] total_pgmajfault 23619 [ 1789.086256][T22512] total_inactive_anon 0 [ 1789.086943][T30995] bond1771: entered promiscuous mode [ 1789.092601][T22512] total_active_anon 0 [ 1789.101072][T22512] total_inactive_file 24576 [ 1789.102255][T22512] total_active_file 8192 [ 1789.103315][T22512] total_unevictable 0 [ 1789.104314][T22512] anon_cost 0 [ 1789.105114][T22512] file_cost 2 [ 1789.105927][T22512] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=25441,uid=0 [ 1789.110880][T22512] Memory cgroup out of memory: Killed process 25441 (syz-executor.1) total-vm:54448kB, anon-rss:360kB, file-rss:8352kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 1789.149285][T30998] bond2017: entered promiscuous mode [ 1789.465854][T30998] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1789.483174][T30998] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 1789.486474][T30998] CPU: 1 PID: 30998 Comm: syz-executor.1 Tainted: G B 6.8.0-rc4-syzkaller-g905b00721763 #0 [ 1789.489338][T30998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1789.491872][T30998] Call trace: [ 1789.492740][T30998] dump_backtrace+0x1b8/0x1e4 [ 1789.493919][T30998] show_stack+0x2c/0x3c [ 1789.495004][T30998] dump_stack_lvl+0xd0/0x124 [ 1789.496233][T30998] dump_stack+0x1c/0x28 [ 1789.497318][T30998] dump_header+0xac/0x5f4 [ 1789.498398][T30998] oom_kill_process+0x324/0x9a4 [ 1789.499677][T30998] out_of_memory+0xd5c/0x1014 [ 1789.500883][T30998] mem_cgroup_out_of_memory+0x250/0x324 [ 1789.502259][T30998] try_charge_memcg+0xaf4/0x148c [ 1789.503548][T30998] obj_cgroup_charge+0x174/0x29c [ 1789.504832][T30998] __memcg_slab_pre_alloc_hook+0x290/0x2cc [ 1789.506288][T30998] kmalloc_trace+0x2bc/0x49c [ 1789.507389][T30998] ipv6_add_dev+0x128/0xee4 [ 1789.508615][T30998] addrconf_notify+0x514/0xce8 [ 1789.509825][T30998] notifier_call_chain+0x1a4/0x510 [ 1789.511209][T30998] raw_notifier_call_chain+0x3c/0x50 [ 1789.512579][T30998] call_netdevice_notifiers+0x13c/0x1bc [ 1789.514023][T30998] register_netdevice+0xd4c/0x1108 [ 1789.515327][T30998] batadv_softif_newlink+0x90/0xa0 [ 1789.516649][T30998] rtnl_newlink+0x1184/0x1bcc [ 1789.517931][T30998] rtnetlink_rcv_msg+0x748/0xdbc [ 1789.519232][T30998] netlink_rcv_skb+0x214/0x3c4 [ 1789.520482][T30998] rtnetlink_rcv+0x28/0x38 [ 1789.521673][T30998] netlink_unicast+0x65c/0x898 [ 1789.522908][T30998] netlink_sendmsg+0x83c/0xb20 [ 1789.524156][T30998] ____sys_sendmsg+0x56c/0x840 [ 1789.525389][T30998] __sys_sendmsg+0x26c/0x33c [ 1789.526596][T30998] __arm64_sys_sendmsg+0x80/0x94 [ 1789.527929][T30998] invoke_syscall+0x98/0x2b8 [ 1789.529139][T30998] el0_svc_common+0x130/0x23c [ 1789.530418][T30998] do_el0_svc+0x48/0x58 [ 1789.531486][T30998] el0_svc+0x54/0x158 [ 1789.532579][T30998] el0t_64_sync_handler+0x84/0xfc [ 1789.533912][T30998] el0t_64_sync+0x190/0x194 [ 1789.538345][T30998] memory: usage 307200kB, limit 307200kB, failcnt 45199 [ 1789.542724][T30998] memory+swap: usage 309084kB, limit 9007199254740988kB, failcnt 0 [ 1789.547785][T30998] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 1789.550456][T30998] Memory cgroup stats for /syz1: [ 1789.550546][T30998] cache 12288 [ 1789.552747][T30998] rss 4096 [ 1789.553511][T30998] rss_huge 0 [ 1789.554479][T30998] shmem 0 [ 1789.555175][T30998] mapped_file 0 [ 1789.556101][T30998] dirty 0 [ 1789.556886][T30998] writeback 0 [ 1789.558311][T30998] workingset_refault_anon 28016 [ 1789.559737][T30998] workingset_refault_file 22 [ 1789.560914][T30998] swap 1929216 [ 1789.561719][T30998] swapcached 4096 [ 1789.562970][T30998] pgpgin 1266655 [ 1789.563951][T30998] pgpgout 1271247 [ 1789.564933][T30998] pgfault 1500655 [ 1789.565839][T30998] pgmajfault 25355 [ 1789.566863][T30998] inactive_anon 4096 [ 1789.568410][T30998] active_anon 0 [ 1789.569406][T30998] inactive_file 16384 [ 1789.570403][T30998] active_file 8192 [ 1789.571383][T30998] unevictable 0 [ 1789.572283][T30998] hierarchical_memory_limit 314572800 [ 1789.573720][T30998] hierarchical_memsw_limit 9223372036854771712 [ 1789.575289][T30998] total_cache 12288 [ 1789.576297][T30998] total_rss 4096 [ 1789.577918][T30998] total_rss_huge 0 [ 1789.578964][T30998] total_shmem 0 [ 1789.579829][T30998] total_mapped_file 0 [ 1789.580880][T30998] total_dirty 0 [ 1789.581694][T30998] total_writeback 0 [ 1789.582670][T30998] total_workingset_refault_anon 28016 [ 1789.584056][T30998] total_workingset_refault_file 22 [ 1789.585483][T30998] total_swap 1929216 [ 1789.586459][T30998] total_swapcached 4096 [ 1789.588083][T30998] total_pgpgin 1266655 [ 1789.589285][T30998] total_pgpgout 1271247 [ 1789.590311][T30998] total_pgfault 1500655 [ 1789.591457][T30998] total_pgmajfault 25355 [ 1789.592556][T30998] total_inactive_anon 4096 [ 1789.593669][T30998] total_active_anon 0 [ 1789.594792][T30998] total_inactive_file 16384 [ 1789.595989][T30998] total_active_file 8192 [ 1789.597101][T30998] total_unevictable 0 [ 1789.599090][T30998] anon_cost 0 [ 1789.600024][T30998] file_cost 1 [ 1789.600822][T30998] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=30997,uid=0 [ 1789.604701][T30998] Memory cgroup out of memory: Killed process 30997 (syz-executor.1) total-vm:54448kB, anon-rss:496kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1789.630283][T30998] 8021q: adding VLAN 0 to HW filter on device batadv1823 [ 1789.632734][T30998] batadv1823: entered promiscuous mode [ 1789.635061][T30998] bond2017: (slave batadv1823): Enslaving as an active interface with an up link [ 1789.944583][T21206] usb 1-1: USB disconnect, device number 80 21:54:05 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2fa7240936901b0293df400100109021b000124a8f87f090587e339ae0c41da3a3970409fd6c5f45fb436f0ad99fd4d7570e1ef026a6098eb3d59c69206d4e54f5228db9579f0c3b6c8785e6bd6ad282f92f9a54b425d856727890b36ec6b33a5303caa5b0000000000ca7976d1ce66ac69cba5a60e5cc09251e541308e831e10843d509bdb51c2dd44c64ecff241a196928c4e1378eaa520de6fe8271f9f3e5fb28628525a30febcc004868eb34b40f45e5f8acf1bce741c1190b57528a5610fc8264f92d7eee1b9"], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, &(0x7f0000000a00)={0xe0, 0xc, 0xc0, {0xc0, 0x1, "665bfda55a0bb33356221f379aeb8b661d88cb44a413560fa5bb554258cc5721b3e1c209a78327726dae5a10190178cd9c24ff5489f99026d14c07e9bf33f9913cd4442070eb2e6fa695cf4502a9877a15ccf841091bcec07aea2a6e1d4b609908e0cba24fda6fcea48eba153aac1b78cee0af315cb5a4504af20c3f075dcf3946a92c91c3faaf90c8675b9b4d25e1c79ea02f399535f5e84bcf2df9247d60a20edfbda207d952cbe0367ddca217d48e501fa2e919debc419c2860a9d9d2"}}, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}, &(0x7f0000000b40), &(0x7f0000000b80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x2f1}}}}, &(0x7f0000000d40)={0x2c, &(0x7f0000000c00)={0x0, 0x12, 0x32, "ebb50523de064b7c8982ced89d7cef3b55340c57c89f1cbaa2eb3b0b8e317406aeb4e31d5ebada798053178c97bb89fa73fb"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000cc0)={0x20, 0x1, 0xe, "14e509415571be50c73c5da05a0e"}, &(0x7f0000000d00)={0x20, 0x3, 0x1, 0x71}}) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000100)={0x0, 0xf60498082940b446, 0xc6, {0xc6, 0x8, "2f22b7fdbca7300215651513a017ca2fdf93d149288de8487cf35df2fb0ef1ad97e43466338ebfd0114dbf24776125209dee4e5f7ca546f1088e78c35fd9872e07afe1eaf5449a6f2c6d2925af878c2d5c909401a0a87c6befc222c2f89d3cf3f323ada6b60d15511b52d6ba229da8fc4480181cbd529d039af49e742649bfd7210548fd91b54242c8c8ebf788edf2c0a407012d1aa28968e977bd82fe43a480b2dd30c3b46d286fa0a27b4545380badd71ee455637cb58f830431612e05e3fb61010256"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}, &(0x7f0000000280)={0x0, 0xf, 0x19d, {0x5, 0xf, 0x19d, 0x6, [@generic={0xac, 0x10, 0x1, "bdf184323ed4537e5ec5913fbb149313c48029cfc08e62e905c59cfc229e94cc15a914c5f47150832815cc60b3643be100241f1068f8eefe6e5f8581895b0b5ab3ecf2dcaee2cc2e0859158b5ec7369d7e6b6786d520ef4727c60fee510282460e01d991a0b02053fd911cfd7c2c619cb4f069b70f32361bc5da95b0eca1dcfae2871df35a5283d36983dafc476c74c23b4fb4be4629fc9202987302e853d8e39664a7139e91c2b8a9"}, @ssp_cap={0xc, 0x10, 0xa, 0xbb, 0x0, 0xf4, 0x47eeaf4890c7bf02}, @generic={0xb7, 0x10, 0x2, "c2a4b11c85b94952436ca009b1f1f4aea9ed32e9d5bc5d39f7ba3511923b0f0ec2e358d470dfb72a598116ea2b86877d69234a1dae75d8d2d1bdeb9dbb832221d1a5431e7b6f98f3fd3cce76c182d9afa4403b09578e8b07d5b45a12b51ed3074c8e25a30ce449be330a745b9bee46cb8181e4d5d1e742178621f5827e9b3814bc728a711536ff83b1bbc3b5182c40b9ba10c2dfb5e43fc92d550afea625ccf407424d0449cdf9bbfdf9d33ed9faf2341e7e86c9"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "fc355aaa7e3fb744c5d2a49e98a1138a"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1f, 0x5, 0x8, 0x2, 0xff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x5, 0x4, 0x9}]}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x18, 0x0, 0x0, "e412c931", "19f0f8d4"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x8, 0xff, 0x1f, 0x4, 0x8d, 0x5}}}, &(0x7f0000000940)={0x84, &(0x7f0000000500)={0x40, 0x9, 0x6b, "ddcab35899194c859ad37b2bc89e21b0c004df9f1fa8fa8665e037d2ea9856bb11d3ff910f1cc58908b8d97ab01d41a240f5f3ed7fbf1880a1019bc977538ead7edabe3587b5facddf4926e861c5d0a70d98334a4a765c334ae77d636408799accc561f4235818dec438ce"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x45}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x100, 0x20, [0xf00]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000006c0)={0x40, 0x9, 0x1}, &(0x7f0000000700)={0x40, 0xb, 0x2, "27e6"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000780)={0x40, 0x13, 0x6, @remote}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000800)={0x40, 0x19, 0x2, "9a54"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x7}}) (async) syz_usb_control_io(r0, &(0x7f0000001000)={0x2c, &(0x7f0000000d80)={0x0, 0x22, 0x81, {0x81, 0x2, "f70ec845904ae148a6220f535d2240eeb858d1a63b421cdd70b6ce69d35a285520ece531fa0b2e999b37e7605133f77f1ca3d99f8a19c69257ee40760bdae9e31155990e693480702c3efad47a21139859f1c46af9be867284fb26bd82dbd5fa30ca32bc11ccda2cfa2ec09ca3aa2a5f81f7d03217544624fbe08227f88f1c"}}, &(0x7f0000000e40)={0x0, 0x3, 0xb5, @string={0xb5, 0x3, "0dd75ecec73327ad1c105de1e54e1d1504a0b06a47e5f7515c93112d53e1edf6ebc79b737e868d04a11c623cbf1cdd0b40c30dc45be2c5cdeba115df8632b7b366be9e3ffae200ed241ee4bcaa17086ea5fa5506b27aa67186a28a201554a9c2325f5a4a09f8fab87c77cc76db4b6b29f8976fcd22a2722bdfa089609d058080e454b935f2eea82eb4eaa71e6e1a2effe07bd548662eee54f771784f9373ae14fe079a3e905178d81156829ac2cf46f64afc83"}}, &(0x7f0000000f00)={0x0, 0xf, 0x3e, {0x5, 0xf, 0x3e, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2, 0x8, 0xff}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x0, 0x9, 0x7, 0x40}, @generic={0x8, 0x10, 0xb, "f8594e7baa"}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x3f, 0xf000, 0x80, [0x808030, 0xff0000, 0xff0030, 0x3f00]}]}}, &(0x7f0000000f80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x8, 0xfe, 0x8, "e0bc1341", "71578f44"}}, &(0x7f0000000fc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x8, 0x4d, 0x0, 0x1, 0x9, 0x1ec}}}, &(0x7f0000001440)={0x84, &(0x7f0000001040)={0x0, 0x12, 0x33, "adea6d51ff8786aa27689cbbdb388d359db40385bd57617aedf2d2e67b5c1ad33d1e663dc4373b2480cd1d4d31791395dff990"}, &(0x7f0000001080)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000010c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000001100)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000001140)={0x20, 0x0, 0x8, {0x200, 0x20, [0xf0]}}, &(0x7f0000001180)={0x40, 0x7, 0x2, 0x41}, &(0x7f00000011c0)={0x40, 0x9, 0x1, 0x6b}, &(0x7f0000001200)={0x40, 0xb, 0x2, "f485"}, &(0x7f0000001240)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000001280)={0x40, 0x13, 0x6}, &(0x7f00000012c0)={0x40, 0x17, 0x6}, &(0x7f0000001300)={0x40, 0x19, 0x2, "9658"}, &(0x7f0000001340)={0x40, 0x1a, 0x2, 0xfbff}, &(0x7f0000001380)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000013c0)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000001400)={0x40, 0x21, 0x1, 0xa3}}) 21:54:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00013609000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:54:05 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x0) 21:54:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x68000000}, 0x0) 21:54:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x6f03}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1789.971509][T31110] validate_nla: 26 callbacks suppressed [ 1789.971521][T31110] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1790.004547][T31110] bond93: entered promiscuous mode 21:54:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) [ 1790.034125][T31110] 8021q: adding VLAN 0 to HW filter on device batadv1113 21:54:06 executing program 3: syz_open_dev$vim2m(&(0x7f00000001c0), 0x8000000000000000, 0x2) [ 1790.044292][T31110] batadv1113: entered promiscuous mode [ 1790.046630][T31110] bond93: (slave batadv1113): Enslaving as an active interface with an up link [ 1790.054863][T31106] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1790.057913][T31111] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:54:06 executing program 3: syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000180)) [ 1790.082639][T31106] CPU: 0 PID: 31106 Comm: syz-executor.1 Tainted: G B 6.8.0-rc4-syzkaller-g905b00721763 #0 [ 1790.085596][T31106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1790.088169][T31106] Call trace: [ 1790.089009][T31106] dump_backtrace+0x1b8/0x1e4 [ 1790.090305][T31106] show_stack+0x2c/0x3c [ 1790.091339][T31106] dump_stack_lvl+0xd0/0x124 [ 1790.092538][T31106] dump_stack+0x1c/0x28 [ 1790.093657][T31106] dump_header+0xac/0x5f4 [ 1790.094789][T31106] oom_kill_process+0x324/0x9a4 [ 1790.096041][T31106] out_of_memory+0xd5c/0x1014 [ 1790.097205][T31106] mem_cgroup_out_of_memory+0x250/0x324 [ 1790.098638][T31106] try_charge_memcg+0xaf4/0x148c [ 1790.099933][T31106] __memcg_kmem_charge_page+0x188/0x304 [ 1790.101372][T31106] memcg_charge_kernel_stack+0x200/0x770 [ 1790.102858][T31106] dup_task_struct+0x290/0x88c [ 1790.104086][T31106] copy_process+0x488/0x3478 [ 1790.105186][T31106] kernel_clone+0x1d8/0x80c [ 1790.106272][T31106] __arm64_sys_clone+0x1f8/0x24c [ 1790.107566][T31106] invoke_syscall+0x98/0x2b8 [ 1790.108729][T31106] el0_svc_common+0x130/0x23c [ 1790.109971][T31106] do_el0_svc+0x48/0x58 [ 1790.111098][T31106] el0_svc+0x54/0x158 [ 1790.112055][T31106] el0t_64_sync_handler+0x84/0xfc [ 1790.113360][T31106] el0t_64_sync+0x190/0x194 [ 1790.114620][ C0] vkms_vblank_simulate: vblank timer overrun [ 1790.118846][T31111] bond1772: entered promiscuous mode [ 1790.122582][T31110] bond93 (unregistering): (slave batadv1113): Releasing backup interface [ 1790.124655][T31106] memory: usage 307200kB, limit 307200kB, failcnt 45772 [ 1790.126433][T31106] memory+swap: usage 308964kB, limit 9007199254740988kB, failcnt 0 [ 1790.128926][T31106] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 1790.130761][T31106] Memory cgroup stats for /syz1: [ 1790.130849][T31106] cache 12288 [ 1790.132887][T31106] rss 4096 [ 1790.133627][T31106] rss_huge 0 [ 1790.134423][T31106] shmem 0 [ 1790.135157][T31106] mapped_file 0 21:54:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="0001000a000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1790.135975][T31106] dirty 0 [ 1790.137098][T31106] writeback 0 [ 1790.138488][T31106] workingset_refault_anon 28237 [ 1790.139758][T31106] workingset_refault_file 22 [ 1790.140882][T31106] swap 1806336 21:54:06 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x40086602, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) [ 1790.141699][T31106] swapcached 4096 [ 1790.142710][T31106] pgpgin 1266886 [ 1790.143796][T31106] pgpgout 1271478 [ 1790.144785][T31106] pgfault 1500988 [ 1790.145667][T31106] pgmajfault 25569 [ 1790.146624][T31106] inactive_anon 0 [ 1790.147674][T31106] active_anon 0 [ 1790.148539][T31106] inactive_file 20480 [ 1790.151447][T31106] active_file 4096 [ 1790.152397][T31106] unevictable 0 [ 1790.153251][T31106] hierarchical_memory_limit 314572800 [ 1790.154513][T31106] hierarchical_memsw_limit 9223372036854771712 [ 1790.157748][T31106] total_cache 12288 [ 1790.158738][T31106] total_rss 4096 [ 1790.159052][T31110] batadv1113: left promiscuous mode [ 1790.159787][T31106] total_rss_huge 0 [ 1790.162051][T31106] total_shmem 0 [ 1790.162937][T31106] total_mapped_file 0 [ 1790.165762][T31106] total_dirty 0 [ 1790.168592][T31110] bond93 (unregistering): Released all slaves [ 1790.174935][T31126] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:54:06 executing program 3: memfd_create(&(0x7f0000000440)='{+!):^]\x00', 0x7) [ 1790.181043][T31106] total_writeback 0 [ 1790.182077][T31106] total_workingset_refault_anon 28237 [ 1790.183422][T31106] total_workingset_refault_file 22 [ 1790.184732][T31106] total_swap 1806336 [ 1790.185674][T31106] total_swapcached 4096 [ 1790.186669][T31106] total_pgpgin 1266886 [ 1790.192273][T31126] bond1773: entered promiscuous mode [ 1790.193787][T31106] total_pgpgout 1271478 [ 1790.194891][T31106] total_pgfault 1500988 [ 1790.195960][T31106] total_pgmajfault 25569 [ 1790.197031][T31106] total_inactive_anon 0 [ 1790.198224][T31106] total_active_anon 0 [ 1790.199265][T31106] total_inactive_file 20480 [ 1790.200382][T31106] total_active_file 4096 21:54:06 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0}, 0x40) [ 1790.201361][T31106] total_unevictable 0 [ 1790.202465][T31106] anon_cost 0 [ 1790.203494][T31106] file_cost 1 [ 1790.204385][T31106] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=31106,uid=0 [ 1790.208378][T31106] Memory cgroup out of memory: Killed process 31106 (syz-executor.1) total-vm:54448kB, anon-rss:372kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 21:54:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="0001000b000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:54:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x7000}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 21:54:06 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000001c0), 0x4) [ 1790.240932][T31133] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:54:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x6c000000}, 0x0) [ 1790.264645][T22512] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1790.273089][T31133] bond1774: entered promiscuous mode 21:54:06 executing program 3: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x33) [ 1790.276183][T22512] CPU: 1 PID: 22512 Comm: syz-executor.1 Tainted: G B 6.8.0-rc4-syzkaller-g905b00721763 #0 [ 1790.279091][T22512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1790.281850][T22512] Call trace: [ 1790.282749][T22512] dump_backtrace+0x1b8/0x1e4 [ 1790.283984][T22512] show_stack+0x2c/0x3c [ 1790.285085][T22512] dump_stack_lvl+0xd0/0x124 [ 1790.285468][T31138] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1790.286312][T22512] dump_stack+0x1c/0x28 [ 1790.289435][T22512] dump_header+0xac/0x5f4 [ 1790.290680][T22512] oom_kill_process+0x324/0x9a4 [ 1790.291979][T22512] out_of_memory+0xd5c/0x1014 [ 1790.293192][T22512] mem_cgroup_out_of_memory+0x250/0x324 [ 1790.294657][T22512] try_charge_memcg+0xaf4/0x148c [ 1790.295876][T22512] obj_cgroup_charge+0x174/0x29c [ 1790.297175][T22512] __memcg_slab_pre_alloc_hook+0x290/0x2cc [ 1790.298717][T22512] kmem_cache_alloc+0x2a8/0x488 [ 1790.300012][T22512] vm_area_dup+0x60/0x274 [ 1790.301122][T22512] copy_mm+0xad4/0x1bbc [ 1790.302196][T22512] copy_process+0x1980/0x3478 [ 1790.303373][T22512] kernel_clone+0x1d8/0x80c [ 1790.304554][T22512] __arm64_sys_clone+0x1f8/0x24c [ 1790.305876][T22512] invoke_syscall+0x98/0x2b8 [ 1790.307153][T22512] el0_svc_common+0x130/0x23c [ 1790.308349][T22512] do_el0_svc+0x48/0x58 [ 1790.309399][T22512] el0_svc+0x54/0x158 [ 1790.310487][T22512] el0t_64_sync_handler+0x84/0xfc [ 1790.311824][T22512] el0t_64_sync+0x190/0x194 21:54:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="0001000c000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1790.315942][T22512] memory: usage 307108kB, limit 307200kB, failcnt 45886 [ 1790.318145][T22512] memory+swap: usage 308868kB, limit 9007199254740988kB, failcnt 0 [ 1790.320278][T22512] kmem: usage 307080kB, limit 9007199254740988kB, failcnt 0 [ 1790.322179][T22512] Memory cgroup stats for /syz1: [ 1790.322267][T22512] cache 12288 [ 1790.324484][T22512] rss 0 [ 1790.325219][T22512] rss_huge 0 [ 1790.326148][T22512] shmem 0 [ 1790.326952][T22512] mapped_file 0 [ 1790.328385][T22512] dirty 0 [ 1790.329224][T22512] writeback 0 [ 1790.330147][T22512] workingset_refault_anon 28257 [ 1790.331450][T22512] workingset_refault_file 22 [ 1790.332758][T22512] swap 1806336 [ 1790.333569][T22512] swapcached 0 [ 1790.334564][T22512] pgpgin 1266906 [ 1790.335448][T22512] pgpgout 1271499 [ 1790.336539][T22512] pgfault 1501018 21:54:06 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000180), 0x10) [ 1790.339152][T31138] bond93: entered promiscuous mode [ 1790.339927][T22512] pgmajfault 25586 [ 1790.341568][T31143] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1790.343787][T22512] inactive_anon 0 [ 1790.344722][T22512] active_anon 0 [ 1790.352472][T22512] inactive_file 12288 21:54:06 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$dsp(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000001, 0x10, r0, 0x0) [ 1790.354959][T22512] active_file 12288 [ 1790.357196][T22512] unevictable 0 [ 1790.358592][T22512] hierarchical_memory_limit 314572800 [ 1790.361175][T22512] hierarchical_memsw_limit 9223372036854771712 [ 1790.363945][T22512] total_cache 12288 [ 1790.365069][T22512] total_rss 0 [ 1790.365932][T22512] total_rss_huge 0 [ 1790.369212][T22512] total_shmem 0 [ 1790.370103][T22512] total_mapped_file 0 [ 1790.373131][T22512] total_dirty 0 [ 1790.374139][T22512] total_writeback 0 [ 1790.376340][T22512] total_workingset_refault_anon 28257 [ 1790.380172][T22512] total_workingset_refault_file 22 [ 1790.382926][T31143] bond1775: entered promiscuous mode [ 1790.384300][T22512] total_swap 1806336 [ 1790.385295][T22512] total_swapcached 0 [ 1790.387569][T21206] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1790.389760][T22512] total_pgpgin 1266906 [ 1790.393121][T22512] total_pgpgout 1271499 [ 1790.395372][T22512] total_pgfault 1501018 [ 1790.397336][T22512] total_pgmajfault 25586 21:54:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) [ 1790.400368][T22512] total_inactive_anon 0 [ 1790.402718][T22512] total_active_anon 0 [ 1790.404266][T22512] total_inactive_file 12288 [ 1790.405485][T22512] total_active_file 12288 [ 1790.406695][T22512] total_unevictable 0 [ 1790.408628][T22512] anon_cost 0 [ 1790.409599][T22512] file_cost 1 [ 1790.410401][T22512] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=25483,uid=0 21:54:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="0001000d000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1790.414531][T22512] Memory cgroup out of memory: Killed process 25483 (syz-executor.1) total-vm:50992kB, anon-rss:432kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 1790.421255][T31138] 8021q: adding VLAN 0 to HW filter on device batadv1114 [ 1790.423549][T31138] batadv1114: entered promiscuous mode [ 1790.425770][T31138] bond93: (slave batadv1114): Enslaving as an active interface with an up link 21:54:06 executing program 3: accept$ax25(0xffffffffffffffff, 0x0, 0x0) [ 1790.440889][T31149] bond93 (unregistering): (slave batadv1114): Releasing backup interface 21:54:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0xe35, @fixed, 0x0, 0x1}, 0xe) [ 1790.490787][T31149] batadv1114: left promiscuous mode [ 1790.499721][T31149] bond93 (unregistering): Released all slaves 21:54:06 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) [ 1790.510499][T31154] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1790.526577][T31154] bond1776: entered promiscuous mode [ 1790.528373][T31157] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 21:54:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="0001000e000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:54:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) [ 1790.576688][T31157] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 21:54:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x74000000}, 0x0) 21:54:06 executing program 3: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x33) [ 1790.637073][T31157] CPU: 1 PID: 31157 Comm: syz-executor.1 Tainted: G B 6.8.0-rc4-syzkaller-g905b00721763 #0 [ 1790.640058][T31157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1790.642623][T31157] Call trace: [ 1790.643381][T31157] dump_backtrace+0x1b8/0x1e4 [ 1790.644587][T31157] show_stack+0x2c/0x3c [ 1790.645631][T31157] dump_stack_lvl+0xd0/0x124 [ 1790.646876][T31157] dump_stack+0x1c/0x28 [ 1790.647922][T31157] dump_header+0xac/0x5f4 [ 1790.649043][T31157] oom_kill_process+0x324/0x9a4 [ 1790.650252][T31157] out_of_memory+0xd5c/0x1014 [ 1790.651397][T31157] mem_cgroup_out_of_memory+0x250/0x324 [ 1790.652846][T31157] try_charge_memcg+0xaf4/0x148c [ 1790.654121][T31157] obj_cgroup_charge+0x174/0x29c [ 1790.655312][T31157] __memcg_slab_pre_alloc_hook+0x290/0x2cc [ 1790.656750][T31157] kmalloc_trace+0x2bc/0x49c [ 1790.657897][T31157] ipv6_add_dev+0x128/0xee4 [ 1790.659045][T31157] addrconf_notify+0x514/0xce8 [ 1790.660339][T31157] notifier_call_chain+0x1a4/0x510 [ 1790.661707][T31157] raw_notifier_call_chain+0x3c/0x50 [ 1790.663035][T31157] call_netdevice_notifiers+0x13c/0x1bc [ 1790.664422][T31157] register_netdevice+0xd4c/0x1108 [ 1790.665736][T31157] bond_newlink+0x50/0xa8 [ 1790.666883][T31157] rtnl_newlink+0x1184/0x1bcc [ 1790.668140][T31157] rtnetlink_rcv_msg+0x748/0xdbc [ 1790.669416][T31157] netlink_rcv_skb+0x214/0x3c4 [ 1790.670644][T31157] rtnetlink_rcv+0x28/0x38 [ 1790.671730][T31157] netlink_unicast+0x65c/0x898 [ 1790.672986][T31157] netlink_sendmsg+0x83c/0xb20 [ 1790.674248][T31157] ____sys_sendmsg+0x56c/0x840 [ 1790.675431][T31157] __sys_sendmsg+0x26c/0x33c [ 1790.676580][T31157] __arm64_sys_sendmsg+0x80/0x94 [ 1790.677843][T31157] invoke_syscall+0x98/0x2b8 [ 1790.679055][T31157] el0_svc_common+0x130/0x23c [ 1790.680217][T31157] do_el0_svc+0x48/0x58 [ 1790.681283][T31157] el0_svc+0x54/0x158 [ 1790.682306][T31157] el0t_64_sync_handler+0x84/0xfc [ 1790.683483][T31157] el0t_64_sync+0x190/0x194 21:54:06 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) read$dsp(r0, &(0x7f0000000400)=""/200, 0xc8) [ 1790.767214][T31157] memory: usage 307200kB, limit 307200kB, failcnt 46294 [ 1790.769111][T31157] memory+swap: usage 308876kB, limit 9007199254740988kB, failcnt 0 [ 1790.779090][T31157] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 1790.789816][T31157] Memory cgroup stats for /syz1: [ 1790.789906][T31157] cache 12288 [ 1790.800797][T31157] rss 4096 [ 1790.801592][T31157] rss_huge 0 [ 1790.810019][T31157] shmem 0 [ 1790.814159][T31157] mapped_file 0 [ 1790.817339][T21206] usb 1-1: config 36 has an invalid descriptor of length 58, skipping remainder of the config [ 1790.819485][T31157] dirty 0 [ 1790.820144][T21206] usb 1-1: config 36 has 0 interfaces, different from the descriptor's value: 1 [ 1790.826288][T31157] writeback 0 [ 1790.827180][T31157] workingset_refault_anon 28442 [ 1790.838457][T31157] workingset_refault_file 22 [ 1790.845202][T31157] swap 1716224 [ 1790.846078][T31157] swapcached 0 [ 1790.854649][T31157] pgpgin 1267113 [ 1790.855563][T31157] pgpgout 1271705 [ 1790.864131][T31157] pgfault 1501341 [ 1790.865088][T31157] pgmajfault 25767 [ 1790.870483][T31157] inactive_anon 4096 [ 1790.871480][T31157] active_anon 0 [ 1790.884452][T31157] inactive_file 16384 [ 1790.885412][T31157] active_file 8192 [ 1790.896209][T31157] unevictable 0 [ 1790.897108][T31157] hierarchical_memory_limit 314572800 [ 1790.910796][T31157] hierarchical_memsw_limit 9223372036854771712 [ 1790.921261][T31157] total_cache 12288 [ 1790.922222][T31157] total_rss 4096 [ 1790.933157][T31157] total_rss_huge 0 [ 1790.939726][T31157] total_shmem 0 [ 1790.940670][T31157] total_mapped_file 0 [ 1790.947349][T21206] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1790.949857][T21206] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1790.952201][T21206] usb 1-1: Manufacturer: syz [ 1790.952687][T31157] total_dirty 0 [ 1790.953579][T21206] usb 1-1: SerialNumber: syz [ 1790.958304][T31157] total_writeback 0 [ 1790.964834][T31157] total_workingset_refault_anon 28442 [ 1790.969659][T31157] total_workingset_refault_file 22 [ 1790.973198][T31157] total_swap 1716224 [ 1790.976801][T31157] total_swapcached 0 [ 1790.981252][T31157] total_pgpgin 1267113 [ 1790.984792][T31157] total_pgpgout 1271705 [ 1790.988183][T31157] total_pgfault 1501341 [ 1790.991560][T31157] total_pgmajfault 25767 [ 1790.994904][T31157] total_inactive_anon 4096 [ 1790.997222][T31157] total_active_anon 0 [ 1791.001718][T31157] total_inactive_file 16384 [ 1791.005032][T31157] total_active_file 8192 [ 1791.008036][T31157] total_unevictable 0 [ 1791.011373][T31157] anon_cost 8 [ 1791.012224][T31157] file_cost 1 [ 1791.015112][T31157] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=31153,uid=0 [ 1791.026876][T31157] Memory cgroup out of memory: Killed process 31153 (syz-executor.1) total-vm:54640kB, anon-rss:372kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1791.049443][T31157] bond2018: entered promiscuous mode [ 1791.053206][T31166] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 21:54:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x7001}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1791.077431][T31166] bond1777: entered promiscuous mode [ 1791.081395][T31170] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 21:54:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="0001000f000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1791.093334][T22512] syz-executor.1 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=0 [ 1791.104597][T22512] CPU: 0 PID: 22512 Comm: syz-executor.1 Tainted: G B 6.8.0-rc4-syzkaller-g905b00721763 #0 [ 1791.107514][T31170] bond93: entered promiscuous mode [ 1791.107557][T22512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1791.111535][T22512] Call trace: [ 1791.112402][T22512] dump_backtrace+0x1b8/0x1e4 [ 1791.113652][T22512] show_stack+0x2c/0x3c [ 1791.114729][T22512] dump_stack_lvl+0xd0/0x124 [ 1791.115898][T22512] dump_stack+0x1c/0x28 [ 1791.116927][T22512] dump_header+0xac/0x5f4 [ 1791.118047][T22512] oom_kill_process+0x324/0x9a4 [ 1791.119346][T22512] out_of_memory+0xd5c/0x1014 [ 1791.120592][T22512] mem_cgroup_out_of_memory+0x250/0x324 [ 1791.122104][T22512] try_charge_memcg+0xaf4/0x148c [ 1791.123414][T22512] __memcg_kmem_charge_page+0x188/0x304 [ 1791.124984][T22512] __alloc_pages+0x254/0x698 [ 1791.126190][T22512] alloc_pages_mpol+0x328/0x5dc [ 1791.127449][T22512] alloc_pages+0x168/0x200 [ 1791.128665][T22512] pte_alloc_one+0x2c/0x2fc [ 1791.128853][T31174] 8021q: adding VLAN 0 to HW filter on device batadv1115 [ 1791.129829][T22512] copy_page_range+0x3218/0x3b90 [ 1791.129842][T22512] copy_mm+0xf4c/0x1bbc [ 1791.129852][T22512] copy_process+0x1980/0x3478 [ 1791.129860][T22512] kernel_clone+0x1d8/0x80c [ 1791.134440][T31174] batadv1115: entered promiscuous mode [ 1791.135141][T22512] __arm64_sys_clone+0x1f8/0x24c [ 1791.135155][T22512] invoke_syscall+0x98/0x2b8 [ 1791.135168][T22512] el0_svc_common+0x130/0x23c [ 1791.138394][T31174] bond93: (slave batadv1115): Enslaving as an active interface with an up link [ 1791.139019][T22512] do_el0_svc+0x48/0x58 [ 1791.139035][T22512] el0_svc+0x54/0x158 [ 1791.139044][T22512] el0t_64_sync_handler+0x84/0xfc [ 1791.139053][T22512] el0t_64_sync+0x190/0x194 [ 1791.148458][ C0] vkms_vblank_simulate: vblank timer overrun [ 1791.152578][T22512] memory: usage 307120kB, limit 307200kB, failcnt 46732 [ 1791.154462][T22512] memory+swap: usage 308704kB, limit 9007199254740988kB, failcnt 0 [ 1791.156568][T22512] kmem: usage 307060kB, limit 9007199254740988kB, failcnt 0 [ 1791.158699][T22512] Memory cgroup stats for /syz1: [ 1791.158787][T22512] cache 12288 [ 1791.161002][T22512] rss 0 [ 1791.161749][T22512] rss_huge 0 [ 1791.162654][T22512] shmem 0 [ 1791.163402][T22512] mapped_file 0 [ 1791.164352][T22512] dirty 0 [ 1791.165092][T22512] writeback 0 [ 1791.166017][T22512] workingset_refault_anon 28582 [ 1791.167387][T22512] workingset_refault_file 22 [ 1791.168711][T22512] swap 1622016 [ 1791.169596][T22512] swapcached 0 [ 1791.170561][T22512] pgpgin 1267253 [ 1791.171500][T22512] pgpgout 1271846 [ 1791.172513][T22512] pgfault 1501548 [ 1791.173161][T31176] bond93 (unregistering): (slave batadv1115): Releasing backup interface [ 1791.173392][T22512] pgmajfault 25903 [ 1791.173400][T22512] inactive_anon 0 [ 1791.173405][T22512] active_anon 0 [ 1791.173411][T22512] inactive_file 20480 [ 1791.173416][T22512] active_file 4096 [ 1791.180635][T22512] unevictable 0 [ 1791.181521][T22512] hierarchical_memory_limit 314572800 [ 1791.182963][T22512] hierarchical_memsw_limit 9223372036854771712 [ 1791.184557][T22512] total_cache 12288 [ 1791.185533][T22512] total_rss 0 [ 1791.186466][T22512] total_rss_huge 0 [ 1791.187574][T22512] total_shmem 0 [ 1791.188988][T22512] total_mapped_file 0 [ 1791.190099][T22512] total_dirty 0 [ 1791.190952][T22512] total_writeback 0 [ 1791.192024][T22512] total_workingset_refault_anon 28582 [ 1791.193427][T22512] total_workingset_refault_file 22 [ 1791.194836][T22512] total_swap 1622016 [ 1791.195846][T22512] total_swapcached 0 [ 1791.196917][T22512] total_pgpgin 1267253 [ 1791.199742][T22512] total_pgpgout 1271846 [ 1791.200850][T22512] total_pgfault 1501548 [ 1791.201840][T22512] total_pgmajfault 25903 [ 1791.202986][T22512] total_inactive_anon 0 [ 1791.204191][T22512] total_active_anon 0 [ 1791.205280][T22512] total_inactive_file 20480 [ 1791.206502][T22512] total_active_file 4096 [ 1791.207742][T22512] total_unevictable 0 [ 1791.208960][T22512] anon_cost 0 [ 1791.209806][T22512] file_cost 1 [ 1791.210712][T22512] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=22512,uid=0 [ 1791.214874][T22512] Memory cgroup out of memory: Killed process 22512 (syz-executor.1) total-vm:50416kB, anon-rss:496kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1791.219529][T31176] batadv1115: left promiscuous mode [ 1791.229279][T31176] bond93 (unregistering): Released all slaves [ 1791.269569][T31180] bond1778: entered promiscuous mode [ 1791.281895][T21206] usb 1-1: USB disconnect, device number 81 21:54:07 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2fa7240936901b0293df400100109021b000124a8f87f090587e339ae0c41da3a3970409fd6c5f45fb436f0ad99fd4d7570e1ef026a6098eb3d59c69206d4e54f5228db9579f0c3b6c8785e6bd6ad282f92f9a54b425d856727890b36ec6b33a5303caa5b0000000000ca7976d1ce66ac69cba5a60e5cc09251e541308e831e10843d509bdb51c2dd44c64ecff241a196928c4e1378eaa520de6fe8271f9f3e5fb28628525a30febcc004868eb34b40f45e5f8acf1bce741c1190b57528a5610fc8264f92d7eee1b9"], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, &(0x7f0000000a00)={0xe0, 0xc, 0xc0, {0xc0, 0x1, "665bfda55a0bb33356221f379aeb8b661d88cb44a413560fa5bb554258cc5721b3e1c209a78327726dae5a10190178cd9c24ff5489f99026d14c07e9bf33f9913cd4442070eb2e6fa695cf4502a9877a15ccf841091bcec07aea2a6e1d4b609908e0cba24fda6fcea48eba153aac1b78cee0af315cb5a4504af20c3f075dcf3946a92c91c3faaf90c8675b9b4d25e1c79ea02f399535f5e84bcf2df9247d60a20edfbda207d952cbe0367ddca217d48e501fa2e919debc419c2860a9d9d2"}}, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}, &(0x7f0000000b40), &(0x7f0000000b80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x2f1}}}}, &(0x7f0000000d40)={0x2c, &(0x7f0000000c00)={0x0, 0x12, 0x32, "ebb50523de064b7c8982ced89d7cef3b55340c57c89f1cbaa2eb3b0b8e317406aeb4e31d5ebada798053178c97bb89fa73fb"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000cc0)={0x20, 0x1, 0xe, "14e509415571be50c73c5da05a0e"}, &(0x7f0000000d00)={0x20, 0x3, 0x1, 0x71}}) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000100)={0x0, 0xf60498082940b446, 0xc6, {0xc6, 0x8, "2f22b7fdbca7300215651513a017ca2fdf93d149288de8487cf35df2fb0ef1ad97e43466338ebfd0114dbf24776125209dee4e5f7ca546f1088e78c35fd9872e07afe1eaf5449a6f2c6d2925af878c2d5c909401a0a87c6befc222c2f89d3cf3f323ada6b60d15511b52d6ba229da8fc4480181cbd529d039af49e742649bfd7210548fd91b54242c8c8ebf788edf2c0a407012d1aa28968e977bd82fe43a480b2dd30c3b46d286fa0a27b4545380badd71ee455637cb58f830431612e05e3fb61010256"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}, &(0x7f0000000280)={0x0, 0xf, 0x19d, {0x5, 0xf, 0x19d, 0x6, [@generic={0xac, 0x10, 0x1, "bdf184323ed4537e5ec5913fbb149313c48029cfc08e62e905c59cfc229e94cc15a914c5f47150832815cc60b3643be100241f1068f8eefe6e5f8581895b0b5ab3ecf2dcaee2cc2e0859158b5ec7369d7e6b6786d520ef4727c60fee510282460e01d991a0b02053fd911cfd7c2c619cb4f069b70f32361bc5da95b0eca1dcfae2871df35a5283d36983dafc476c74c23b4fb4be4629fc9202987302e853d8e39664a7139e91c2b8a9"}, @ssp_cap={0xc, 0x10, 0xa, 0xbb, 0x0, 0xf4, 0x47eeaf4890c7bf02}, @generic={0xb7, 0x10, 0x2, "c2a4b11c85b94952436ca009b1f1f4aea9ed32e9d5bc5d39f7ba3511923b0f0ec2e358d470dfb72a598116ea2b86877d69234a1dae75d8d2d1bdeb9dbb832221d1a5431e7b6f98f3fd3cce76c182d9afa4403b09578e8b07d5b45a12b51ed3074c8e25a30ce449be330a745b9bee46cb8181e4d5d1e742178621f5827e9b3814bc728a711536ff83b1bbc3b5182c40b9ba10c2dfb5e43fc92d550afea625ccf407424d0449cdf9bbfdf9d33ed9faf2341e7e86c9"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "fc355aaa7e3fb744c5d2a49e98a1138a"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1f, 0x5, 0x8, 0x2, 0xff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x5, 0x4, 0x9}]}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x18, 0x0, 0x0, "e412c931", "19f0f8d4"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x8, 0xff, 0x1f, 0x4, 0x8d, 0x5}}}, &(0x7f0000000940)={0x84, &(0x7f0000000500)={0x40, 0x9, 0x6b, "ddcab35899194c859ad37b2bc89e21b0c004df9f1fa8fa8665e037d2ea9856bb11d3ff910f1cc58908b8d97ab01d41a240f5f3ed7fbf1880a1019bc977538ead7edabe3587b5facddf4926e861c5d0a70d98334a4a765c334ae77d636408799accc561f4235818dec438ce"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x45}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x100, 0x20, [0xf00]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000006c0)={0x40, 0x9, 0x1}, &(0x7f0000000700)={0x40, 0xb, 0x2, "27e6"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000780)={0x40, 0x13, 0x6, @remote}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000800)={0x40, 0x19, 0x2, "9a54"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x7}}) (async) syz_usb_control_io(r0, &(0x7f0000001000)={0x2c, &(0x7f0000000d80)={0x0, 0x22, 0x81, {0x81, 0x2, "f70ec845904ae148a6220f535d2240eeb858d1a63b421cdd70b6ce69d35a285520ece531fa0b2e999b37e7605133f77f1ca3d99f8a19c69257ee40760bdae9e31155990e693480702c3efad47a21139859f1c46af9be867284fb26bd82dbd5fa30ca32bc11ccda2cfa2ec09ca3aa2a5f81f7d03217544624fbe08227f88f1c"}}, &(0x7f0000000e40)={0x0, 0x3, 0xb5, @string={0xb5, 0x3, "0dd75ecec73327ad1c105de1e54e1d1504a0b06a47e5f7515c93112d53e1edf6ebc79b737e868d04a11c623cbf1cdd0b40c30dc45be2c5cdeba115df8632b7b366be9e3ffae200ed241ee4bcaa17086ea5fa5506b27aa67186a28a201554a9c2325f5a4a09f8fab87c77cc76db4b6b29f8976fcd22a2722bdfa089609d058080e454b935f2eea82eb4eaa71e6e1a2effe07bd548662eee54f771784f9373ae14fe079a3e905178d81156829ac2cf46f64afc83"}}, &(0x7f0000000f00)={0x0, 0xf, 0x3e, {0x5, 0xf, 0x3e, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2, 0x8, 0xff}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x0, 0x9, 0x7, 0x40}, @generic={0x8, 0x10, 0xb, "f8594e7baa"}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x3f, 0xf000, 0x80, [0x808030, 0xff0000, 0xff0030, 0x3f00]}]}}, &(0x7f0000000f80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x8, 0xfe, 0x8, "e0bc1341", "71578f44"}}, &(0x7f0000000fc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x8, 0x4d, 0x0, 0x1, 0x9, 0x1ec}}}, &(0x7f0000001440)={0x84, &(0x7f0000001040)={0x0, 0x12, 0x33, "adea6d51ff8786aa27689cbbdb388d359db40385bd57617aedf2d2e67b5c1ad33d1e663dc4373b2480cd1d4d31791395dff990"}, &(0x7f0000001080)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000010c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000001100)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000001140)={0x20, 0x0, 0x8, {0x200, 0x20, [0xf0]}}, &(0x7f0000001180)={0x40, 0x7, 0x2, 0x41}, &(0x7f00000011c0)={0x40, 0x9, 0x1, 0x6b}, &(0x7f0000001200)={0x40, 0xb, 0x2, "f485"}, &(0x7f0000001240)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000001280)={0x40, 0x13, 0x6}, &(0x7f00000012c0)={0x40, 0x17, 0x6}, &(0x7f0000001300)={0x40, 0x19, 0x2, "9658"}, &(0x7f0000001340)={0x40, 0x1a, 0x2, 0xfbff}, &(0x7f0000001380)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000013c0)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000001400)={0x40, 0x21, 0x1, 0xa3}}) 21:54:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r1, 0x1}, 0x14}}, 0x0) 21:54:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010011000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:54:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x7a000000}, 0x0) 21:54:07 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000040)) [ 1791.397991][T31293] bond1779: entered promiscuous mode 21:54:07 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r0, &(0x7f0000000180)=""/182, 0xb6, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 21:54:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010012000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1791.433400][T31296] bond93: entered promiscuous mode [ 1791.456721][T31306] bond1780: entered promiscuous mode 21:54:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00019716000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1791.487898][T31301] 8021q: adding VLAN 0 to HW filter on device batadv1116 [ 1791.497142][T31301] batadv1116: entered promiscuous mode [ 1791.503834][T31301] bond93: (slave batadv1116): Enslaving as an active interface with an up link [ 1791.516002][T31296] bond93 (unregistering): (slave batadv1116): Releasing backup interface 21:54:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x7002}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1791.559384][T31296] batadv1116: left promiscuous mode [ 1791.565705][T31296] bond93 (unregistering): Released all slaves [ 1791.596598][T31309] bond1781: entered promiscuous mode 21:54:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="0001ce16000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:54:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x81000000}, 0x0) 21:54:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x7003}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 1791.777413][T21206] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1792.090576][T31312] bond1782: entered promiscuous mode 21:54:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010018000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1792.126462][T31315] bond93: entered promiscuous mode [ 1792.145497][T31316] 8021q: adding VLAN 0 to HW filter on device batadv1117 [ 1792.152307][T31316] batadv1117: entered promiscuous mode [ 1792.156833][T31316] bond93: (slave batadv1117): Enslaving as an active interface with an up link [ 1792.171784][T31317] bond93 (unregistering): (slave batadv1117): Releasing backup interface [ 1792.197396][T21206] usb 1-1: config 36 has an invalid descriptor of length 58, skipping remainder of the config [ 1792.200424][T21206] usb 1-1: config 36 has 0 interfaces, different from the descriptor's value: 1 [ 1792.228989][T31317] batadv1117: left promiscuous mode [ 1792.236268][T31317] bond93 (unregistering): Released all slaves [ 1792.249827][ T1389] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 21:54:08 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000080)) [ 1792.273377][T31322] bond1783: entered promiscuous mode 21:54:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010020000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:54:08 executing program 3: openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) [ 1792.322297][T21206] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 21:54:08 executing program 3: pselect6(0x40, &(0x7f0000000980), 0x0, &(0x7f0000000a00)={0xfffffffffffffffb}, &(0x7f0000000a40)={0x77359400}, &(0x7f0000000ac0)={&(0x7f0000000a80), 0x8}) [ 1792.324665][T21206] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1792.328282][T21206] usb 1-1: Manufacturer: syz [ 1792.329906][T21206] usb 1-1: SerialNumber: syz 21:54:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x88470000}, 0x0) [ 1792.344444][ T1389] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.379994][T31329] bond1784: entered promiscuous mode [ 1792.387034][T31335] bond93: entered promiscuous mode 21:54:08 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x2) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x10800, 0x0) 21:54:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010021000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1792.413710][ T1389] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.435989][T31335] 8021q: adding VLAN 0 to HW filter on device batadv1118 [ 1792.439104][T31335] batadv1118: entered promiscuous mode [ 1792.441489][T31335] bond93: (slave batadv1118): Enslaving as an active interface with an up link 21:54:08 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f00000003c0), 0x109001, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) [ 1792.465571][T31340] bond1785: entered promiscuous mode [ 1792.470171][T31335] bond93 (unregistering): (slave batadv1118): Releasing backup interface 21:54:08 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x5451, 0x0) 21:54:08 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) 21:54:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010022000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:54:08 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f00000008c0)={0x3, @bcast}) [ 1792.510562][T31335] batadv1118: left promiscuous mode [ 1792.524729][T31335] bond93 (unregistering): Released all slaves 21:54:08 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000140)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)) [ 1792.538174][ T1389] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 21:54:08 executing program 3: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) [ 1792.564335][T31348] bond1786: entered promiscuous mode 21:54:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010025000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:54:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x88480000}, 0x0) 21:54:08 executing program 3: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r0, &(0x7f0000000080)) [ 1792.620952][T31358] bond1787: entered promiscuous mode [ 1792.639115][T31361] bond93: entered promiscuous mode 21:54:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="0001002f000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:54:08 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) [ 1792.670457][T31361] 8021q: adding VLAN 0 to HW filter on device batadv1119 [ 1792.676764][T31361] batadv1119: entered promiscuous mode [ 1792.680006][T31361] bond93: (slave batadv1119): Enslaving as an active interface with an up link [ 1792.686100][T31361] bond93 (unregistering): (slave batadv1119): Releasing backup interface [ 1792.719964][T31361] batadv1119: left promiscuous mode [ 1792.726181][T31361] bond93 (unregistering): Released all slaves [ 1792.741457][T31367] bond1788: entered promiscuous mode [ 1792.989677][T20034] usb 1-1: USB disconnect, device number 82 21:54:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090587e3", @ANYRES16=r0, @ANYRES8=r0], 0x0) syz_usb_control_io(r1, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 21:54:08 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local}}}}) 21:54:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010936000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:54:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x88a8ffff}, 0x0) [ 1793.025020][T31510] bond93: entered promiscuous mode [ 1793.046950][T31510] 8021q: adding VLAN 0 to HW filter on device batadv1120 [ 1793.052972][T31510] batadv1120: entered promiscuous mode [ 1793.059182][T31510] bond93: (slave batadv1120): Enslaving as an active interface with an up link 21:54:09 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x77d882, 0x0) 21:54:09 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)) [ 1793.097196][T31511] bond1789: entered promiscuous mode 21:54:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="0001003a000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1793.122336][T31510] bond93 (unregistering): (slave batadv1120): Releasing backup interface 21:54:09 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x5452, 0x0) 21:54:09 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) [ 1793.169356][T31510] batadv1120: left promiscuous mode 21:54:09 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={0x0, 0x0, 0xcc6013a45998d3df}, 0x18) 21:54:09 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000000)) 21:54:09 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) [ 1793.177835][T31510] bond93 (unregistering): Released all slaves [ 1793.203387][T31529] bond1790: entered promiscuous mode 21:54:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00016f3d000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:54:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0xb6510000}, 0x0) 21:54:09 executing program 3: shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) [ 1793.287972][T31543] bond1791: entered promiscuous mode 21:54:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="0001003f000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:54:09 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000001200), 0x8, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) [ 1793.332667][T31547] bond93: entered promiscuous mode [ 1793.353620][T31557] bond1792: entered promiscuous mode 21:54:09 executing program 3: r0 = msgget(0x0, 0x0) msgsnd(r0, &(0x7f0000000080)={0x2}, 0x8, 0x0) 21:54:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010040000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1793.393448][T31547] 8021q: adding VLAN 0 to HW filter on device batadv1121 [ 1793.398456][T20034] usb 1-1: new high-speed USB device number 83 using dummy_hcd 21:54:09 executing program 3: r0 = epoll_create1(0x0) r1 = dup(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup3(r1, r2, 0x0) [ 1793.405150][T31547] batadv1121: entered promiscuous mode [ 1793.410828][T31547] bond93: (slave batadv1121): Enslaving as an active interface with an up link [ 1793.433013][T31562] bond93 (unregistering): (slave batadv1121): Releasing backup interface 21:54:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) dup3(r0, r1, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) [ 1793.469735][T31562] batadv1121: left promiscuous mode [ 1793.478593][T31562] bond93 (unregistering): Released all slaves 21:54:09 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000002000), 0x412002, 0x0) 21:54:09 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) [ 1793.522645][T31581] bond1793: entered promiscuous mode 21:54:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0xb7510000}, 0x0) 21:54:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00018847000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:54:09 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8440, 0x1ca) [ 1793.580820][T31597] bond93: entered promiscuous mode [ 1793.622326][T31601] bond1794: entered promiscuous mode 21:54:09 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000007d00)={0x0, 0x0, &(0x7f0000007cc0)={0x0}}, 0x0) 21:54:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010048000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1793.675246][T31597] 8021q: adding VLAN 0 to HW filter on device batadv1122 [ 1793.679015][T31597] batadv1122: entered promiscuous mode 21:54:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x41, 0x0) write$P9_RREMOVE(r0, 0x0, 0x0) [ 1793.681446][T31597] bond93: (slave batadv1122): Enslaving as an active interface with an up link [ 1793.695920][T31614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1793.698454][T31614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1793.700555][T31614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1793.702934][T31614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1793.705181][T31614] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1793.708222][T31614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1793.717633][T31605] bond93 (unregistering): (slave batadv1122): Releasing backup interface 21:54:09 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0xffffffff, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000040)={0x5, 0x8, 0x2, 0x0, 0x0, [0x3, 0x400, 0x0, 0x2]}) fremovexattr(r0, &(0x7f0000000080)=@known='trusted.overlay.opaque\x00') fsetxattr$security_evm(r0, &(0x7f00000000c0), &(0x7f0000000100)=@sha1={0x1, "b84aa37c99a5274795fda39ecb36baeb37213141"}, 0x15, 0x1) 21:54:09 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fchmod(r0, 0x0) 21:54:09 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x41, 0x40) [ 1793.758561][T31605] batadv1122: left promiscuous mode [ 1793.769789][T31605] bond93 (unregistering): Released all slaves [ 1793.783698][T31609] bond1795: entered promiscuous mode [ 1793.878704][T20034] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1793.881009][T20034] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1793.883103][T20034] usb 1-1: Manufacturer: syz [ 1793.884281][T20034] usb 1-1: SerialNumber: syz [ 1793.959931][T31610] chnl_net:caif_netlink_parms(): no params data found [ 1794.043754][T31610] bridge0: port 1(bridge_slave_0) entered blocking state [ 1794.045887][T31610] bridge0: port 1(bridge_slave_0) entered disabled state [ 1794.048914][T31610] bridge_slave_0: entered allmulticast mode [ 1794.052017][T31610] bridge_slave_0: entered promiscuous mode [ 1794.059478][T31610] bridge0: port 2(bridge_slave_1) entered blocking state [ 1794.063438][T31610] bridge0: port 2(bridge_slave_1) entered disabled state [ 1794.066250][T31610] bridge_slave_1: entered allmulticast mode [ 1794.069545][T31610] bridge_slave_1: entered promiscuous mode [ 1794.144693][T31610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1794.158718][T20034] yealink 1-1:36.0: invalid payload size 3, expected 16 [ 1794.160843][T20034] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input276 [ 1794.168259][T31610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1794.294504][T31610] team0: Port device team_slave_0 added [ 1794.300937][T31610] team0: Port device team_slave_1 added [ 1794.318772][T31610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1794.321507][T31610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1794.329636][T31610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1794.334901][T31610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1794.336744][T31610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1794.343954][T31610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1794.996816][ T1389] hsr_slave_0: left promiscuous mode [ 1795.038101][ T1389] hsr_slave_1: left promiscuous mode [ 1795.127401][ T1389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1795.129907][ T1389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1795.133487][ T1389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1795.135852][ T1389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1795.140580][ T1389] bridge_slave_1: left allmulticast mode [ 1795.142130][ T1389] bridge_slave_1: left promiscuous mode [ 1795.143712][ T1389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1795.188695][ T1389] bridge_slave_0: left allmulticast mode [ 1795.190191][ T1389] bridge_slave_0: left promiscuous mode [ 1795.191757][ T1389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1795.377511][ T1389] veth1_macvtap: left promiscuous mode [ 1795.379148][ T1389] veth0_macvtap: left promiscuous mode [ 1795.380671][ T1389] veth1_vlan: left promiscuous mode [ 1795.382126][ T1389] veth0_vlan: left promiscuous mode [ 1795.757464][T31614] Bluetooth: hci5: command 0x0409 tx timeout [ 1796.601485][ T1389] bond2018 (unregistering): Released all slaves [ 1796.606316][ T1389] bond2017 (unregistering): (slave batadv1823): Releasing backup interface [ 1796.649094][ T1389] batadv1823 (unregistering): left promiscuous mode [ 1796.653770][ T1389] bond2017 (unregistering): Released all slaves [ 1796.660325][ T1389] bond2016 (unregistering): Released all slaves [ 1796.665062][ T1389] bond2015 (unregistering): Released all slaves [ 1796.670008][ T1389] bond2014 (unregistering): Released all slaves [ 1796.673705][ T1389] bond2013 (unregistering): (slave batadv1822): Releasing backup interface [ 1796.698844][ T1389] batadv1822 (unregistering): left promiscuous mode [ 1796.704026][ T1389] bond2013 (unregistering): Released all slaves [ 1796.708169][ T1389] bond2012 (unregistering): (slave batadv1821): Releasing backup interface [ 1796.750021][ T1389] batadv1821 (unregistering): left promiscuous mode [ 1796.754642][ T1389] bond2012 (unregistering): Released all slaves [ 1796.758782][ T1389] bond2011 (unregistering): (slave batadv1820): Releasing backup interface [ 1796.798586][ T1389] batadv1820 (unregistering): left promiscuous mode [ 1796.803114][ T1389] bond2011 (unregistering): Released all slaves [ 1796.806890][ T1389] bond2010 (unregistering): (slave batadv1819): Releasing backup interface [ 1796.859193][ T1389] batadv1819 (unregistering): left promiscuous mode [ 1796.865368][ T1389] bond2010 (unregistering): Released all slaves [ 1796.869421][ T1389] bond2009 (unregistering): (slave batadv1818): Releasing backup interface [ 1796.918961][ T1389] batadv1818 (unregistering): left promiscuous mode [ 1796.924169][ T1389] bond2009 (unregistering): Released all slaves [ 1796.928437][ T1389] bond2008 (unregistering): (slave batadv1817): Releasing backup interface [ 1796.988585][ T1389] batadv1817 (unregistering): left promiscuous mode [ 1796.993148][ T1389] bond2008 (unregistering): Released all slaves [ 1796.996741][ T1389] bond2007 (unregistering): (slave batadv1816): Releasing backup interface [ 1796.999519][ T10] usb 1-1: USB disconnect, device number 83 [ 1797.017275][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -2 [ 1797.048503][ T1389] batadv1816 (unregistering): left promiscuous mode [ 1797.053430][ T1389] bond2007 (unregistering): Released all slaves [ 1797.057049][ T1389] bond2006 (unregistering): (slave batadv1815): Releasing backup interface [ 1797.119784][ T1389] batadv1815 (unregistering): left promiscuous mode [ 1797.131175][ T1389] bond2006 (unregistering): Released all slaves [ 1797.135903][ T1389] bond2005 (unregistering): (slave batadv1814): Releasing backup interface [ 1797.179016][ T1389] batadv1814 (unregistering): left promiscuous mode [ 1797.183881][ T1389] bond2005 (unregistering): Released all slaves [ 1797.187967][ T1389] bond2004 (unregistering): (slave batadv1813): Releasing backup interface [ 1797.238741][ T1389] batadv1813 (unregistering): left promiscuous mode [ 1797.243672][ T1389] bond2004 (unregistering): Released all slaves [ 1797.247809][ T1389] bond2003 (unregistering): (slave batadv1812): Releasing backup interface [ 1797.308563][ T1389] batadv1812 (unregistering): left promiscuous mode [ 1797.313404][ T1389] bond2003 (unregistering): Released all slaves [ 1797.317209][ T1389] bond2002 (unregistering): (slave batadv1811): Releasing backup interface [ 1797.378627][ T1389] batadv1811 (unregistering): left promiscuous mode [ 1797.383496][ T1389] bond2002 (unregistering): Released all slaves [ 1797.388895][ T1389] bond2001 (unregistering): (slave batadv1810): Releasing backup interface [ 1797.439074][ T1389] batadv1810 (unregistering): left promiscuous mode [ 1797.443696][ T1389] bond2001 (unregistering): Released all slaves [ 1797.449008][ T1389] bond2000 (unregistering): (slave batadv1809): Releasing backup interface [ 1797.508682][ T1389] batadv1809 (unregistering): left promiscuous mode 21:54:13 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 21:54:13 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000f8ffffff000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000f00c0000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000030000000000000008000000000000008000000000000000000064756d6d79300000000000000000000069705f76746930000000000000000000697036746e6c30000000000000000000aaaaaaaaaabb0000000000000180961b884dd8659bf600000000b8000000b8000000e80000006970000000000000000000000000000000000000000000a823c565625b8d720020000000000000007f000001ac140000000000cca5f488b68659fff07fca000000466ef58f5dc8438b000000000000000800"/376]}, 0x1f0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090587e3", @ANYRES16=r0, @ANYRES8=r0], 0x0) (async) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090587e3", @ANYRES16=r0, @ANYRES8=r0], 0x0) syz_usb_control_io(r1, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 21:54:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00018848000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 21:54:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0xbe1392ea}, 0x0) [ 1797.526379][T31662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1797.538990][T31662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1797.543011][ T1389] bond2000 (unregistering): Released all slaves [ 1797.549662][ T1389] bond1999 (unregistering): (slave batadv1808): Releasing backup interface [ 1797.578822][ T1389] batadv1808 (unregistering): left promiscuous mode [ 1797.583777][ T1389] bond1999 (unregistering): Released all slaves [ 1797.588178][ T1389] bond1998 (unregistering): (slave batadv1807): Releasing backup interface [ 1797.619012][ T1389] batadv1807 (unregistering): left promiscuous mode [ 1797.625909][ T1389] bond1998 (unregistering): Released all slaves [ 1797.630533][ T1389] bond1997 (unregistering): (slave batadv1806): Releasing backup interface [ 1797.678960][ T1389] batadv1806 (unregistering): left promiscuous mode [ 1797.684253][ T1389] bond1997 (unregistering): Released all slaves [ 1797.689162][ T1389] bond1996 (unregistering): (slave batadv1805): Releasing backup interface [ 1797.728936][ T1389] batadv1805 (unregistering): left promiscuous mode [ 1797.734291][ T1389] bond1996 (unregistering): Released all slaves [ 1797.740779][ T1389] bond1995 (unregistering): (slave batadv1804): Releasing backup interface [ 1797.787392][T21206] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1797.808590][ T1389] batadv1804 (unregistering): left promiscuous mode [ 1797.814222][ T1389] bond1995 (unregistering): Released all slaves [ 1797.819485][ T1389] bond1994 (unregistering): (slave batadv1803): Releasing backup interface [ 1797.837625][T31614] Bluetooth: hci5: command 0x041b tx timeout [ 1797.859392][ T1389] batadv1803 (unregistering): left promiscuous mode [ 1797.865308][ T1389] bond1994 (unregistering): Released all slaves [ 1797.870072][ T1389] bond1993 (unregistering): (slave batadv1802): Releasing backup interface [ 1797.909537][ T1389] batadv1802 (unregistering): left promiscuous mode [ 1797.915047][ T1389] bond1993 (unregistering): Released all slaves [ 1797.919900][ T1389] bond1992 (unregistering): (slave batadv1801): Releasing backup interface [ 1797.958553][ T1389] batadv1801 (unregistering): left promiscuous mode [ 1797.964376][ T1389] bond1992 (unregistering): Released all slaves [ 1797.969284][ T1389] bond1991 (unregistering): (slave batadv1800): Releasing backup interface [ 1798.008885][ T1389] batadv1800 (unregistering): left promiscuous mode [ 1798.013498][ T1389] bond1991 (unregistering): Released all slaves [ 1798.019057][ T1389] bond1990 (unregistering): (slave batadv1799): Releasing backup interface [ 1798.068842][ T1389] batadv1799 (unregistering): left promiscuous mode [ 1798.074351][ T1389] bond1990 (unregistering): Released all slaves [ 1798.079746][ T1389] bond1989 (unregistering): (slave batadv1798): Releasing backup interface [ 1798.128714][ T1389] batadv1798 (unregistering): left promiscuous mode [ 1798.134041][ T1389] bond1989 (unregistering): Released all slaves [ 1798.140781][ T1389] bond1988 (unregistering): (slave batadv1797): Releasing backup interface [ 1798.188501][ T1389] batadv1797 (unregistering): left promiscuous mode [ 1798.193803][ T1389] bond1988 (unregistering): Released all slaves [ 1798.198665][ T1389] bond1987 (unregistering): (slave batadv1796): Releasing backup interface [ 1798.239820][ T1389] batadv1796 (unregistering): left promiscuous mode [ 1798.245327][ T1389] bond1987 (unregistering): Released all slaves [ 1798.250106][ T1389] bond1986 (unregistering): (slave batadv1795): Releasing backup interface [ 1798.277483][T21206] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1798.279911][T21206] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1798.282055][T21206] usb 1-1: Manufacturer: syz [ 1798.283257][T21206] usb 1-1: SerialNumber: syz [ 1798.298703][ T1389] batadv1795 (unregistering): left promiscuous mode [ 1798.303949][ T1389] bond1986 (unregistering): Released all slaves [ 1798.308512][ T1389] bond1985 (unregistering): (slave batadv1794): Releasing backup interface [ 1798.358451][ T1389] batadv1794 (unregistering): left promiscuous mode [ 1798.363096][ T1389] bond1985 (unregistering): Released all slaves [ 1798.368111][ T1389] bond1984 (unregistering): (slave batadv1793): Releasing backup interface [ 1798.418680][ T1389] batadv1793 (unregistering): left promiscuous mode [ 1798.423916][ T1389] bond1984 (unregistering): Released all slaves [ 1798.429402][ T1389] bond1983 (unregistering): (slave batadv1792): Releasing backup interface [ 1798.459127][ T1389] batadv1792 (unregistering): left promiscuous mode [ 1798.464292][ T1389] bond1983 (unregistering): Released all slaves [ 1798.468708][ T1389] bond1982 (unregistering): (slave batadv1791): Releasing backup interface [ 1798.539122][T21206] yealink 1-1:36.0: invalid payload size 4, expected 16 [ 1798.541258][T21206] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input277 [ 1798.545032][ T1389] batadv1791 (unregistering): left promiscuous mode [ 1798.551187][ T1389] bond1982 (unregistering): Released all slaves [ 1798.555402][ T1389] bond1981 (unregistering): (slave batadv1790): Releasing backup interface [ 1798.618394][ T1389] batadv1790 (unregistering): left promiscuous mode [ 1798.623470][ T1389] bond1981 (unregistering): Released all slaves [ 1798.627856][ T1389] bond1980 (unregistering): (slave batadv1789): Releasing backup interface [ 1798.679892][ T1389] batadv1789 (unregistering): left promiscuous mode [ 1798.684962][ T1389] bond1980 (unregistering): Released all slaves [ 1798.689591][ T1389] bond1979 (unregistering): (slave batadv1788): Releasing backup interface [ 1798.768701][ T1389] batadv1788 (unregistering): left promiscuous mode [ 1798.774338][ T1389] bond1979 (unregistering): Released all slaves [ 1798.778398][ T1389] bond1978 (unregistering): (slave batadv1787): Releasing backup interface [ 1798.818459][ T1389] batadv1787 (unregistering): left promiscuous mode [ 1798.824812][ T1389] bond1978 (unregistering): Released all slaves [ 1798.829919][ T1389] bond1977 (unregistering): (slave batadv1786): Releasing backup interface [ 1798.859062][ T1389] batadv1786 (unregistering): left promiscuous mode [ 1798.864861][ T1389] bond1977 (unregistering): Released all slaves [ 1798.879854][ T1389] bond1976 (unregistering): (slave batadv1785): Releasing backup interface [ 1798.918505][ T1389] batadv1785 (unregistering): left promiscuous mode [ 1798.924885][ T1389] bond1976 (unregistering): Released all slaves [ 1798.929233][ T1389] bond1975 (unregistering): (slave batadv1784): Releasing backup interface [ 1798.978892][ T1389] batadv1784 (unregistering): left promiscuous mode [ 1798.985150][ T1389] bond1975 (unregistering): Released all slaves [ 1798.990393][ T1389] bond1974 (unregistering): (slave batadv1783): Releasing backup interface [ 1799.048657][ T1389] batadv1783 (unregistering): left promiscuous mode [ 1799.054189][ T1389] bond1974 (unregistering): Released all slaves [ 1799.059077][ T1389] bond1973 (unregistering): (slave batadv1782): Releasing backup interface [ 1799.119745][ T1389] batadv1782 (unregistering): left promiscuous mode [ 1799.124978][ T1389] bond1973 (unregistering): Released all slaves [ 1799.129529][ T1389] bond1972 (unregistering): (slave batadv1781): Releasing backup interface [ 1799.178830][ T1389] batadv1781 (unregistering): left promiscuous mode [ 1799.183949][ T1389] bond1972 (unregistering): Released all slaves [ 1799.188416][ T1389] bond1971 (unregistering): (slave batadv1780): Releasing backup interface [ 1799.249336][ T1389] batadv1780 (unregistering): left promiscuous mode [ 1799.254428][ T1389] bond1971 (unregistering): Released all slaves [ 1799.258939][ T1389] bond1970 (unregistering): (slave batadv1779): Releasing backup interface [ 1799.308757][ T1389] batadv1779 (unregistering): left promiscuous mode [ 1799.314279][ T1389] bond1970 (unregistering): Released all slaves [ 1799.319311][ T1389] bond1969 (unregistering): (slave batadv1778): Releasing backup interface [ 1799.408696][ T1389] batadv1778 (unregistering): left promiscuous mode [ 1799.414219][ T1389] bond1969 (unregistering): Released all slaves [ 1799.423714][ T1389] bond1968 (unregistering): (slave batadv1777): Releasing backup interface [ 1799.478986][ T1389] batadv1777 (unregistering): left promiscuous mode [ 1799.484751][ T1389] bond1968 (unregistering): Released all slaves [ 1799.488959][ T1389] bond1967 (unregistering): (slave batadv1776): Releasing backup interface [ 1799.528915][ T1389] batadv1776 (unregistering): left promiscuous mode [ 1799.534019][ T1389] bond1967 (unregistering): Released all slaves [ 1799.538576][ T1389] bond1966 (unregistering): (slave batadv1775): Releasing backup interface [ 1799.579178][ T1389] batadv1775 (unregistering): left promiscuous mode [ 1799.584537][ T1389] bond1966 (unregistering): Released all slaves [ 1799.589450][ T1389] bond1965 (unregistering): (slave batadv1774): Releasing backup interface [ 1799.628812][ T1389] batadv1774 (unregistering): left promiscuous mode [ 1799.633826][ T1389] bond1965 (unregistering): Released all slaves [ 1799.638248][ T1389] bond1964 (unregistering): (slave batadv1773): Releasing backup interface [ 1799.698414][ T1389] batadv1773 (unregistering): left promiscuous mode [ 1799.703790][ T1389] bond1964 (unregistering): Released all slaves [ 1799.709191][ T1389] bond1963 (unregistering): (slave batadv1772): Releasing backup interface [ 1799.769660][ T1389] batadv1772 (unregistering): left promiscuous mode [ 1799.776045][ T1389] bond1963 (unregistering): Released all slaves [ 1799.780448][ T1389] bond1962 (unregistering): (slave batadv1771): Releasing backup interface [ 1799.828728][ T1389] batadv1771 (unregistering): left promiscuous mode [ 1799.833801][ T1389] bond1962 (unregistering): Released all slaves [ 1799.838588][ T1389] bond1961 (unregistering): (slave batadv1770): Releasing backup interface [ 1799.899562][ T1389] batadv1770 (unregistering): left promiscuous mode [ 1799.904540][ T1389] bond1961 (unregistering): Released all slaves [ 1799.908839][ T1389] bond1960 (unregistering): (slave batadv1769): Releasing backup interface [ 1799.917564][T31614] Bluetooth: hci5: command 0x040f tx timeout [ 1799.968628][ T1389] batadv1769 (unregistering): left promiscuous mode [ 1799.974024][ T1389] bond1960 (unregistering): Released all slaves [ 1799.978799][ T1389] bond1959 (unregistering): (slave batadv1768): Releasing backup interface [ 1800.018634][ T1389] batadv1768 (unregistering): left promiscuous mode [ 1800.023801][ T1389] bond1959 (unregistering): Released all slaves [ 1800.028474][ T1389] bond1958 (unregistering): (slave batadv1767): Releasing backup interface [ 1800.088895][ T1389] batadv1767 (unregistering): left promiscuous mode [ 1800.093935][ T1389] bond1958 (unregistering): Released all slaves [ 1800.101211][ T1389] bond1957 (unregistering): (slave batadv1766): Releasing backup interface [ 1800.159499][ T1389] batadv1766 (unregistering): left promiscuous mode [ 1800.164472][ T1389] bond1957 (unregistering): Released all slaves [ 1800.168743][ T1389] bond1956 (unregistering): (slave batadv1765): Releasing backup interface [ 1800.208697][ T1389] batadv1765 (unregistering): left promiscuous mode [ 1800.213906][ T1389] bond1956 (unregistering): Released all slaves [ 1800.219271][ T1389] bond1955 (unregistering): (slave batadv1764): Releasing backup interface [ 1800.258671][ T1389] batadv1764 (unregistering): left promiscuous mode [ 1800.263819][ T1389] bond1955 (unregistering): Released all slaves [ 1800.269191][ T1389] bond1954 (unregistering): (slave batadv1763): Releasing backup interface [ 1800.318602][ T1389] batadv1763 (unregistering): left promiscuous mode [ 1800.323442][ T1389] bond1954 (unregistering): Released all slaves [ 1800.328735][ T1389] bond1953 (unregistering): (slave batadv1762): Releasing backup interface [ 1800.378754][ T1389] batadv1762 (unregistering): left promiscuous mode [ 1800.383741][ T1389] bond1953 (unregistering): Released all slaves [ 1800.387922][ T1389] bond1952 (unregistering): (slave batadv1761): Releasing backup interface [ 1800.441505][ T1389] batadv1761 (unregistering): left promiscuous mode [ 1800.446395][ T1389] bond1952 (unregistering): Released all slaves [ 1800.450617][ T1389] bond1951 (unregistering): (slave batadv1760): Releasing backup interface [ 1800.488428][ T1389] batadv1760 (unregistering): left promiscuous mode [ 1800.493390][ T1389] bond1951 (unregistering): Released all slaves [ 1800.497947][ T1389] bond1950 (unregistering): (slave batadv1759): Releasing backup interface 21:54:16 executing program 3: r0 = epoll_create1(0x0) r1 = dup(r0) dup(r1) 21:54:16 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r0, r0, 0x0) [ 1800.540323][ T1389] batadv1759 (unregistering): left promiscuous mode [ 1800.550763][ T1389] bond1950 (unregistering): Released all slaves [ 1800.556191][ T1389] bond1949 (unregistering): (slave batadv1758): Releasing backup interface 21:54:16 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) fchmod(r0, 0x0) 21:54:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r0, r1, 0x0) 21:54:16 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x9, &(0x7f0000000100)={@multicast2, @broadcast}, 0xc) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x49}, 0x104) [ 1800.599422][ T1389] batadv1758 (unregistering): left promiscuous mode [ 1800.605498][ T1389] bond1949 (unregistering): Released all slaves [ 1800.614103][ T1389] bond1948 (unregistering): (slave batadv1757): Releasing backup interface 21:54:16 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) getsockname(r0, 0x0, &(0x7f0000000740)) 21:54:16 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000003e80)={0x0, 0x0, 0x0}, 0x0) 21:54:16 executing program 3: socket$inet(0x2, 0x20000002, 0x0) [ 1800.660750][ T1389] batadv1757 (unregistering): left promiscuous mode [ 1800.667977][ T1389] bond1948 (unregistering): Released all slaves [ 1800.672709][ T1389] bond1947 (unregistering): (slave batadv1756): Releasing backup interface 21:54:16 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x1c, 0x1c, 0x3}, 0x1c) 21:54:16 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000240)={0x1c, 0x1c, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000380)={0x1c, 0x1c}, 0x1c) 21:54:16 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000140)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000001500), &(0x7f00000015c0)=0x88) [ 1800.720046][ T1389] batadv1756 (unregistering): left promiscuous mode [ 1800.727158][ T1389] bond1947 (unregistering): Released all slaves [ 1800.734841][ T1389] bond1946 (unregistering): (slave batadv1755): Releasing backup interface 21:54:16 executing program 3: openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0xd0b46792a3520e83, 0x0) 21:54:16 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x49}, 0x104) [ 1800.769164][ T1389] batadv1755 (unregistering): left promiscuous mode 21:54:16 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) [ 1800.776641][ T1389] bond1946 (unregistering): Released all slaves [ 1800.782525][ T1389] bond1945 (unregistering): (slave batadv1754): Releasing backup interface 21:54:16 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) 21:54:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x13, &(0x7f0000000280), 0xc) [ 1800.819096][ T1389] batadv1754 (unregistering): left promiscuous mode [ 1800.826050][ T1389] bond1945 (unregistering): Released all slaves [ 1800.833380][ T1389] bond1944 (unregistering): (slave batadv1753): Releasing backup interface 21:54:16 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000001c80)={0x0, @in, 0xfffffffd}, 0x98) 21:54:16 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000004c0)={&(0x7f0000000240)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000001c80)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x98) 21:54:16 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000003e80)={0x0, 0x0, &(0x7f00000016c0)=[{0x0}], 0x1, &(0x7f0000003d80)=[@rights], 0x10}, 0x0) 21:54:16 executing program 3: clock_gettime(0x0, &(0x7f0000000040)={0x0}) ppoll(0x0, 0x0, &(0x7f0000000080)={r0}, 0x0, 0x0) [ 1800.880046][ T1389] batadv1753 (unregistering): left promiscuous mode [ 1800.886115][ T1389] bond1944 (unregistering): Released all slaves [ 1800.890379][ T1389] bond1943 (unregistering): (slave batadv1752): Releasing backup interface [ 1800.938886][ T1389] batadv1752 (unregistering): left promiscuous mode [ 1800.943583][ T1389] bond1943 (unregistering): Released all slaves [ 1800.947396][ T1389] bond1942 (unregistering): (slave batadv1751): Releasing backup interface [ 1800.998458][ T1389] batadv1751 (unregistering): left promiscuous mode [ 1801.003344][ T1389] bond1942 (unregistering): Released all slaves [ 1801.007466][ T1389] bond1941 (unregistering): (slave batadv1750): Releasing backup interface [ 1801.068541][ T1389] batadv1750 (unregistering): left promiscuous mode [ 1801.073421][ T1389] bond1941 (unregistering): Released all slaves [ 1801.077562][ T1389] bond1940 (unregistering): (slave batadv1749): Releasing backup interface [ 1801.109322][ T1389] batadv1749 (unregistering): left promiscuous mode [ 1801.119754][ T1389] bond1940 (unregistering): Released all slaves [ 1801.123834][ T1389] bond1939 (unregistering): (slave batadv1748): Releasing backup interface [ 1801.178629][ T1389] batadv1748 (unregistering): left promiscuous mode [ 1801.183554][ T1389] bond1939 (unregistering): Released all slaves [ 1801.188280][ T1389] bond1938 (unregistering): (slave batadv1747): Releasing backup interface [ 1801.220261][ T1389] batadv1747 (unregistering): left promiscuous mode [ 1801.225997][ T1389] bond1938 (unregistering): Released all slaves [ 1801.230280][ T1389] bond1937 (unregistering): (slave batadv1746): Releasing backup interface [ 1801.268740][ T1389] batadv1746 (unregistering): left promiscuous mode [ 1801.273794][ T1389] bond1937 (unregistering): Released all slaves [ 1801.278575][ T1389] bond1936 (unregistering): (slave batadv1745): Releasing backup interface [ 1801.330268][ T1389] batadv1745 (unregistering): left promiscuous mode [ 1801.335723][ T1389] bond1936 (unregistering): Released all slaves [ 1801.340192][ T1389] bond1935 (unregistering): (slave batadv1744): Releasing backup interface [ 1801.398778][ T1389] batadv1744 (unregistering): left promiscuous mode [ 1801.403957][ T1389] bond1935 (unregistering): Released all slaves [ 1801.408347][ T1389] bond1934 (unregistering): (slave batadv1743): Releasing backup interface [ 1801.449584][ T1389] batadv1743 (unregistering): left promiscuous mode [ 1801.454550][ T1389] bond1934 (unregistering): Released all slaves [ 1801.458768][ T1389] bond1933 (unregistering): (slave batadv1742): Releasing backup interface [ 1801.498888][ T1389] batadv1742 (unregistering): left promiscuous mode [ 1801.503814][ T1389] bond1933 (unregistering): Released all slaves [ 1801.508086][ T1389] bond1932 (unregistering): (slave batadv1741): Releasing backup interface [ 1801.549798][ T1389] batadv1741 (unregistering): left promiscuous mode [ 1801.554682][ T1389] bond1932 (unregistering): Released all slaves [ 1801.558874][ T1389] bond1931 (unregistering): (slave batadv1740): Releasing backup interface [ 1801.608539][ T1389] batadv1740 (unregistering): left promiscuous mode [ 1801.613408][ T1389] bond1931 (unregistering): Released all slaves [ 1801.619139][ T1389] bond1930 (unregistering): (slave batadv1739): Releasing backup interface [ 1801.638484][ T1389] batadv1739 (unregistering): left promiscuous mode [ 1801.642929][ T1389] bond1930 (unregistering): Released all slaves [ 1801.646522][ T1389] bond1929 (unregistering): (slave batadv1738): Releasing backup interface [ 1801.679105][ T1389] batadv1738 (unregistering): left promiscuous mode [ 1801.684035][ T1389] bond1929 (unregistering): Released all slaves [ 1801.688261][ T1389] bond1928 (unregistering): (slave batadv1737): Releasing backup interface 21:54:17 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@generic={0x0, 0x2}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@empty}, {@local}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@loopback, @private, @local, @remote, @multicast2, @multicast1]}]}}}}}) [ 1801.738820][ T1389] batadv1737 (unregistering): left promiscuous mode [ 1801.744238][ T1389] bond1928 (unregistering): Released all slaves [ 1801.748539][ T1389] bond1927 (unregistering): (slave batadv1736): Releasing backup interface [ 1801.818640][ T1389] batadv1736 (unregistering): left promiscuous mode [ 1801.823738][ T1389] bond1927 (unregistering): Released all slaves [ 1801.828465][ T1389] bond1926 (unregistering): (slave batadv1735): Releasing backup interface [ 1801.888647][ T1389] batadv1735 (unregistering): left promiscuous mode [ 1801.893276][ T1389] bond1926 (unregistering): Released all slaves [ 1801.896991][ T1389] bond1925 (unregistering): (slave batadv1734): Releasing backup interface [ 1801.938632][ T1389] batadv1734 (unregistering): left promiscuous mode [ 1801.943809][ T1389] bond1925 (unregistering): Released all slaves [ 1801.948110][ T1389] bond1924 (unregistering): (slave batadv1733): Releasing backup interface [ 1801.988675][ T1389] batadv1733 (unregistering): left promiscuous mode [ 1801.993718][ T1389] bond1924 (unregistering): Released all slaves [ 1801.997703][T31614] Bluetooth: hci5: command 0x0419 tx timeout [ 1801.999478][ T1389] bond1923 (unregistering): (slave batadv1732): Releasing backup interface [ 1802.038831][ T1389] batadv1732 (unregistering): left promiscuous mode [ 1802.045844][ T1389] bond1923 (unregistering): Released all slaves [ 1802.051437][ T1389] bond1922 (unregistering): (slave batadv1731): Releasing backup interface [ 1802.088535][ T1389] batadv1731 (unregistering): left promiscuous mode [ 1802.094053][ T1389] bond1922 (unregistering): Released all slaves [ 1802.098662][ T1389] bond1921 (unregistering): (slave batadv1730): Releasing backup interface [ 1802.138584][ T1389] batadv1730 (unregistering): left promiscuous mode [ 1802.143513][ T1389] bond1921 (unregistering): Released all slaves [ 1802.148280][ T1389] bond1920 (unregistering): (slave batadv1729): Releasing backup interface [ 1802.188854][ T1389] batadv1729 (unregistering): left promiscuous mode [ 1802.193864][ T1389] bond1920 (unregistering): Released all slaves [ 1802.198023][ T1389] bond1919 (unregistering): (slave batadv1728): Releasing backup interface [ 1802.251333][ T1389] batadv1728 (unregistering): left promiscuous mode [ 1802.256446][ T1389] bond1919 (unregistering): Released all slaves [ 1802.261940][ T1389] bond1918 (unregistering): (slave batadv1727): Releasing backup interface [ 1802.285908][ T10] usb 1-1: USB disconnect, device number 84 21:54:18 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0) (async) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090587e3", @ANYRES16=r0, @ANYRES8=r0], 0x0) syz_usb_control_io(r1, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$printer(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (rerun: 64) [ 1802.297318][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -108 [ 1802.299076][ C1] yealink 1-1:36.0: unexpected response 0 [ 1802.300187][ T1389] batadv1727 (unregistering): left promiscuous mode [ 1802.300506][ C1] yealink 1-1:36.0: urb_irq_callback - usb_submit_urb failed -19 [ 1802.313664][ T1389] bond1918 (unregistering): Released all slaves [ 1802.318779][ T1389] bond1917 (unregistering): (slave batadv1726): Releasing backup interface [ 1802.360938][ T1389] batadv1726 (unregistering): left promiscuous mode [ 1802.370145][ T1389] bond1917 (unregistering): Released all slaves [ 1802.375124][ T1389] bond1916 (unregistering): (slave batadv1725): Releasing backup interface [ 1802.418726][ T1389] batadv1725 (unregistering): left promiscuous mode [ 1802.423757][ T1389] bond1916 (unregistering): Released all slaves [ 1802.429302][ T1389] bond1915 (unregistering): (slave batadv1724): Releasing backup interface [ 1802.479102][ T1389] batadv1724 (unregistering): left promiscuous mode [ 1802.484237][ T1389] bond1915 (unregistering): Released all slaves [ 1802.488682][ T1389] bond1914 (unregistering): (slave batadv1723): Releasing backup interface [ 1802.538813][ T1389] batadv1723 (unregistering): left promiscuous mode [ 1802.543823][ T1389] bond1914 (unregistering): Released all slaves [ 1802.549861][ T1389] bond1913 (unregistering): (slave batadv1722): Releasing backup interface [ 1802.599101][ T1389] batadv1722 (unregistering): left promiscuous mode [ 1802.603943][ T1389] bond1913 (unregistering): Released all slaves [ 1802.608022][ T1389] bond1912 (unregistering): (slave batadv1721): Releasing backup interface [ 1802.658539][ T1389] batadv1721 (unregistering): left promiscuous mode [ 1802.664655][ T1389] bond1912 (unregistering): Released all slaves [ 1802.668837][ T1389] bond1911 (unregistering): (slave batadv1720): Releasing backup interface [ 1802.707547][ T10] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1802.728586][ T1389] batadv1720 (unregistering): left promiscuous mode [ 1802.733390][ T1389] bond1911 (unregistering): Released all slaves [ 1802.737129][ T1389] bond1910 (unregistering): (slave batadv1719): Releasing backup interface [ 1802.789582][ T1389] batadv1719 (unregistering): left promiscuous mode [ 1802.794272][ T1389] bond1910 (unregistering): Released all slaves [ 1802.798204][ T1389] bond1909 (unregistering): (slave batadv1718): Releasing backup interface [ 1802.838403][ T1389] batadv1718 (unregistering): left promiscuous mode [ 1802.843084][ T1389] bond1909 (unregistering): Released all slaves [ 1802.846971][ T1389] bond1908 (unregistering): (slave batadv1717): Releasing backup interface [ 1802.918630][ T1389] batadv1717 (unregistering): left promiscuous mode [ 1802.923603][ T1389] bond1908 (unregistering): Released all slaves [ 1802.927710][ T1389] bond1907 (unregistering): (slave batadv1716): Releasing backup interface [ 1802.978671][ T1389] batadv1716 (unregistering): left promiscuous mode [ 1802.983216][ T1389] bond1907 (unregistering): Released all slaves [ 1802.986802][ T1389] bond1906 (unregistering): (slave batadv1715): Releasing backup interface [ 1803.038723][ T1389] batadv1715 (unregistering): left promiscuous mode [ 1803.043447][ T1389] bond1906 (unregistering): Released all slaves [ 1803.047991][ T1389] bond1905 (unregistering): (slave batadv1714): Releasing backup interface [ 1803.088714][ T1389] batadv1714 (unregistering): left promiscuous mode [ 1803.094257][ T1389] bond1905 (unregistering): Released all slaves [ 1803.098129][ T1389] bond1904 (unregistering): (slave batadv1713): Releasing backup interface [ 1803.148706][ T1389] batadv1713 (unregistering): left promiscuous mode [ 1803.153601][ T1389] bond1904 (unregistering): Released all slaves [ 1803.157682][ T1389] bond1903 (unregistering): (slave batadv1712): Releasing backup interface [ 1803.187386][ T10] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1803.189694][ T10] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1803.191779][ T10] usb 1-1: Manufacturer: syz [ 1803.192925][ T10] usb 1-1: SerialNumber: syz [ 1803.208677][ T1389] batadv1712 (unregistering): left promiscuous mode [ 1803.215084][ T1389] bond1903 (unregistering): Released all slaves [ 1803.219333][ T1389] bond1902 (unregistering): (slave batadv1711): Releasing backup interface [ 1803.288844][ T1389] batadv1711 (unregistering): left promiscuous mode [ 1803.294121][ T1389] bond1902 (unregistering): Released all slaves [ 1803.298177][ T1389] bond1901 (unregistering): (slave batadv1710): Releasing backup interface [ 1803.349595][ T1389] batadv1710 (unregistering): left promiscuous mode [ 1803.354546][ T1389] bond1901 (unregistering): Released all slaves [ 1803.359373][ T1389] bond1900 (unregistering): (slave batadv1709): Releasing backup interface [ 1803.408776][ T1389] batadv1709 (unregistering): left promiscuous mode [ 1803.413700][ T1389] bond1900 (unregistering): Released all slaves [ 1803.417956][ T1389] bond1899 (unregistering): (slave batadv1708): Releasing backup interface [ 1803.448167][ T10] yealink 1-1:36.0: invalid payload size 3, expected 16 [ 1803.450273][ T10] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input278 [ 1803.468530][ T1389] batadv1708 (unregistering): left promiscuous mode [ 1803.479579][ T1389] bond1899 (unregistering): Released all slaves [ 1803.483189][ T1389] bond1898 (unregistering): (slave batadv1707): Releasing backup interface [ 1803.518701][ T1389] batadv1707 (unregistering): left promiscuous mode [ 1803.523253][ T1389] bond1898 (unregistering): Released all slaves [ 1803.526824][ T1389] bond1897 (unregistering): (slave batadv1706): Releasing backup interface [ 1803.568470][ T1389] batadv1706 (unregistering): left promiscuous mode [ 1803.572985][ T1389] bond1897 (unregistering): Released all slaves [ 1803.577403][ T1389] bond1896 (unregistering): (slave batadv1705): Releasing backup interface [ 1803.609554][ T1389] batadv1705 (unregistering): left promiscuous mode [ 1803.614459][ T1389] bond1896 (unregistering): Released all slaves [ 1803.618478][ T1389] bond1895 (unregistering): (slave batadv1704): Releasing backup interface [ 1803.658454][ T1389] batadv1704 (unregistering): left promiscuous mode [ 1803.663051][ T1389] bond1895 (unregistering): Released all slaves [ 1803.666968][ T1389] bond1894 (unregistering): (slave batadv1703): Releasing backup interface [ 1803.709473][ T1389] batadv1703 (unregistering): left promiscuous mode [ 1803.717191][ T1389] bond1894 (unregistering): Released all slaves [ 1803.726916][ T1389] bond1893 (unregistering): (slave batadv1702): Releasing backup interface 21:54:19 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090587e3"], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="c3b24eac1e02f44f62598d4e2d91d718dabc4020e1664e634b9904065f3635e11db51769524ad4ae4914059804aa283325895c0ead2ac42cdd74c472683358a3d3bb57375659c1bc71c0dbd86c5cd46c81a8689b610c59dff168d4f5d048f4eea75b6f56ec46e00e9819e4475e3fac47357bf3c25087b879f37f7e05e986c731781f17"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1803.760239][ T1389] batadv1702 (unregistering): left promiscuous mode [ 1803.765020][ T1389] bond1893 (unregistering): Released all slaves [ 1803.772763][ T10] usb 1-1: USB disconnect, device number 85 [ 1803.773419][ T1389] bond1892 (unregistering): (slave batadv1701): Releasing backup interface [ 1803.787272][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -2 [ 1803.808722][ T1389] batadv1701 (unregistering): left promiscuous mode [ 1803.813352][ T1389] bond1892 (unregistering): Released all slaves [ 1803.817113][ T1389] bond1891 (unregistering): (slave batadv1700): Releasing backup interface [ 1803.868677][ T1389] batadv1700 (unregistering): left promiscuous mode [ 1803.876764][ T1389] bond1891 (unregistering): Released all slaves [ 1803.880757][ T1389] bond1890 (unregistering): (slave batadv1699): Releasing backup interface [ 1803.918979][ T1389] batadv1699 (unregistering): left promiscuous mode [ 1803.923887][ T1389] bond1890 (unregistering): Released all slaves [ 1803.927670][ T1389] bond1889 (unregistering): (slave batadv1698): Releasing backup interface [ 1803.978494][ T1389] batadv1698 (unregistering): left promiscuous mode [ 1803.983281][ T1389] bond1889 (unregistering): Released all slaves [ 1803.987224][ T1389] bond1888 (unregistering): (slave batadv1697): Releasing backup interface [ 1804.038518][ T1389] batadv1697 (unregistering): left promiscuous mode [ 1804.043995][ T1389] bond1888 (unregistering): Released all slaves [ 1804.048427][ T1389] bond1887 (unregistering): (slave batadv1696): Releasing backup interface [ 1804.128454][ T1389] batadv1696 (unregistering): left promiscuous mode [ 1804.133261][ T1389] bond1887 (unregistering): Released all slaves [ 1804.137061][ T1389] bond1886 (unregistering): (slave batadv1695): Releasing backup interface [ 1804.198624][ T1389] batadv1695 (unregistering): left promiscuous mode [ 1804.203372][ T1389] bond1886 (unregistering): Released all slaves [ 1804.207385][ T1389] bond1885 (unregistering): (slave batadv1694): Releasing backup interface [ 1804.217301][ T10] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1804.258476][ T1389] batadv1694 (unregistering): left promiscuous mode [ 1804.263417][ T1389] bond1885 (unregistering): Released all slaves [ 1804.267817][ T1389] bond1884 (unregistering): (slave batadv1693): Releasing backup interface [ 1804.318599][ T1389] batadv1693 (unregistering): left promiscuous mode [ 1804.323247][ T1389] bond1884 (unregistering): Released all slaves [ 1804.327079][ T1389] bond1883 (unregistering): (slave batadv1692): Releasing backup interface [ 1804.388430][ T1389] batadv1692 (unregistering): left promiscuous mode [ 1804.393024][ T1389] bond1883 (unregistering): Released all slaves [ 1804.398779][ T1389] bond1882 (unregistering): (slave batadv1691): Releasing backup interface [ 1804.448452][ T1389] batadv1691 (unregistering): left promiscuous mode [ 1804.453113][ T1389] bond1882 (unregistering): Released all slaves [ 1804.456925][ T1389] bond1881 (unregistering): (slave batadv1690): Releasing backup interface [ 1804.518512][ T1389] batadv1690 (unregistering): left promiscuous mode [ 1804.523301][ T1389] bond1881 (unregistering): Released all slaves [ 1804.529037][ T1389] bond1880 (unregistering): (slave batadv1689): Releasing backup interface [ 1804.577354][ T10] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1804.580146][ T10] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1804.598493][ T1389] batadv1689 (unregistering): left promiscuous mode [ 1804.603450][ T1389] bond1880 (unregistering): Released all slaves [ 1804.607047][ T1389] bond1879 (unregistering): (slave batadv1688): Releasing backup interface [ 1804.639696][ T5977] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1804.659644][ T1389] batadv1688 (unregistering): left promiscuous mode [ 1804.664225][ T1389] bond1879 (unregistering): Released all slaves [ 1804.669294][ T1389] bond1878 (unregistering): (slave batadv1687): Releasing backup interface [ 1804.697390][ T10] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1804.699942][ T10] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1804.702157][ T10] usb 1-1: Manufacturer: syz [ 1804.703392][ T10] usb 1-1: SerialNumber: syz [ 1804.708634][ T1389] batadv1687 (unregistering): left promiscuous mode [ 1804.713059][ T1389] bond1878 (unregistering): Released all slaves [ 1804.716641][ T1389] bond1877 (unregistering): (slave batadv1686): Releasing backup interface [ 1804.768521][ T1389] batadv1686 (unregistering): left promiscuous mode [ 1804.773240][ T1389] bond1877 (unregistering): Released all slaves [ 1804.777224][ T1389] bond1876 (unregistering): (slave batadv1685): Releasing backup interface [ 1804.818550][ T1389] batadv1685 (unregistering): left promiscuous mode [ 1804.823197][ T1389] bond1876 (unregistering): Released all slaves [ 1804.827031][ T1389] bond1875 (unregistering): (slave batadv1684): Releasing backup interface [ 1804.899641][ T1389] batadv1684 (unregistering): left promiscuous mode [ 1804.905023][ T1389] bond1875 (unregistering): Released all slaves [ 1804.909338][ T1389] bond1874 (unregistering): (slave batadv1683): Releasing backup interface [ 1804.958950][ T1389] batadv1683 (unregistering): left promiscuous mode [ 1804.963780][ T1389] bond1874 (unregistering): Released all slaves [ 1804.968246][ T1389] bond1873 (unregistering): (slave batadv1682): Releasing backup interface [ 1805.018375][ T1389] batadv1682 (unregistering): left promiscuous mode [ 1805.023125][ T1389] bond1873 (unregistering): Released all slaves [ 1805.026821][ T1389] bond1872 (unregistering): (slave batadv1681): Releasing backup interface [ 1805.088929][ T1389] batadv1681 (unregistering): left promiscuous mode [ 1805.093774][ T1389] bond1872 (unregistering): Released all slaves [ 1805.098962][ T1389] bond1871 (unregistering): (slave batadv1680): Releasing backup interface [ 1805.138654][ T1389] batadv1680 (unregistering): left promiscuous mode [ 1805.143211][ T1389] bond1871 (unregistering): Released all slaves [ 1805.146990][ T1389] bond1870 (unregistering): (slave batadv1679): Releasing backup interface [ 1805.168184][ T10] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 1805.170488][ T10] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input279 [ 1805.198654][ T1389] batadv1679 (unregistering): left promiscuous mode [ 1805.203133][ T1389] bond1870 (unregistering): Released all slaves [ 1805.206728][ T1389] bond1869 (unregistering): (slave batadv1678): Releasing backup interface [ 1805.269326][ T1389] batadv1678 (unregistering): left promiscuous mode [ 1805.274437][ T1389] bond1869 (unregistering): Released all slaves [ 1805.281699][ T1389] bond1868 (unregistering): (slave batadv1677): Releasing backup interface [ 1805.328493][ T1389] batadv1677 (unregistering): left promiscuous mode [ 1805.333388][ T1389] bond1868 (unregistering): Released all slaves [ 1805.338120][ T1389] bond1867 (unregistering): (slave batadv1676): Releasing backup interface [ 1805.380111][ T1389] batadv1676 (unregistering): left promiscuous mode [ 1805.384775][ T1389] bond1867 (unregistering): Released all slaves [ 1805.388965][ T1389] bond1866 (unregistering): (slave batadv1675): Releasing backup interface [ 1805.448448][ T1389] batadv1675 (unregistering): left promiscuous mode [ 1805.453115][ T1389] bond1866 (unregistering): Released all slaves [ 1805.456898][ T1389] bond1865 (unregistering): (slave batadv1674): Releasing backup interface [ 1805.508305][ T1389] batadv1674 (unregistering): left promiscuous mode [ 1805.512827][ T1389] bond1865 (unregistering): Released all slaves [ 1805.516398][ T1389] bond1864 (unregistering): (slave batadv1673): Releasing backup interface [ 1805.558571][ T1389] batadv1673 (unregistering): left promiscuous mode [ 1805.563277][ T1389] bond1864 (unregistering): Released all slaves [ 1805.568710][ T1389] bond1863 (unregistering): (slave batadv1672): Releasing backup interface [ 1805.608482][ T1389] batadv1672 (unregistering): left promiscuous mode [ 1805.613410][ T1389] bond1863 (unregistering): Released all slaves [ 1805.617656][ T1389] bond1862 (unregistering): (slave batadv1671): Releasing backup interface [ 1805.658534][ T1389] batadv1671 (unregistering): left promiscuous mode [ 1805.663052][ T1389] bond1862 (unregistering): Released all slaves [ 1805.668213][ T1389] bond1861 (unregistering): (slave batadv1670): Releasing backup interface [ 1805.718426][ T1389] batadv1670 (unregistering): left promiscuous mode [ 1805.723571][ T1389] bond1861 (unregistering): Released all slaves [ 1805.727719][ T1389] bond1860 (unregistering): (slave batadv1669): Releasing backup interface [ 1805.778790][ T1389] batadv1669 (unregistering): left promiscuous mode [ 1805.783726][ T1389] bond1860 (unregistering): Released all slaves [ 1805.787919][ T1389] bond1859 (unregistering): (slave batadv1668): Releasing backup interface [ 1805.850221][ T1389] batadv1668 (unregistering): left promiscuous mode [ 1805.855153][ T1389] bond1859 (unregistering): Released all slaves [ 1805.859237][ T1389] bond1858 (unregistering): (slave batadv1667): Releasing backup interface [ 1805.919066][ T1389] batadv1667 (unregistering): left promiscuous mode [ 1805.923911][ T1389] bond1858 (unregistering): Released all slaves [ 1805.929751][ T1389] bond1857 (unregistering): (slave batadv1666): Releasing backup interface [ 1806.018368][ T1389] batadv1666 (unregistering): left promiscuous mode [ 1806.023354][ T1389] bond1857 (unregistering): Released all slaves [ 1806.028067][ T1389] bond1856 (unregistering): (slave batadv1665): Releasing backup interface [ 1806.078419][ T1389] batadv1665 (unregistering): left promiscuous mode [ 1806.083270][ T1389] bond1856 (unregistering): Released all slaves [ 1806.090991][ T1389] bond1855 (unregistering): (slave batadv1664): Releasing backup interface [ 1806.139100][ T1389] batadv1664 (unregistering): left promiscuous mode [ 1806.143772][ T1389] bond1855 (unregistering): Released all slaves [ 1806.149134][ T1389] bond1854 (unregistering): (slave batadv1663): Releasing backup interface [ 1806.198369][ T1389] batadv1663 (unregistering): left promiscuous mode [ 1806.208560][ T1389] bond1854 (unregistering): Released all slaves [ 1806.214848][ T1389] bond1853 (unregistering): (slave batadv1662): Releasing backup interface [ 1806.258631][ T1389] batadv1662 (unregistering): left promiscuous mode [ 1806.264192][ T1389] bond1853 (unregistering): Released all slaves [ 1806.268344][ T1389] bond1852 (unregistering): (slave batadv1661): Releasing backup interface [ 1806.318530][ T1389] batadv1661 (unregistering): left promiscuous mode [ 1806.323036][ T1389] bond1852 (unregistering): Released all slaves [ 1806.326765][ T1389] bond1851 (unregistering): (slave batadv1660): Releasing backup interface [ 1806.388338][ T1389] batadv1660 (unregistering): left promiscuous mode [ 1806.392998][ T1389] bond1851 (unregistering): Released all slaves [ 1806.396737][ T1389] bond1850 (unregistering): (slave batadv1659): Releasing backup interface [ 1806.458329][ T1389] batadv1659 (unregistering): left promiscuous mode [ 1806.463725][ T1389] bond1850 (unregistering): Released all slaves [ 1806.467686][ T1389] bond1849 (unregistering): (slave batadv1658): Releasing backup interface [ 1806.518638][ T1389] batadv1658 (unregistering): left promiscuous mode [ 1806.523215][ T1389] bond1849 (unregistering): Released all slaves [ 1806.526889][ T1389] bond1848 (unregistering): (slave batadv1657): Releasing backup interface [ 1806.568468][ T1389] batadv1657 (unregistering): left promiscuous mode [ 1806.573041][ T1389] bond1848 (unregistering): Released all slaves [ 1806.576731][ T1389] bond1847 (unregistering): (slave batadv1656): Releasing backup interface [ 1806.639038][ T1389] batadv1656 (unregistering): left promiscuous mode [ 1806.644851][ T1389] bond1847 (unregistering): Released all slaves [ 1806.648964][ T1389] bond1846 (unregistering): (slave batadv1655): Releasing backup interface [ 1806.698333][ T1389] batadv1655 (unregistering): left promiscuous mode [ 1806.702837][ T1389] bond1846 (unregistering): Released all slaves [ 1806.706490][ T1389] bond1845 (unregistering): (slave batadv1654): Releasing backup interface [ 1806.729731][T21206] usb 1-1: USB disconnect, device number 86 [ 1806.747273][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -2 [ 1806.768737][ T1389] batadv1654 (unregistering): left promiscuous mode [ 1806.773430][ T1389] bond1845 (unregistering): Released all slaves [ 1806.777437][ T1389] bond1844 (unregistering): (slave batadv1653): Releasing backup interface [ 1806.830068][ T1389] batadv1653 (unregistering): left promiscuous mode [ 1806.841961][ T1389] bond1844 (unregistering): Released all slaves [ 1806.846039][ T1389] bond1843 (unregistering): (slave batadv1652): Releasing backup interface [ 1806.910126][ T1389] batadv1652 (unregistering): left promiscuous mode [ 1806.914707][ T1389] bond1843 (unregistering): Released all slaves [ 1806.918895][ T1389] bond1842 (unregistering): (slave batadv1651): Releasing backup interface [ 1806.959486][ T1389] batadv1651 (unregistering): left promiscuous mode [ 1806.964133][ T1389] bond1842 (unregistering): Released all slaves [ 1806.968272][ T1389] bond1841 (unregistering): (slave batadv1650): Releasing backup interface [ 1807.018366][ T1389] batadv1650 (unregistering): left promiscuous mode [ 1807.023110][ T1389] bond1841 (unregistering): Released all slaves [ 1807.026756][ T1389] bond1840 (unregistering): (slave batadv1649): Releasing backup interface [ 1807.069973][ T1389] batadv1649 (unregistering): left promiscuous mode [ 1807.074601][ T1389] bond1840 (unregistering): Released all slaves [ 1807.078585][ T1389] bond1839 (unregistering): (slave batadv1648): Releasing backup interface [ 1807.108727][ T1389] batadv1648 (unregistering): left promiscuous mode [ 1807.113466][ T1389] bond1839 (unregistering): Released all slaves [ 1807.117571][ T1389] bond1838 (unregistering): (slave batadv1647): Releasing backup interface [ 1807.169403][ T1389] batadv1647 (unregistering): left promiscuous mode [ 1807.175279][ T1389] bond1838 (unregistering): Released all slaves [ 1807.179603][ T1389] bond1837 (unregistering): (slave batadv1646): Releasing backup interface [ 1807.228431][ T1389] batadv1646 (unregistering): left promiscuous mode [ 1807.233302][ T1389] bond1837 (unregistering): Released all slaves [ 1807.241021][ T1389] bond1836 (unregistering): (slave batadv1645): Releasing backup interface 21:54:23 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090587e3"], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="c3b24eac1e02f44f62598d4e2d91d718dabc4020e1664e634b9904065f3635e11db51769524ad4ae4914059804aa283325895c0ead2ac42cdd74c472683358a3d3bb57375659c1bc71c0dbd86c5cd46c81a8689b610c59dff168d4f5d048f4eea75b6f56ec46e00e9819e4475e3fac47357bf3c25087b879f37f7e05e986c731781f17"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1807.279059][ T1389] batadv1645 (unregistering): left promiscuous mode [ 1807.284680][ T1389] bond1836 (unregistering): Released all slaves [ 1807.288818][ T1389] bond1835 (unregistering): (slave batadv1644): Releasing backup interface [ 1807.338775][ T1389] batadv1644 (unregistering): left promiscuous mode [ 1807.345001][ T1389] bond1835 (unregistering): Released all slaves [ 1807.349413][ T1389] bond1834 (unregistering): (slave batadv1643): Releasing backup interface [ 1807.408684][ T1389] batadv1643 (unregistering): left promiscuous mode [ 1807.413467][ T1389] bond1834 (unregistering): Released all slaves [ 1807.417420][ T1389] bond1833 (unregistering): (slave batadv1642): Releasing backup interface [ 1807.488801][ T1389] batadv1642 (unregistering): left promiscuous mode [ 1807.493488][ T1389] bond1833 (unregistering): Released all slaves [ 1807.498494][ T1389] bond1832 (unregistering): (slave batadv1641): Releasing backup interface [ 1807.527494][T21206] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1807.548490][ T1389] batadv1641 (unregistering): left promiscuous mode [ 1807.553167][ T1389] bond1832 (unregistering): Released all slaves [ 1807.556858][ T1389] bond1831 (unregistering): (slave batadv1640): Releasing backup interface [ 1807.618319][ T1389] batadv1640 (unregistering): left promiscuous mode [ 1807.623515][ T1389] bond1831 (unregistering): Released all slaves [ 1807.627677][ T1389] bond1830 (unregistering): (slave batadv1639): Releasing backup interface [ 1807.689527][ T1389] batadv1639 (unregistering): left promiscuous mode [ 1807.694166][ T1389] bond1830 (unregistering): Released all slaves [ 1807.698290][ T1389] bond1829 (unregistering): (slave batadv1638): Releasing backup interface [ 1807.788537][ T1389] batadv1638 (unregistering): left promiscuous mode [ 1807.793846][ T1389] bond1829 (unregistering): Released all slaves [ 1807.798283][ T1389] bond1828 (unregistering): (slave batadv1637): Releasing backup interface [ 1807.840014][ T1389] batadv1637 (unregistering): left promiscuous mode [ 1807.844889][ T1389] bond1828 (unregistering): Released all slaves [ 1807.849385][ T1389] bond1827 (unregistering): (slave batadv1636): Releasing backup interface [ 1807.888550][ T1389] batadv1636 (unregistering): left promiscuous mode [ 1807.891114][T21206] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1807.893949][T21206] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1807.899172][ T1389] bond1827 (unregistering): Released all slaves [ 1807.902924][ T1389] bond1826 (unregistering): (slave batadv1635): Releasing backup interface [ 1807.949752][ T1389] batadv1635 (unregistering): left promiscuous mode [ 1807.954587][ T1389] bond1826 (unregistering): Released all slaves [ 1807.958809][ T1389] bond1825 (unregistering): (slave batadv1634): Releasing backup interface [ 1808.008621][ T1389] batadv1634 (unregistering): left promiscuous mode [ 1808.013482][ T1389] bond1825 (unregistering): Released all slaves [ 1808.017571][T21206] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1808.020095][ T1389] bond1824 (unregistering): (slave batadv1633): Releasing backup interface [ 1808.022781][T21206] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1808.024959][T21206] usb 1-1: Manufacturer: syz [ 1808.026181][T21206] usb 1-1: SerialNumber: syz [ 1808.068755][ T1389] batadv1633 (unregistering): left promiscuous mode [ 1808.073536][ T1389] bond1824 (unregistering): Released all slaves [ 1808.078128][ T1389] bond1823 (unregistering): (slave batadv1632): Releasing backup interface [ 1808.138818][ T1389] batadv1632 (unregistering): left promiscuous mode [ 1808.143400][ T1389] bond1823 (unregistering): Released all slaves [ 1808.147217][ T1389] bond1822 (unregistering): (slave batadv1631): Releasing backup interface [ 1808.199484][ T1389] batadv1631 (unregistering): left promiscuous mode [ 1808.204014][ T1389] bond1822 (unregistering): Released all slaves [ 1808.207922][ T1389] bond1821 (unregistering): (slave batadv1630): Releasing backup interface [ 1808.258463][ T1389] batadv1630 (unregistering): left promiscuous mode [ 1808.263142][ T1389] bond1821 (unregistering): Released all slaves [ 1808.266906][ T1389] bond1820 (unregistering): (slave batadv1629): Releasing backup interface [ 1808.308597][ T1389] batadv1629 (unregistering): left promiscuous mode [ 1808.313364][ T1389] bond1820 (unregistering): Released all slaves [ 1808.318843][ T1389] bond1819 (unregistering): (slave batadv1628): Releasing backup interface [ 1808.368755][ T1389] batadv1628 (unregistering): left promiscuous mode [ 1808.373517][ T1389] bond1819 (unregistering): Released all slaves [ 1808.377491][ T1389] bond1818 (unregistering): (slave batadv1627): Releasing backup interface [ 1808.428445][ T1389] batadv1627 (unregistering): left promiscuous mode [ 1808.433202][ T1389] bond1818 (unregistering): Released all slaves [ 1808.437001][ T1389] bond1817 (unregistering): (slave batadv1626): Releasing backup interface [ 1808.498416][ T1389] batadv1626 (unregistering): left promiscuous mode [ 1808.503419][ T1389] bond1817 (unregistering): Released all slaves [ 1808.507490][ T1389] bond1816 (unregistering): (slave batadv1625): Releasing backup interface [ 1808.518183][T21206] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 1808.520416][T21206] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input280 [ 1808.550649][ T1389] batadv1625 (unregistering): left promiscuous mode [ 1808.557222][ T1389] bond1816 (unregistering): Released all slaves [ 1808.561916][ T1389] bond1815 (unregistering): (slave batadv1624): Releasing backup interface [ 1808.609589][ T1389] batadv1624 (unregistering): left promiscuous mode [ 1808.614402][ T1389] bond1815 (unregistering): Released all slaves [ 1808.618646][ T1389] bond1814 (unregistering): (slave batadv1623): Releasing backup interface [ 1808.668384][ T1389] batadv1623 (unregistering): left promiscuous mode [ 1808.673190][ T1389] bond1814 (unregistering): Released all slaves [ 1808.676961][ T1389] bond1813 (unregistering): (slave batadv1622): Releasing backup interface [ 1808.718654][ T1389] batadv1622 (unregistering): left promiscuous mode [ 1808.725438][ T1389] bond1813 (unregistering): Released all slaves [ 1808.729710][ T1389] bond1812 (unregistering): (slave batadv1621): Releasing backup interface [ 1808.798497][ T1389] batadv1621 (unregistering): left promiscuous mode [ 1808.803520][ T1389] bond1812 (unregistering): Released all slaves [ 1808.808283][ T1389] bond1811 (unregistering): (slave batadv1620): Releasing backup interface [ 1808.888269][ T1389] batadv1620 (unregistering): left promiscuous mode [ 1808.894184][ T1389] bond1811 (unregistering): Released all slaves [ 1808.898384][ T1389] bond1810 (unregistering): (slave batadv1619): Releasing backup interface [ 1808.938880][ T1389] batadv1619 (unregistering): left promiscuous mode [ 1808.943677][ T1389] bond1810 (unregistering): Released all slaves [ 1808.947774][ T1389] bond1809 (unregistering): (slave batadv1618): Releasing backup interface [ 1808.998443][ T1389] batadv1618 (unregistering): left promiscuous mode [ 1809.003060][ T1389] bond1809 (unregistering): Released all slaves [ 1809.007465][ T1389] bond1808 (unregistering): (slave batadv1617): Releasing backup interface [ 1809.059459][ T1389] batadv1617 (unregistering): left promiscuous mode [ 1809.064269][ T1389] bond1808 (unregistering): Released all slaves [ 1809.068730][ T1389] bond1807 (unregistering): (slave batadv1616): Releasing backup interface [ 1809.138535][ T1389] batadv1616 (unregistering): left promiscuous mode [ 1809.144813][ T1389] bond1807 (unregistering): Released all slaves [ 1809.149477][ T1389] bond1806 (unregistering): (slave batadv1615): Releasing backup interface [ 1809.208541][ T1389] batadv1615 (unregistering): left promiscuous mode [ 1809.219812][ T1389] bond1806 (unregistering): Released all slaves [ 1809.224857][ T1389] bond1805 (unregistering): (slave batadv1614): Releasing backup interface [ 1809.259306][ T1389] batadv1614 (unregistering): left promiscuous mode [ 1809.269004][ T1389] bond1805 (unregistering): Released all slaves [ 1809.276287][ T1389] bond1804 (unregistering): (slave batadv1613): Releasing backup interface [ 1809.338452][ T1389] batadv1613 (unregistering): left promiscuous mode [ 1809.343112][ T1389] bond1804 (unregistering): Released all slaves [ 1809.347061][ T1389] bond1803 (unregistering): (slave batadv1612): Releasing backup interface [ 1809.418408][ T1389] batadv1612 (unregistering): left promiscuous mode [ 1809.423082][ T1389] bond1803 (unregistering): Released all slaves [ 1809.426864][ T1389] bond1802 (unregistering): (slave batadv1611): Releasing backup interface [ 1809.468526][ T1389] batadv1611 (unregistering): left promiscuous mode [ 1809.473155][ T1389] bond1802 (unregistering): Released all slaves [ 1809.478019][ T1389] bond1801 (unregistering): (slave batadv1610): Releasing backup interface [ 1809.528845][ T1389] batadv1610 (unregistering): left promiscuous mode [ 1809.533767][ T1389] bond1801 (unregistering): Released all slaves [ 1809.537861][ T1389] bond1800 (unregistering): (slave batadv1609): Releasing backup interface [ 1809.588619][ T1389] batadv1609 (unregistering): left promiscuous mode [ 1809.593196][ T1389] bond1800 (unregistering): Released all slaves [ 1809.597130][ T1389] bond1799 (unregistering): (slave batadv1608): Releasing backup interface [ 1809.649342][ T1389] batadv1608 (unregistering): left promiscuous mode [ 1809.653960][ T1389] bond1799 (unregistering): Released all slaves [ 1809.658248][ T1389] bond1798 (unregistering): (slave batadv1607): Releasing backup interface [ 1809.708461][ T1389] batadv1607 (unregistering): left promiscuous mode [ 1809.713234][ T1389] bond1798 (unregistering): Released all slaves [ 1809.717038][ T1389] bond1797 (unregistering): (slave batadv1606): Releasing backup interface [ 1809.769996][ T1389] batadv1606 (unregistering): left promiscuous mode [ 1809.774803][ T1389] bond1797 (unregistering): Released all slaves [ 1809.780222][ T1389] bond1796 (unregistering): (slave batadv1605): Releasing backup interface [ 1809.819843][ T1389] batadv1605 (unregistering): left promiscuous mode [ 1809.824558][ T1389] bond1796 (unregistering): Released all slaves [ 1809.828986][ T1389] bond1795 (unregistering): (slave batadv1604): Releasing backup interface [ 1809.878958][ T1389] batadv1604 (unregistering): left promiscuous mode [ 1809.884385][ T1389] bond1795 (unregistering): Released all slaves [ 1809.888637][ T1389] bond1794 (unregistering): (slave batadv1603): Releasing backup interface [ 1809.948896][ T1389] batadv1603 (unregistering): left promiscuous mode [ 1809.953634][ T1389] bond1794 (unregistering): Released all slaves [ 1809.957438][ T1389] bond1793 (unregistering): (slave batadv1602): Releasing backup interface [ 1810.009524][ T1389] batadv1602 (unregistering): left promiscuous mode [ 1810.015396][ T1389] bond1793 (unregistering): Released all slaves [ 1810.019865][ T1389] bond1792 (unregistering): (slave batadv1601): Releasing backup interface [ 1810.068505][ T1389] batadv1601 (unregistering): left promiscuous mode [ 1810.073483][ T1389] bond1792 (unregistering): Released all slaves [ 1810.077855][ T1389] bond1791 (unregistering): (slave batadv1600): Releasing backup interface [ 1810.138707][ T1389] batadv1600 (unregistering): left promiscuous mode [ 1810.143485][ T1389] bond1791 (unregistering): Released all slaves [ 1810.147630][ T1389] bond1790 (unregistering): (slave batadv1599): Releasing backup interface [ 1810.209040][ T1389] batadv1599 (unregistering): left promiscuous mode [ 1810.213513][ T1389] bond1790 (unregistering): Released all slaves [ 1810.217399][ T1389] bond1789 (unregistering): (slave batadv1598): Releasing backup interface [ 1810.268340][ T1389] batadv1598 (unregistering): left promiscuous mode [ 1810.273033][ T1389] bond1789 (unregistering): Released all slaves [ 1810.276836][ T1389] bond1788 (unregistering): (slave batadv1597): Releasing backup interface [ 1810.349583][ T1389] batadv1597 (unregistering): left promiscuous mode [ 1810.354335][ T1389] bond1788 (unregistering): Released all slaves [ 1810.357972][ T6258] usb 1-1: USB disconnect, device number 87 [ 1810.359680][ T1389] bond1787 (unregistering): (slave batadv1596): Releasing backup interface [ 1810.377295][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -2 [ 1810.418431][ T1389] batadv1596 (unregistering): left promiscuous mode [ 1810.423194][ T1389] bond1787 (unregistering): Released all slaves [ 1810.426859][ T1389] bond1786 (unregistering): (slave batadv1595): Releasing backup interface [ 1810.479472][ T1389] batadv1595 (unregistering): left promiscuous mode [ 1810.489884][ T1389] bond1786 (unregistering): Released all slaves [ 1810.493698][ T1389] bond1785 (unregistering): (slave batadv1594): Releasing backup interface [ 1810.558743][ T1389] batadv1594 (unregistering): left promiscuous mode [ 1810.563299][ T1389] bond1785 (unregistering): Released all slaves [ 1810.566893][ T1389] bond1784 (unregistering): (slave batadv1593): Releasing backup interface [ 1810.628432][ T1389] batadv1593 (unregistering): left promiscuous mode [ 1810.633061][ T1389] bond1784 (unregistering): Released all slaves [ 1810.637180][ T1389] bond1783 (unregistering): (slave batadv1592): Releasing backup interface [ 1810.698347][ T1389] batadv1592 (unregistering): left promiscuous mode [ 1810.702922][ T1389] bond1783 (unregistering): Released all slaves [ 1810.706663][ T1389] bond1782 (unregistering): (slave batadv1591): Releasing backup interface [ 1810.758758][ T1389] batadv1591 (unregistering): left promiscuous mode [ 1810.764526][ T1389] bond1782 (unregistering): Released all slaves [ 1810.768939][ T1389] bond1781 (unregistering): (slave batadv1590): Releasing backup interface [ 1810.848360][ T1389] batadv1590 (unregistering): left promiscuous mode [ 1810.853945][ T1389] bond1781 (unregistering): Released all slaves [ 1810.858212][ T1389] bond1780 (unregistering): (slave batadv1589): Releasing backup interface 21:54:26 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090587e3"], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="c3b24eac1e02f44f62598d4e2d91d718dabc4020e1664e634b9904065f3635e11db51769524ad4ae4914059804aa283325895c0ead2ac42cdd74c472683358a3d3bb57375659c1bc71c0dbd86c5cd46c81a8689b610c59dff168d4f5d048f4eea75b6f56ec46e00e9819e4475e3fac47357bf3c25087b879f37f7e05e986c731781f17"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1810.899195][ T1389] batadv1589 (unregistering): left promiscuous mode [ 1810.903869][ T1389] bond1780 (unregistering): Released all slaves [ 1810.907977][ T1389] bond1779 (unregistering): (slave batadv1588): Releasing backup interface [ 1810.968448][ T1389] batadv1588 (unregistering): left promiscuous mode [ 1810.973004][ T1389] bond1779 (unregistering): Released all slaves [ 1810.976752][ T1389] bond1778 (unregistering): (slave batadv1587): Releasing backup interface [ 1811.028334][ T1389] batadv1587 (unregistering): left promiscuous mode [ 1811.032794][ T1389] bond1778 (unregistering): Released all slaves [ 1811.036564][ T1389] bond1777 (unregistering): (slave batadv1586): Releasing backup interface [ 1811.089727][ T1389] batadv1586 (unregistering): left promiscuous mode [ 1811.094337][ T1389] bond1777 (unregistering): Released all slaves [ 1811.100774][ T1389] bond1776 (unregistering): (slave batadv1585): Releasing backup interface [ 1811.147388][ T6258] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1811.148468][ T1389] batadv1585 (unregistering): left promiscuous mode [ 1811.154066][ T1389] bond1776 (unregistering): Released all slaves [ 1811.158953][ T1389] bond1775 (unregistering): (slave batadv1584): Releasing backup interface [ 1811.208485][ T1389] batadv1584 (unregistering): left promiscuous mode [ 1811.213070][ T1389] bond1775 (unregistering): Released all slaves [ 1811.216945][ T1389] bond1774 (unregistering): (slave batadv1583): Releasing backup interface [ 1811.268552][ T1389] batadv1583 (unregistering): left promiscuous mode [ 1811.273086][ T1389] bond1774 (unregistering): Released all slaves [ 1811.276788][ T1389] bond1773 (unregistering): (slave batadv1582): Releasing backup interface [ 1811.338331][ T1389] batadv1582 (unregistering): left promiscuous mode [ 1811.343664][ T1389] bond1773 (unregistering): Released all slaves [ 1811.348361][ T1389] bond1772 (unregistering): (slave batadv1581): Releasing backup interface [ 1811.428797][ T1389] batadv1581 (unregistering): left promiscuous mode [ 1811.433529][ T1389] bond1772 (unregistering): Released all slaves [ 1811.438702][ T1389] bond1771 (unregistering): (slave batadv1580): Releasing backup interface [ 1811.498391][ T1389] batadv1580 (unregistering): left promiscuous mode [ 1811.502935][ T1389] bond1771 (unregistering): Released all slaves [ 1811.506748][ T1389] bond1770 (unregistering): (slave batadv1579): Releasing backup interface [ 1811.509261][ T6258] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1811.512533][ T6258] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1811.568376][ T1389] batadv1579 (unregistering): left promiscuous mode [ 1811.572831][ T1389] bond1770 (unregistering): Released all slaves [ 1811.576418][ T1389] bond1769 (unregistering): (slave batadv1578): Releasing backup interface [ 1811.618493][ T1389] batadv1578 (unregistering): left promiscuous mode [ 1811.622988][ T1389] bond1769 (unregistering): Released all slaves [ 1811.626791][ T1389] bond1768 (unregistering): (slave batadv1577): Releasing backup interface [ 1811.629268][ T6258] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1811.631972][ T6258] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1811.634207][ T6258] usb 1-1: Manufacturer: syz [ 1811.635469][ T6258] usb 1-1: SerialNumber: syz [ 1811.688274][ T1389] batadv1577 (unregistering): left promiscuous mode [ 1811.692803][ T1389] bond1768 (unregistering): Released all slaves [ 1811.696576][ T1389] bond1767 (unregistering): (slave batadv1576): Releasing backup interface [ 1811.748787][ T1389] batadv1576 (unregistering): left promiscuous mode [ 1811.753689][ T1389] bond1767 (unregistering): Released all slaves [ 1811.758329][ T1389] bond1766 (unregistering): (slave batadv1575): Releasing backup interface [ 1811.818558][ T1389] batadv1575 (unregistering): left promiscuous mode [ 1811.823357][ T1389] bond1766 (unregistering): Released all slaves [ 1811.828758][ T1389] bond1765 (unregistering): (slave batadv1574): Releasing backup interface [ 1811.868575][ T1389] batadv1574 (unregistering): left promiscuous mode [ 1811.875036][ T1389] bond1765 (unregistering): Released all slaves [ 1811.887474][ T1389] bond1764 (unregistering): (slave batadv1573): Releasing backup interface [ 1811.928294][ T1389] batadv1573 (unregistering): left promiscuous mode [ 1811.932886][ T1389] bond1764 (unregistering): Released all slaves [ 1811.936701][ T1389] bond1763 (unregistering): (slave batadv1572): Releasing backup interface [ 1811.988427][ T1389] batadv1572 (unregistering): left promiscuous mode [ 1811.992959][ T1389] bond1763 (unregistering): Released all slaves [ 1811.996795][ T1389] bond1762 (unregistering): (slave batadv1571): Releasing backup interface [ 1812.048464][ T1389] batadv1571 (unregistering): left promiscuous mode [ 1812.053142][ T1389] bond1762 (unregistering): Released all slaves [ 1812.056879][ T1389] bond1761 (unregistering): (slave batadv1570): Releasing backup interface [ 1812.099545][ T6258] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 1812.101644][ T6258] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input281 [ 1812.108437][ T1389] batadv1570 (unregistering): left promiscuous mode [ 1812.113116][ T1389] bond1761 (unregistering): Released all slaves [ 1812.116831][ T1389] bond1760 (unregistering): (slave batadv1569): Releasing backup interface [ 1812.168528][ T1389] batadv1569 (unregistering): left promiscuous mode [ 1812.174017][ T1389] bond1760 (unregistering): Released all slaves [ 1812.178221][ T1389] bond1759 (unregistering): (slave batadv1568): Releasing backup interface [ 1812.258328][ T1389] batadv1568 (unregistering): left promiscuous mode [ 1812.262898][ T1389] bond1759 (unregistering): Released all slaves [ 1812.266501][ T1389] bond1758 (unregistering): (slave batadv1567): Releasing backup interface [ 1812.308438][ T1389] batadv1567 (unregistering): left promiscuous mode [ 1812.313542][ T1389] bond1758 (unregistering): Released all slaves [ 1812.320404][ T1389] bond1757 (unregistering): (slave batadv1566): Releasing backup interface [ 1812.378718][ T1389] batadv1566 (unregistering): left promiscuous mode [ 1812.388914][ T1389] bond1757 (unregistering): Released all slaves [ 1812.392573][ T1389] bond1756 (unregistering): (slave batadv1565): Releasing backup interface [ 1812.458458][ T1389] batadv1565 (unregistering): left promiscuous mode [ 1812.463127][ T1389] bond1756 (unregistering): Released all slaves [ 1812.467019][ T1389] bond1755 (unregistering): (slave batadv1564): Releasing backup interface [ 1812.538496][ T1389] batadv1564 (unregistering): left promiscuous mode [ 1812.543158][ T1389] bond1755 (unregistering): Released all slaves [ 1812.546761][ T1389] bond1754 (unregistering): (slave batadv1563): Releasing backup interface [ 1812.598437][ T1389] batadv1563 (unregistering): left promiscuous mode [ 1812.603087][ T1389] bond1754 (unregistering): Released all slaves [ 1812.606830][ T1389] bond1753 (unregistering): (slave batadv1562): Releasing backup interface [ 1812.658449][ T1389] batadv1562 (unregistering): left promiscuous mode [ 1812.663309][ T1389] bond1753 (unregistering): Released all slaves [ 1812.670594][ T1389] bond1752 (unregistering): (slave batadv1561): Releasing backup interface [ 1812.708452][ T1389] batadv1561 (unregistering): left promiscuous mode [ 1812.712951][ T1389] bond1752 (unregistering): Released all slaves [ 1812.718066][ T1389] bond1751 (unregistering): (slave batadv1560): Releasing backup interface [ 1812.773667][ T1389] batadv1560 (unregistering): left promiscuous mode [ 1812.784083][ T1389] bond1751 (unregistering): Released all slaves [ 1812.789379][ T1389] bond1750 (unregistering): (slave batadv1559): Releasing backup interface [ 1812.828366][ T1389] batadv1559 (unregistering): left promiscuous mode [ 1812.833183][ T1389] bond1750 (unregistering): Released all slaves [ 1812.837056][ T1389] bond1749 (unregistering): (slave batadv1558): Releasing backup interface [ 1812.889206][ T1389] batadv1558 (unregistering): left promiscuous mode [ 1812.894407][ T1389] bond1749 (unregistering): Released all slaves [ 1812.900187][ T1389] bond1748 (unregistering): (slave batadv1557): Releasing backup interface [ 1812.939879][ T1389] batadv1557 (unregistering): left promiscuous mode [ 1812.946403][ T1389] bond1748 (unregistering): Released all slaves [ 1812.950565][ T1389] bond1747 (unregistering): (slave batadv1556): Releasing backup interface [ 1812.998492][ T1389] batadv1556 (unregistering): left promiscuous mode [ 1813.003224][ T1389] bond1747 (unregistering): Released all slaves [ 1813.006739][ T1389] bond1746 (unregistering): (slave batadv1555): Releasing backup interface [ 1813.058584][ T1389] batadv1555 (unregistering): left promiscuous mode [ 1813.064539][ T1389] bond1746 (unregistering): Released all slaves [ 1813.068725][ T1389] bond1745 (unregistering): (slave batadv1554): Releasing backup interface [ 1813.118989][ T1389] batadv1554 (unregistering): left promiscuous mode [ 1813.123733][ T1389] bond1745 (unregistering): Released all slaves [ 1813.128303][ T1389] bond1744 (unregistering): (slave batadv1553): Releasing backup interface [ 1813.178510][ T1389] batadv1553 (unregistering): left promiscuous mode [ 1813.183231][ T1389] bond1744 (unregistering): Released all slaves [ 1813.187794][ T1389] bond1743 (unregistering): (slave batadv1552): Releasing backup interface [ 1813.249250][ T1389] batadv1552 (unregistering): left promiscuous mode [ 1813.253722][ T1389] bond1743 (unregistering): Released all slaves [ 1813.258884][ T1389] bond1742 (unregistering): (slave batadv1551): Releasing backup interface [ 1813.328665][ T1389] batadv1551 (unregistering): left promiscuous mode [ 1813.333384][ T1389] bond1742 (unregistering): Released all slaves [ 1813.337156][ T1389] bond1741 (unregistering): (slave batadv1550): Releasing backup interface [ 1813.388315][ T1389] batadv1550 (unregistering): left promiscuous mode [ 1813.394439][ T1389] bond1741 (unregistering): Released all slaves [ 1813.398622][ T1389] bond1740 (unregistering): (slave batadv1549): Releasing backup interface [ 1813.448699][ T1389] batadv1549 (unregistering): left promiscuous mode [ 1813.453675][ T1389] bond1740 (unregistering): Released all slaves [ 1813.458899][ T1389] bond1739 (unregistering): (slave batadv1548): Releasing backup interface [ 1813.518793][ T1389] batadv1548 (unregistering): left promiscuous mode [ 1813.524014][ T1389] bond1739 (unregistering): Released all slaves [ 1813.529658][ T1389] bond1738 (unregistering): (slave batadv1547): Releasing backup interface [ 1813.618397][ T1389] batadv1547 (unregistering): left promiscuous mode [ 1813.623079][ T1389] bond1738 (unregistering): Released all slaves [ 1813.627041][ T1389] bond1737 (unregistering): (slave batadv1546): Releasing backup interface [ 1813.680531][ T1389] batadv1546 (unregistering): left promiscuous mode [ 1813.685219][ T1389] bond1737 (unregistering): Released all slaves [ 1813.689431][ T1389] bond1736 (unregistering): (slave batadv1545): Releasing backup interface [ 1813.738587][ T1389] batadv1545 (unregistering): left promiscuous mode [ 1813.743250][ T1389] bond1736 (unregistering): Released all slaves [ 1813.747152][ T1389] bond1735 (unregistering): (slave batadv1544): Releasing backup interface [ 1813.799480][ T1389] batadv1544 (unregistering): left promiscuous mode [ 1813.804135][ T1389] bond1735 (unregistering): Released all slaves [ 1813.817356][ T1389] bond1734 (unregistering): (slave batadv1543): Releasing backup interface [ 1813.858532][ T1389] batadv1543 (unregistering): left promiscuous mode [ 1813.863341][ T1389] bond1734 (unregistering): Released all slaves [ 1813.867040][ T1389] bond1733 (unregistering): (slave batadv1542): Releasing backup interface [ 1813.919869][ T1389] batadv1542 (unregistering): left promiscuous mode [ 1813.924704][ T1389] bond1733 (unregistering): Released all slaves [ 1813.928756][ T1389] bond1732 (unregistering): (slave batadv1541): Releasing backup interface [ 1813.967934][ T23] usb 1-1: USB disconnect, device number 88 [ 1813.978359][ T1389] batadv1541 (unregistering): left promiscuous mode [ 1813.983166][ T1389] bond1732 (unregistering): Released all slaves [ 1813.987274][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -2 [ 1813.989134][ T1389] bond1731 (unregistering): (slave batadv1540): Releasing backup interface [ 1814.028430][ T1389] batadv1540 (unregistering): left promiscuous mode [ 1814.033670][ T1389] bond1731 (unregistering): Released all slaves [ 1814.038015][ T1389] bond1730 (unregistering): (slave batadv1539): Releasing backup interface [ 1814.078790][ T1389] batadv1539 (unregistering): left promiscuous mode [ 1814.083218][ T1389] bond1730 (unregistering): Released all slaves [ 1814.086812][ T1389] bond1729 (unregistering): (slave batadv1538): Releasing backup interface [ 1814.139343][ T1389] batadv1538 (unregistering): left promiscuous mode [ 1814.144090][ T1389] bond1729 (unregistering): Released all slaves [ 1814.148094][ T1389] bond1728 (unregistering): (slave batadv1537): Releasing backup interface [ 1814.198313][ T1389] batadv1537 (unregistering): left promiscuous mode [ 1814.203142][ T1389] bond1728 (unregistering): Released all slaves [ 1814.207571][ T1389] bond1727 (unregistering): (slave batadv1536): Releasing backup interface [ 1814.248558][ T1389] batadv1536 (unregistering): left promiscuous mode [ 1814.253824][ T1389] bond1727 (unregistering): Released all slaves [ 1814.258166][ T1389] bond1726 (unregistering): (slave batadv1535): Releasing backup interface [ 1814.318556][ T1389] batadv1535 (unregistering): left promiscuous mode [ 1814.323394][ T1389] bond1726 (unregistering): Released all slaves [ 1814.327163][ T1389] bond1725 (unregistering): (slave batadv1534): Releasing backup interface [ 1814.378423][ T1389] batadv1534 (unregistering): left promiscuous mode [ 1814.383008][ T1389] bond1725 (unregistering): Released all slaves [ 1814.386723][ T1389] bond1724 (unregistering): (slave batadv1533): Releasing backup interface [ 1814.459916][ T1389] batadv1533 (unregistering): left promiscuous mode [ 1814.465830][ T1389] bond1724 (unregistering): Released all slaves [ 1814.469906][ T1389] bond1723 (unregistering): (slave batadv1532): Releasing backup interface 21:54:30 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090587e3"], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, &(0x7f0000000080)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, &(0x7f0000000980)={0x40, 0xa, 0xf7, {0xf7, 0x30, "62e3885b71e3e05e4c8798117a6420c62b9a67f3ed17da53960276da524e7c9d6be0d0b482d3f559d968d62af97e11f0e9b920bf401ae0bf9e29b22b263b6d6c232b5988c3ca542e30f7a1a199fbc5135fc04f3202d302775a3ee489bb612ae6f388e7eb522fae912caf2d3b0986ded3d8c1f1fd8cffa5246cc1eb8921f377ac7528d1f8f4fe3f017307d3d14f7362650215d4b6f6f995bbc51f2c1c21c5319080b9c5fec1f5b1dc2098f648d1aa3f850203a23d3d17a1a62bd4886b20cec65f69449c5d09c390ac955b9deb887a9ad8129f6beee4ddff74bc4ff9bdd8dd4631cfd476049d6a3becd9ed7461c373d7f76599b25fac"}}, &(0x7f0000000a80)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "e092e359d446cf22ffc410c791b4a0957377c604cbcb3945ecb24cd679e54b15d97fe48e546f1114e832a35d47d5daf06e8545b48dcb1b44d46c3343a4155c84749ec464475c64b5fcbfb6264acd94b76cd4f60618e2efb793633059bc50bd3f6867c159f15fed73ded19e2df70670bbf44a0526192280142038ad8f876a0a903eb9dcf4949da94d2e0978198604e652dc5e85ddf2a002d4c5cc8444601209350b3790bacb684772ab5951e714dc326a"}}, &(0x7f0000000b40)={0x0, 0x22, 0x1a, {[@main=@item_4={0x3, 0x0, 0x9, "f2a230da"}, @global=@item_4={0x3, 0x1, 0x0, '*oCp'}, @global=@item_4={0x3, 0x1, 0xb, "e1d96569"}, @global=@item_012={0x0, 0x1, 0x5}, @global=@item_4={0x3, 0x1, 0xa, "2c9b4396"}, @main=@item_4={0x3, 0x0, 0xa, "14a890ce"}]}}, &(0x7f0000000b80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0xa6e}}}}, &(0x7f0000000e00)={0x2c, &(0x7f0000000c00)={0x40, 0x0, 0xa5, "0eb543f4a9766f40c0aa4192310a2186da13fbc410526db6f4d658b40f95fee795b1ba40ec984c21dfe2fc03d034a51f09a2e324598f2f8e1845d57d85f396bbdae27ab6ef34965705be807ac57713044711b708d75650e2cbe11f1cfa5466cce879808d08e795469882c3840350c8a20ba2e961d2e0bb3738eee47e57c90d6f2459d8242e987d0399f34916cb5b5d8897d872900aaad6a53256cd2a2997a5ad2c535e6e1b"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000d40)={0x20, 0x1, 0x5c, "e08be5ae86e11b6dcf70a12b969be2328c8e4aa1bd6f5f75a4df1966dcfba560811cfc8cc6990f3cb0118886f046c548bc09c7f872494c34ba7ae6ef34408617cfdcb0ba75c7fd12a69ccd7e70d2c35eff967b3a859b42ec7b139e62"}, &(0x7f0000000dc0)={0x20, 0x3, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000080)={0x0, 0x7, 0x4e, {0x4e, 0x31, "f83292a50c3c8bfb30def6b1a9a20a0eb1d6d8d650a89cf47543204f048547b1bb40818d2c406c6677302837eaf8abc1286f9911b7792e3930a7dd587ff81b188dfb53deec1b0b20748a0826"}}, &(0x7f0000000100)={0x0, 0x3, 0x9e, @string={0x9e, 0x3, "bdcc256fc7dcd00a514e44b24d3ecf9f9a8b5fe86d8ff1c5564e4c250b66ebd64eece62a5f69d200d5d96fee4755ab122d87a1017a3187d41305d26f66057d6f2234af404c2d402b5d93310b6214aabfd69c7220bdf7985cbd17ee9ffbdbd7ac29c017e55c5a5720949d0a9e8bcce93f5578688c92d5f1311e187d62f457a8c7a70f62f45fb6e8f3f0511bb76a145715ccb5a12db45e9d65f5947194"}}, &(0x7f0000000280)={0x0, 0xf, 0x181, {0x5, 0xf, 0x181, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x9, 0x101}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x7, 0xff, 0x1}, @ptm_cap={0x3}, @generic={0x81, 0x10, 0xa, "467a220d14771660b039afc13e95c37a1a606b093e6f0852ab2584e0fb82b7759549c2c084289b60637a147573ec6c89b17c72fd232d6211f991ffd5c0b4261a8d8a8e1fb670503901b0975deec81c3601474c32e638b59a8856ffefddad2330ff0eb2e7056dde19167b7b346e3c35cbc6a60ffb99866d05c809d938c759"}, @generic={0xd3, 0x10, 0x3, "008de0cf956e2872fe7e799ce80031b3e83693ea82331c80ac5dc66af37005dcfb4a4bd301653317c9f0440bc970b02302042a26cfc7dece2398df959706a807bb6dc16c4d678640f86de40efae0ab819c75ea912efb607e313049ca7821cbd5e14c914c31e65959899c0b8ae110d8fca7a3e488b9c3a5cda4add77867b3c7b82b7142db4d91d577f808add67c58016c706f979ce58168762b5353c2ec301403173ecd6e45d67bb0e2470725e8a466a6c13c9eb873460819f8a815adad51f4d4d7051c0743d6ae9704ceb68100d13f05"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "f45da367bf7d5a1d22ad464a7e6f89ee"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x0, 0x80, "29f06496", "52e6d313"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2c, 0x0, 0x3f, 0x2, 0x6, 0x2, 0x32fc}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000480)={0x20, 0x6, 0x64, "93680aa796f2fc8e0f70c61fc0f599d9131d816c2b2404f860b5657c6bb8f799209750c13d58bb78648e8ba1eb0dbed5746d187b8c865fc2e61b72fcbbff29555e9cfa8c4f61d308c20464bf6b5705e27096859af01a4676a4ac664a3b72ec7201c000b3"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4c}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000005c0)={0x20, 0x0, 0x8, {0x200, 0x10, [0xf000]}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000000680)={0x40, 0xb, 0x2, "d5da"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000700)={0x40, 0x13, 0x6, @local}, &(0x7f0000000740)={0x40, 0x17, 0x6}, &(0x7f0000000780)={0x40, 0x19, 0x2, "57dc"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x52}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1814.508723][ T1389] batadv1532 (unregistering): left promiscuous mode [ 1814.513660][ T1389] bond1723 (unregistering): Released all slaves [ 1814.517732][ T1389] bond1722 (unregistering): (slave batadv1531): Releasing backup interface [ 1814.568436][ T1389] batadv1531 (unregistering): left promiscuous mode [ 1814.573865][ T1389] bond1722 (unregistering): Released all slaves [ 1814.577777][ T1389] bond1721 (unregistering): (slave batadv1530): Releasing backup interface [ 1814.628454][ T1389] batadv1530 (unregistering): left promiscuous mode [ 1814.632859][ T1389] bond1721 (unregistering): Released all slaves [ 1814.636483][ T1389] bond1720 (unregistering): (slave batadv1529): Releasing backup interface [ 1814.678438][ T1389] batadv1529 (unregistering): left promiscuous mode [ 1814.682826][ T1389] bond1720 (unregistering): Released all slaves [ 1814.686627][ T1389] bond1719 (unregistering): (slave batadv1528): Releasing backup interface [ 1814.757366][T20034] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1814.758378][ T1389] batadv1528 (unregistering): left promiscuous mode [ 1814.763897][ T1389] bond1719 (unregistering): Released all slaves [ 1814.768018][ T1389] bond1718 (unregistering): (slave batadv1527): Releasing backup interface [ 1814.828772][ T1389] batadv1527 (unregistering): left promiscuous mode [ 1814.833463][ T1389] bond1718 (unregistering): Released all slaves [ 1814.837552][ T1389] bond1717 (unregistering): (slave batadv1526): Releasing backup interface [ 1814.888735][ T1389] batadv1526 (unregistering): left promiscuous mode [ 1814.893714][ T1389] bond1717 (unregistering): Released all slaves [ 1814.898000][ T1389] bond1716 (unregistering): (slave batadv1525): Releasing backup interface [ 1814.949470][ T1389] batadv1525 (unregistering): left promiscuous mode [ 1814.953951][ T1389] bond1716 (unregistering): Released all slaves [ 1814.958066][ T1389] bond1715 (unregistering): (slave batadv1524): Releasing backup interface [ 1815.008363][ T1389] batadv1524 (unregistering): left promiscuous mode [ 1815.013072][ T1389] bond1715 (unregistering): Released all slaves [ 1815.016898][ T1389] bond1714 (unregistering): (slave batadv1523): Releasing backup interface [ 1815.068422][ T1389] batadv1523 (unregistering): left promiscuous mode [ 1815.072879][ T1389] bond1714 (unregistering): Released all slaves [ 1815.076473][ T1389] bond1713 (unregistering): (slave batadv1522): Releasing backup interface [ 1815.127436][T20034] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1815.128468][ T1389] batadv1522 (unregistering): left promiscuous mode [ 1815.130219][T20034] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1815.137850][ T1389] bond1713 (unregistering): Released all slaves [ 1815.141592][ T1389] bond1712 (unregistering): (slave batadv1521): Releasing backup interface [ 1815.178453][ T1389] batadv1521 (unregistering): left promiscuous mode [ 1815.182993][ T1389] bond1712 (unregistering): Released all slaves [ 1815.186839][ T1389] bond1711 (unregistering): (slave batadv1520): Releasing backup interface [ 1815.247378][T20034] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1815.249536][T20034] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1815.251644][T20034] usb 1-1: Manufacturer: syz [ 1815.253205][T20034] usb 1-1: SerialNumber: syz [ 1815.258460][ T1389] batadv1520 (unregistering): left promiscuous mode [ 1815.262933][ T1389] bond1711 (unregistering): Released all slaves [ 1815.266486][ T1389] bond1710 (unregistering): (slave batadv1519): Releasing backup interface [ 1815.308394][ T1389] batadv1519 (unregistering): left promiscuous mode [ 1815.313183][ T1389] bond1710 (unregistering): Released all slaves [ 1815.317106][ T1389] bond1709 (unregistering): (slave batadv1518): Releasing backup interface [ 1815.368497][ T1389] batadv1518 (unregistering): left promiscuous mode [ 1815.375086][ T1389] bond1709 (unregistering): Released all slaves [ 1815.380021][ T1389] bond1708 (unregistering): (slave batadv1517): Releasing backup interface [ 1815.428440][ T1389] batadv1517 (unregistering): left promiscuous mode [ 1815.433187][ T1389] bond1708 (unregistering): Released all slaves [ 1815.436951][ T1389] bond1707 (unregistering): (slave batadv1516): Releasing backup interface [ 1815.488345][ T1389] batadv1516 (unregistering): left promiscuous mode [ 1815.493964][ T1389] bond1707 (unregistering): Released all slaves [ 1815.498731][ T1389] bond1706 (unregistering): (slave batadv1515): Releasing backup interface [ 1815.508200][T20034] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 1815.510200][T20034] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input282 [ 1815.558461][ T1389] batadv1515 (unregistering): left promiscuous mode [ 1815.563227][ T1389] bond1706 (unregistering): Released all slaves [ 1815.567058][ T1389] bond1705 (unregistering): (slave batadv1514): Releasing backup interface [ 1815.628348][ T1389] batadv1514 (unregistering): left promiscuous mode [ 1815.633245][ T1389] bond1705 (unregistering): Released all slaves [ 1815.638731][ T1389] bond1704 (unregistering): (slave batadv1513): Releasing backup interface [ 1815.678581][ T1389] batadv1513 (unregistering): left promiscuous mode [ 1815.683847][ T1389] bond1704 (unregistering): Released all slaves [ 1815.688112][ T1389] bond1703 (unregistering): (slave batadv1512): Releasing backup interface [ 1815.739514][ T1389] batadv1512 (unregistering): left promiscuous mode [ 1815.744109][ T1389] bond1703 (unregistering): Released all slaves [ 1815.748384][ T1389] bond1702 (unregistering): (slave batadv1511): Releasing backup interface [ 1815.798815][ T1389] batadv1511 (unregistering): left promiscuous mode [ 1815.804035][ T1389] bond1702 (unregistering): Released all slaves [ 1815.808420][ T1389] bond1701 (unregistering): (slave batadv1510): Releasing backup interface [ 1815.858440][ T1389] batadv1510 (unregistering): left promiscuous mode [ 1815.862963][ T1389] bond1701 (unregistering): Released all slaves [ 1815.868796][ T1389] bond1700 (unregistering): (slave batadv1509): Releasing backup interface [ 1815.918717][ T1389] batadv1509 (unregistering): left promiscuous mode [ 1815.923199][ T1389] bond1700 (unregistering): Released all slaves [ 1815.926925][ T1389] bond1699 (unregistering): (slave batadv1508): Releasing backup interface [ 1815.979231][ T1389] batadv1508 (unregistering): left promiscuous mode [ 1815.983818][ T1389] bond1699 (unregistering): Released all slaves [ 1815.988189][ T1389] bond1698 (unregistering): (slave batadv1507): Releasing backup interface [ 1816.048287][ T1389] batadv1507 (unregistering): left promiscuous mode [ 1816.053144][ T1389] bond1698 (unregistering): Released all slaves [ 1816.056813][ T1389] bond1697 (unregistering): (slave batadv1506): Releasing backup interface [ 1816.108692][ T1389] batadv1506 (unregistering): left promiscuous mode [ 1816.113453][ T1389] bond1697 (unregistering): Released all slaves [ 1816.117405][ T1389] bond1696 (unregistering): (slave batadv1505): Releasing backup interface [ 1816.148238][T31845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1816.150506][T31845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1816.168364][ T1389] batadv1505 (unregistering): left promiscuous mode [ 1816.172970][ T1389] bond1696 (unregistering): Released all slaves [ 1816.176766][ T1389] bond1695 (unregistering): (slave batadv1504): Releasing backup interface [ 1816.228409][ T1389] batadv1504 (unregistering): left promiscuous mode [ 1816.233517][ T1389] bond1695 (unregistering): Released all slaves [ 1816.239199][ T1389] bond1694 (unregistering): (slave batadv1503): Releasing backup interface [ 1816.288408][ T1389] batadv1503 (unregistering): left promiscuous mode [ 1816.294142][ T1389] bond1694 (unregistering): Released all slaves [ 1816.298489][ T1389] bond1693 (unregistering): (slave batadv1502): Releasing backup interface [ 1816.358655][ T1389] batadv1502 (unregistering): left promiscuous mode [ 1816.363365][ T1389] bond1693 (unregistering): Released all slaves [ 1816.367992][ T1389] bond1692 (unregistering): (slave batadv1501): Releasing backup interface [ 1816.418444][ T1389] batadv1501 (unregistering): left promiscuous mode [ 1816.423009][ T1389] bond1692 (unregistering): Released all slaves [ 1816.426836][ T1389] bond1691 (unregistering): (slave batadv1500): Releasing backup interface [ 1816.508625][ T1389] batadv1500 (unregistering): left promiscuous mode [ 1816.514870][ T1389] bond1691 (unregistering): Released all slaves [ 1816.521348][ T1389] bond1690 (unregistering): (slave batadv1499): Releasing backup interface [ 1816.588953][ T1389] batadv1499 (unregistering): left promiscuous mode [ 1816.593814][ T1389] bond1690 (unregistering): Released all slaves [ 1816.598083][ T1389] bond1689 (unregistering): (slave batadv1498): Releasing backup interface [ 1816.639159][ T1389] batadv1498 (unregistering): left promiscuous mode [ 1816.649439][ T1389] bond1689 (unregistering): Released all slaves [ 1816.653185][ T1389] bond1688 (unregistering): (slave batadv1497): Releasing backup interface [ 1816.709065][ T1389] batadv1497 (unregistering): left promiscuous mode [ 1816.723180][ T1389] bond1688 (unregistering): Released all slaves [ 1816.728215][ T1389] bond1687 (unregistering): (slave batadv1496): Releasing backup interface [ 1816.790066][ T1389] batadv1496 (unregistering): left promiscuous mode [ 1816.794758][ T1389] bond1687 (unregistering): Released all slaves [ 1816.800145][ T1389] bond1686 (unregistering): (slave batadv1495): Releasing backup interface [ 1816.848416][ T1389] batadv1495 (unregistering): left promiscuous mode [ 1816.854420][ T1389] bond1686 (unregistering): Released all slaves [ 1816.859497][ T1389] bond1685 (unregistering): (slave batadv1494): Releasing backup interface [ 1816.908501][ T1389] batadv1494 (unregistering): left promiscuous mode [ 1816.913008][ T1389] bond1685 (unregistering): Released all slaves [ 1816.917449][ T1389] bond1684 (unregistering): (slave batadv1493): Releasing backup interface [ 1816.958892][ T1389] batadv1493 (unregistering): left promiscuous mode [ 1816.963726][ T1389] bond1684 (unregistering): Released all slaves [ 1816.968107][ T1389] bond1683 (unregistering): (slave batadv1492): Releasing backup interface [ 1817.009462][ T1389] batadv1492 (unregistering): left promiscuous mode [ 1817.014945][ T1389] bond1683 (unregistering): Released all slaves [ 1817.019356][ T1389] bond1682 (unregistering): (slave batadv1491): Releasing backup interface [ 1817.058623][ T1389] batadv1491 (unregistering): left promiscuous mode [ 1817.063251][ T1389] bond1682 (unregistering): Released all slaves [ 1817.067096][ T1389] bond1681 (unregistering): (slave batadv1490): Releasing backup interface [ 1817.128488][ T1389] batadv1490 (unregistering): left promiscuous mode [ 1817.133523][ T1389] bond1681 (unregistering): Released all slaves [ 1817.137772][ T1389] bond1680 (unregistering): (slave batadv1489): Releasing backup interface [ 1817.198803][ T1389] batadv1489 (unregistering): left promiscuous mode [ 1817.203370][ T1389] bond1680 (unregistering): Released all slaves [ 1817.207099][ T1389] bond1679 (unregistering): (slave batadv1488): Releasing backup interface [ 1817.268361][ T1389] batadv1488 (unregistering): left promiscuous mode [ 1817.273529][ T1389] bond1679 (unregistering): Released all slaves [ 1817.277972][ T1389] bond1678 (unregistering): (slave batadv1487): Releasing backup interface [ 1817.338546][ T1389] batadv1487 (unregistering): left promiscuous mode [ 1817.343271][ T1389] bond1678 (unregistering): Released all slaves [ 1817.347113][ T1389] bond1677 (unregistering): (slave batadv1486): Releasing backup interface [ 1817.398321][ T1389] batadv1486 (unregistering): left promiscuous mode [ 1817.403639][ T1389] bond1677 (unregistering): Released all slaves [ 1817.408579][ T1389] bond1676 (unregistering): (slave batadv1485): Releasing backup interface [ 1817.458412][ T1389] batadv1485 (unregistering): left promiscuous mode [ 1817.463120][ T1389] bond1676 (unregistering): Released all slaves [ 1817.466966][ T1389] bond1675 (unregistering): (slave batadv1484): Releasing backup interface [ 1817.518627][ T1389] batadv1484 (unregistering): left promiscuous mode [ 1817.523417][ T1389] bond1675 (unregistering): Released all slaves [ 1817.529623][ T1389] bond1674 (unregistering): (slave batadv1483): Releasing backup interface [ 1817.568324][ T1389] batadv1483 (unregistering): left promiscuous mode [ 1817.573279][ T1389] bond1674 (unregistering): Released all slaves [ 1817.577112][ T1389] bond1673 (unregistering): (slave batadv1482): Releasing backup interface [ 1817.648484][ T1389] batadv1482 (unregistering): left promiscuous mode [ 1817.653035][ T1389] bond1673 (unregistering): Released all slaves [ 1817.656789][ T1389] bond1672 (unregistering): (slave batadv1481): Releasing backup interface [ 1817.708377][ T1389] batadv1481 (unregistering): left promiscuous mode [ 1817.713433][ T1389] bond1672 (unregistering): Released all slaves [ 1817.717653][ T1389] bond1671 (unregistering): (slave batadv1480): Releasing backup interface [ 1817.768782][ T1389] batadv1480 (unregistering): left promiscuous mode [ 1817.773460][ T1389] bond1671 (unregistering): Released all slaves [ 1817.777394][ T1389] bond1670 (unregistering): (slave batadv1479): Releasing backup interface [ 1817.838446][ T1389] batadv1479 (unregistering): left promiscuous mode [ 1817.843152][ T1389] bond1670 (unregistering): Released all slaves [ 1817.846928][ T1389] bond1669 (unregistering): (slave batadv1478): Releasing backup interface [ 1817.898524][ T1389] batadv1478 (unregistering): left promiscuous mode [ 1817.903493][ T1389] bond1669 (unregistering): Released all slaves [ 1817.907564][ T1389] bond1668 (unregistering): (slave batadv1477): Releasing backup interface [ 1817.958592][ T1389] batadv1477 (unregistering): left promiscuous mode [ 1817.964400][ T1389] bond1668 (unregistering): Released all slaves [ 1817.969324][ T1389] bond1667 (unregistering): (slave batadv1476): Releasing backup interface [ 1818.028356][ T1389] batadv1476 (unregistering): left promiscuous mode [ 1818.032854][ T1389] bond1667 (unregistering): Released all slaves [ 1818.036686][ T1389] bond1666 (unregistering): (slave batadv1475): Releasing backup interface [ 1818.099559][ T1389] batadv1475 (unregistering): left promiscuous mode [ 1818.104329][ T1389] bond1666 (unregistering): Released all slaves [ 1818.108676][ T1389] bond1665 (unregistering): (slave batadv1474): Releasing backup interface [ 1818.168475][ T1389] batadv1474 (unregistering): left promiscuous mode [ 1818.173291][ T1389] bond1665 (unregistering): Released all slaves [ 1818.177022][ T1389] bond1664 (unregistering): (slave batadv1473): Releasing backup interface [ 1818.239708][ T1389] batadv1473 (unregistering): left promiscuous mode [ 1818.244307][ T1389] bond1664 (unregistering): Released all slaves [ 1818.248469][ T1389] bond1663 (unregistering): (slave batadv1472): Releasing backup interface [ 1818.348351][ T1389] batadv1472 (unregistering): left promiscuous mode [ 1818.353283][ T1389] bond1663 (unregistering): Released all slaves [ 1818.358497][ T1389] bond1662 (unregistering): (slave batadv1471): Releasing backup interface [ 1818.367305][ C0] yealink 1-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1818.408455][ T1389] batadv1471 (unregistering): left promiscuous mode [ 1818.413419][ T1389] bond1662 (unregistering): Released all slaves [ 1818.427183][ T1389] bond1661 (unregistering): (slave batadv1470): Releasing backup interface [ 1818.459488][ T1389] batadv1470 (unregistering): left promiscuous mode [ 1818.464040][ T1389] bond1661 (unregistering): Released all slaves [ 1818.477803][ T1389] bond1660 (unregistering): (slave batadv1469): Releasing backup interface [ 1818.528653][ T1389] batadv1469 (unregistering): left promiscuous mode [ 1818.534246][ T1389] bond1660 (unregistering): Released all slaves [ 1818.540141][ T1389] bond1659 (unregistering): (slave batadv1468): Releasing backup interface [ 1818.588429][ T1389] batadv1468 (unregistering): left promiscuous mode [ 1818.592837][ T1389] bond1659 (unregistering): Released all slaves [ 1818.596371][ T1389] bond1658 (unregistering): (slave batadv1467): Releasing backup interface [ 1818.648465][ T1389] batadv1467 (unregistering): left promiscuous mode [ 1818.653674][ T1389] bond1658 (unregistering): Released all slaves [ 1818.659009][ T1389] bond1657 (unregistering): (slave batadv1466): Releasing backup interface [ 1818.708429][ T1389] batadv1466 (unregistering): left promiscuous mode [ 1818.712919][ T1389] bond1657 (unregistering): Released all slaves [ 1818.716714][ T1389] bond1656 (unregistering): (slave batadv1465): Releasing backup interface [ 1818.769693][ T1389] batadv1465 (unregistering): left promiscuous mode [ 1818.776022][ T1389] bond1656 (unregistering): Released all slaves [ 1818.780170][ T1389] bond1655 (unregistering): (slave batadv1464): Releasing backup interface [ 1818.828353][ T1389] batadv1464 (unregistering): left promiscuous mode [ 1818.833016][ T1389] bond1655 (unregistering): Released all slaves [ 1818.837818][ T1389] bond1654 (unregistering): (slave batadv1463): Releasing backup interface [ 1818.898577][ T1389] batadv1463 (unregistering): left promiscuous mode [ 1818.903091][ T1389] bond1654 (unregistering): Released all slaves [ 1818.906940][ T1389] bond1653 (unregistering): (slave batadv1462): Releasing backup interface [ 1818.959349][ T1389] batadv1462 (unregistering): left promiscuous mode [ 1818.964208][ T1389] bond1653 (unregistering): Released all slaves [ 1818.968472][ T1389] bond1652 (unregistering): (slave batadv1461): Releasing backup interface [ 1819.019252][ T1389] batadv1461 (unregistering): left promiscuous mode [ 1819.024075][ T1389] bond1652 (unregistering): Released all slaves [ 1819.028118][ T1389] bond1651 (unregistering): (slave batadv1460): Releasing backup interface [ 1819.078415][ T1389] batadv1460 (unregistering): left promiscuous mode [ 1819.083135][ T1389] bond1651 (unregistering): Released all slaves [ 1819.087094][ T1389] bond1650 (unregistering): (slave batadv1459): Releasing backup interface [ 1819.149259][ T1389] batadv1459 (unregistering): left promiscuous mode [ 1819.153732][ T1389] bond1650 (unregistering): Released all slaves [ 1819.157955][ T1389] bond1649 (unregistering): (slave batadv1458): Releasing backup interface [ 1819.208276][ T1389] batadv1458 (unregistering): left promiscuous mode [ 1819.212875][ T1389] bond1649 (unregistering): Released all slaves [ 1819.216904][ T1389] bond1648 (unregistering): (slave batadv1457): Releasing backup interface [ 1819.268303][ T1389] batadv1457 (unregistering): left promiscuous mode [ 1819.272797][ T1389] bond1648 (unregistering): Released all slaves [ 1819.276622][ T1389] bond1647 (unregistering): (slave batadv1456): Releasing backup interface [ 1819.338282][ T1389] batadv1456 (unregistering): left promiscuous mode [ 1819.342828][ T1389] bond1647 (unregistering): Released all slaves [ 1819.347077][ T1389] bond1646 (unregistering): (slave batadv1455): Releasing backup interface [ 1819.398401][ T1389] batadv1455 (unregistering): left promiscuous mode [ 1819.404310][ T1389] bond1646 (unregistering): Released all slaves [ 1819.408803][ T1389] bond1645 (unregistering): (slave batadv1454): Releasing backup interface [ 1819.458725][ T1389] batadv1454 (unregistering): left promiscuous mode [ 1819.463923][ T1389] bond1645 (unregistering): Released all slaves [ 1819.468334][ T1389] bond1644 (unregistering): (slave batadv1453): Releasing backup interface [ 1819.489284][T20957] usb 1-1: USB disconnect, device number 89 21:54:35 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090587e3"], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, &(0x7f0000000080)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, &(0x7f0000000980)={0x40, 0xa, 0xf7, {0xf7, 0x30, "62e3885b71e3e05e4c8798117a6420c62b9a67f3ed17da53960276da524e7c9d6be0d0b482d3f559d968d62af97e11f0e9b920bf401ae0bf9e29b22b263b6d6c232b5988c3ca542e30f7a1a199fbc5135fc04f3202d302775a3ee489bb612ae6f388e7eb522fae912caf2d3b0986ded3d8c1f1fd8cffa5246cc1eb8921f377ac7528d1f8f4fe3f017307d3d14f7362650215d4b6f6f995bbc51f2c1c21c5319080b9c5fec1f5b1dc2098f648d1aa3f850203a23d3d17a1a62bd4886b20cec65f69449c5d09c390ac955b9deb887a9ad8129f6beee4ddff74bc4ff9bdd8dd4631cfd476049d6a3becd9ed7461c373d7f76599b25fac"}}, &(0x7f0000000a80)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "e092e359d446cf22ffc410c791b4a0957377c604cbcb3945ecb24cd679e54b15d97fe48e546f1114e832a35d47d5daf06e8545b48dcb1b44d46c3343a4155c84749ec464475c64b5fcbfb6264acd94b76cd4f60618e2efb793633059bc50bd3f6867c159f15fed73ded19e2df70670bbf44a0526192280142038ad8f876a0a903eb9dcf4949da94d2e0978198604e652dc5e85ddf2a002d4c5cc8444601209350b3790bacb684772ab5951e714dc326a"}}, &(0x7f0000000b40)={0x0, 0x22, 0x1a, {[@main=@item_4={0x3, 0x0, 0x9, "f2a230da"}, @global=@item_4={0x3, 0x1, 0x0, '*oCp'}, @global=@item_4={0x3, 0x1, 0xb, "e1d96569"}, @global=@item_012={0x0, 0x1, 0x5}, @global=@item_4={0x3, 0x1, 0xa, "2c9b4396"}, @main=@item_4={0x3, 0x0, 0xa, "14a890ce"}]}}, &(0x7f0000000b80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0xa6e}}}}, &(0x7f0000000e00)={0x2c, &(0x7f0000000c00)={0x40, 0x0, 0xa5, "0eb543f4a9766f40c0aa4192310a2186da13fbc410526db6f4d658b40f95fee795b1ba40ec984c21dfe2fc03d034a51f09a2e324598f2f8e1845d57d85f396bbdae27ab6ef34965705be807ac57713044711b708d75650e2cbe11f1cfa5466cce879808d08e795469882c3840350c8a20ba2e961d2e0bb3738eee47e57c90d6f2459d8242e987d0399f34916cb5b5d8897d872900aaad6a53256cd2a2997a5ad2c535e6e1b"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000d40)={0x20, 0x1, 0x5c, "e08be5ae86e11b6dcf70a12b969be2328c8e4aa1bd6f5f75a4df1966dcfba560811cfc8cc6990f3cb0118886f046c548bc09c7f872494c34ba7ae6ef34408617cfdcb0ba75c7fd12a69ccd7e70d2c35eff967b3a859b42ec7b139e62"}, &(0x7f0000000dc0)={0x20, 0x3, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000080)={0x0, 0x7, 0x4e, {0x4e, 0x31, "f83292a50c3c8bfb30def6b1a9a20a0eb1d6d8d650a89cf47543204f048547b1bb40818d2c406c6677302837eaf8abc1286f9911b7792e3930a7dd587ff81b188dfb53deec1b0b20748a0826"}}, &(0x7f0000000100)={0x0, 0x3, 0x9e, @string={0x9e, 0x3, "bdcc256fc7dcd00a514e44b24d3ecf9f9a8b5fe86d8ff1c5564e4c250b66ebd64eece62a5f69d200d5d96fee4755ab122d87a1017a3187d41305d26f66057d6f2234af404c2d402b5d93310b6214aabfd69c7220bdf7985cbd17ee9ffbdbd7ac29c017e55c5a5720949d0a9e8bcce93f5578688c92d5f1311e187d62f457a8c7a70f62f45fb6e8f3f0511bb76a145715ccb5a12db45e9d65f5947194"}}, &(0x7f0000000280)={0x0, 0xf, 0x181, {0x5, 0xf, 0x181, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x9, 0x101}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x7, 0xff, 0x1}, @ptm_cap={0x3}, @generic={0x81, 0x10, 0xa, "467a220d14771660b039afc13e95c37a1a606b093e6f0852ab2584e0fb82b7759549c2c084289b60637a147573ec6c89b17c72fd232d6211f991ffd5c0b4261a8d8a8e1fb670503901b0975deec81c3601474c32e638b59a8856ffefddad2330ff0eb2e7056dde19167b7b346e3c35cbc6a60ffb99866d05c809d938c759"}, @generic={0xd3, 0x10, 0x3, "008de0cf956e2872fe7e799ce80031b3e83693ea82331c80ac5dc66af37005dcfb4a4bd301653317c9f0440bc970b02302042a26cfc7dece2398df959706a807bb6dc16c4d678640f86de40efae0ab819c75ea912efb607e313049ca7821cbd5e14c914c31e65959899c0b8ae110d8fca7a3e488b9c3a5cda4add77867b3c7b82b7142db4d91d577f808add67c58016c706f979ce58168762b5353c2ec301403173ecd6e45d67bb0e2470725e8a466a6c13c9eb873460819f8a815adad51f4d4d7051c0743d6ae9704ceb68100d13f05"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "f45da367bf7d5a1d22ad464a7e6f89ee"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x0, 0x80, "29f06496", "52e6d313"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2c, 0x0, 0x3f, 0x2, 0x6, 0x2, 0x32fc}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000480)={0x20, 0x6, 0x64, "93680aa796f2fc8e0f70c61fc0f599d9131d816c2b2404f860b5657c6bb8f799209750c13d58bb78648e8ba1eb0dbed5746d187b8c865fc2e61b72fcbbff29555e9cfa8c4f61d308c20464bf6b5705e27096859af01a4676a4ac664a3b72ec7201c000b3"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4c}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000005c0)={0x20, 0x0, 0x8, {0x200, 0x10, [0xf000]}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000000680)={0x40, 0xb, 0x2, "d5da"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000700)={0x40, 0x13, 0x6, @local}, &(0x7f0000000740)={0x40, 0x17, 0x6}, &(0x7f0000000780)={0x40, 0x19, 0x2, "57dc"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x52}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090587e3"], 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, &(0x7f0000000080)) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, &(0x7f0000000980)={0x40, 0xa, 0xf7, {0xf7, 0x30, "62e3885b71e3e05e4c8798117a6420c62b9a67f3ed17da53960276da524e7c9d6be0d0b482d3f559d968d62af97e11f0e9b920bf401ae0bf9e29b22b263b6d6c232b5988c3ca542e30f7a1a199fbc5135fc04f3202d302775a3ee489bb612ae6f388e7eb522fae912caf2d3b0986ded3d8c1f1fd8cffa5246cc1eb8921f377ac7528d1f8f4fe3f017307d3d14f7362650215d4b6f6f995bbc51f2c1c21c5319080b9c5fec1f5b1dc2098f648d1aa3f850203a23d3d17a1a62bd4886b20cec65f69449c5d09c390ac955b9deb887a9ad8129f6beee4ddff74bc4ff9bdd8dd4631cfd476049d6a3becd9ed7461c373d7f76599b25fac"}}, &(0x7f0000000a80)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "e092e359d446cf22ffc410c791b4a0957377c604cbcb3945ecb24cd679e54b15d97fe48e546f1114e832a35d47d5daf06e8545b48dcb1b44d46c3343a4155c84749ec464475c64b5fcbfb6264acd94b76cd4f60618e2efb793633059bc50bd3f6867c159f15fed73ded19e2df70670bbf44a0526192280142038ad8f876a0a903eb9dcf4949da94d2e0978198604e652dc5e85ddf2a002d4c5cc8444601209350b3790bacb684772ab5951e714dc326a"}}, &(0x7f0000000b40)={0x0, 0x22, 0x1a, {[@main=@item_4={0x3, 0x0, 0x9, "f2a230da"}, @global=@item_4={0x3, 0x1, 0x0, '*oCp'}, @global=@item_4={0x3, 0x1, 0xb, "e1d96569"}, @global=@item_012={0x0, 0x1, 0x5}, @global=@item_4={0x3, 0x1, 0xa, "2c9b4396"}, @main=@item_4={0x3, 0x0, 0xa, "14a890ce"}]}}, &(0x7f0000000b80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0xa6e}}}}, &(0x7f0000000e00)={0x2c, &(0x7f0000000c00)={0x40, 0x0, 0xa5, "0eb543f4a9766f40c0aa4192310a2186da13fbc410526db6f4d658b40f95fee795b1ba40ec984c21dfe2fc03d034a51f09a2e324598f2f8e1845d57d85f396bbdae27ab6ef34965705be807ac57713044711b708d75650e2cbe11f1cfa5466cce879808d08e795469882c3840350c8a20ba2e961d2e0bb3738eee47e57c90d6f2459d8242e987d0399f34916cb5b5d8897d872900aaad6a53256cd2a2997a5ad2c535e6e1b"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000d40)={0x20, 0x1, 0x5c, "e08be5ae86e11b6dcf70a12b969be2328c8e4aa1bd6f5f75a4df1966dcfba560811cfc8cc6990f3cb0118886f046c548bc09c7f872494c34ba7ae6ef34408617cfdcb0ba75c7fd12a69ccd7e70d2c35eff967b3a859b42ec7b139e62"}, &(0x7f0000000dc0)={0x20, 0x3, 0x1}}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000080)={0x0, 0x7, 0x4e, {0x4e, 0x31, "f83292a50c3c8bfb30def6b1a9a20a0eb1d6d8d650a89cf47543204f048547b1bb40818d2c406c6677302837eaf8abc1286f9911b7792e3930a7dd587ff81b188dfb53deec1b0b20748a0826"}}, &(0x7f0000000100)={0x0, 0x3, 0x9e, @string={0x9e, 0x3, "bdcc256fc7dcd00a514e44b24d3ecf9f9a8b5fe86d8ff1c5564e4c250b66ebd64eece62a5f69d200d5d96fee4755ab122d87a1017a3187d41305d26f66057d6f2234af404c2d402b5d93310b6214aabfd69c7220bdf7985cbd17ee9ffbdbd7ac29c017e55c5a5720949d0a9e8bcce93f5578688c92d5f1311e187d62f457a8c7a70f62f45fb6e8f3f0511bb76a145715ccb5a12db45e9d65f5947194"}}, &(0x7f0000000280)={0x0, 0xf, 0x181, {0x5, 0xf, 0x181, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x9, 0x101}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x7, 0xff, 0x1}, @ptm_cap={0x3}, @generic={0x81, 0x10, 0xa, "467a220d14771660b039afc13e95c37a1a606b093e6f0852ab2584e0fb82b7759549c2c084289b60637a147573ec6c89b17c72fd232d6211f991ffd5c0b4261a8d8a8e1fb670503901b0975deec81c3601474c32e638b59a8856ffefddad2330ff0eb2e7056dde19167b7b346e3c35cbc6a60ffb99866d05c809d938c759"}, @generic={0xd3, 0x10, 0x3, "008de0cf956e2872fe7e799ce80031b3e83693ea82331c80ac5dc66af37005dcfb4a4bd301653317c9f0440bc970b02302042a26cfc7dece2398df959706a807bb6dc16c4d678640f86de40efae0ab819c75ea912efb607e313049ca7821cbd5e14c914c31e65959899c0b8ae110d8fca7a3e488b9c3a5cda4add77867b3c7b82b7142db4d91d577f808add67c58016c706f979ce58168762b5353c2ec301403173ecd6e45d67bb0e2470725e8a466a6c13c9eb873460819f8a815adad51f4d4d7051c0743d6ae9704ceb68100d13f05"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "f45da367bf7d5a1d22ad464a7e6f89ee"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x0, 0x80, "29f06496", "52e6d313"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2c, 0x0, 0x3f, 0x2, 0x6, 0x2, 0x32fc}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000480)={0x20, 0x6, 0x64, "93680aa796f2fc8e0f70c61fc0f599d9131d816c2b2404f860b5657c6bb8f799209750c13d58bb78648e8ba1eb0dbed5746d187b8c865fc2e61b72fcbbff29555e9cfa8c4f61d308c20464bf6b5705e27096859af01a4676a4ac664a3b72ec7201c000b3"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4c}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000005c0)={0x20, 0x0, 0x8, {0x200, 0x10, [0xf000]}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000000680)={0x40, 0xb, 0x2, "d5da"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000700)={0x40, 0x13, 0x6, @local}, &(0x7f0000000740)={0x40, 0x17, 0x6}, &(0x7f0000000780)={0x40, 0x19, 0x2, "57dc"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x52}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x1}}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) [ 1819.519069][ T1389] batadv1453 (unregistering): left promiscuous mode [ 1819.523774][ T1389] bond1644 (unregistering): Released all slaves [ 1819.527860][ T1389] bond1643 (unregistering): (slave batadv1452): Releasing backup interface [ 1819.559770][ T1389] batadv1452 (unregistering): left promiscuous mode [ 1819.569498][ T1389] bond1643 (unregistering): Released all slaves [ 1819.575540][ T1389] bond1642 (unregistering): (slave batadv1451): Releasing backup interface [ 1819.599444][ T1389] batadv1451 (unregistering): left promiscuous mode [ 1819.604306][ T1389] bond1642 (unregistering): Released all slaves [ 1819.608420][ T1389] bond1641 (unregistering): (slave batadv1450): Releasing backup interface [ 1819.648354][ T1389] batadv1450 (unregistering): left promiscuous mode [ 1819.653330][ T1389] bond1641 (unregistering): Released all slaves [ 1819.658388][ T1389] bond1640 (unregistering): (slave batadv1449): Releasing backup interface [ 1819.698423][ T1389] batadv1449 (unregistering): left promiscuous mode [ 1819.703167][ T1389] bond1640 (unregistering): Released all slaves [ 1819.706972][ T1389] bond1639 (unregistering): (slave batadv1448): Releasing backup interface [ 1819.758816][ T1389] batadv1448 (unregistering): left promiscuous mode [ 1819.765479][ T1389] bond1639 (unregistering): Released all slaves [ 1819.769947][ T1389] bond1638 (unregistering): (slave batadv1447): Releasing backup interface [ 1819.818635][ T1389] batadv1447 (unregistering): left promiscuous mode [ 1819.823263][ T1389] bond1638 (unregistering): Released all slaves [ 1819.827033][ T1389] bond1637 (unregistering): (slave batadv1446): Releasing backup interface [ 1819.878422][ T1389] batadv1446 (unregistering): left promiscuous mode [ 1819.882997][ T1389] bond1637 (unregistering): Released all slaves [ 1819.886746][ T1389] bond1636 (unregistering): (slave batadv1445): Releasing backup interface [ 1819.927604][T20957] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1819.948414][ T1389] batadv1445 (unregistering): left promiscuous mode [ 1819.953052][ T1389] bond1636 (unregistering): Released all slaves [ 1819.956792][ T1389] bond1635 (unregistering): (slave batadv1444): Releasing backup interface [ 1820.019542][ T1389] batadv1444 (unregistering): left promiscuous mode [ 1820.024039][ T1389] bond1635 (unregistering): Released all slaves [ 1820.028493][ T1389] bond1634 (unregistering): (slave batadv1443): Releasing backup interface [ 1820.098278][ T1389] batadv1443 (unregistering): left promiscuous mode [ 1820.102937][ T1389] bond1634 (unregistering): Released all slaves [ 1820.106927][ T1389] bond1633 (unregistering): (slave batadv1442): Releasing backup interface [ 1820.158470][ T1389] batadv1442 (unregistering): left promiscuous mode [ 1820.162963][ T1389] bond1633 (unregistering): Released all slaves [ 1820.168249][ T1389] bond1632 (unregistering): (slave batadv1441): Releasing backup interface [ 1820.229424][ T1389] batadv1441 (unregistering): left promiscuous mode [ 1820.234252][ T1389] bond1632 (unregistering): Released all slaves [ 1820.238520][ T1389] bond1631 (unregistering): (slave batadv1440): Releasing backup interface [ 1820.289627][ T1389] batadv1440 (unregistering): left promiscuous mode [ 1820.294559][ T1389] bond1631 (unregistering): Released all slaves [ 1820.298790][ T1389] bond1630 (unregistering): (slave batadv1439): Releasing backup interface [ 1820.317505][T20957] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1820.320218][T20957] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1820.348629][ T1389] batadv1439 (unregistering): left promiscuous mode [ 1820.353510][ T1389] bond1630 (unregistering): Released all slaves [ 1820.357485][ T1389] bond1629 (unregistering): (slave batadv1438): Releasing backup interface [ 1820.408523][ T1389] batadv1438 (unregistering): left promiscuous mode [ 1820.413182][ T1389] bond1629 (unregistering): Released all slaves [ 1820.416895][ T1389] bond1628 (unregistering): (slave batadv1437): Releasing backup interface [ 1820.468371][ T1389] batadv1437 (unregistering): left promiscuous mode [ 1820.473340][ T1389] bond1628 (unregistering): Released all slaves [ 1820.477523][T20957] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1820.480161][T20957] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1820.482410][T20957] usb 1-1: Manufacturer: syz [ 1820.483627][T20957] usb 1-1: SerialNumber: syz [ 1820.485827][ T1389] bond1627 (unregistering): (slave batadv1436): Releasing backup interface [ 1820.528283][ T1389] batadv1436 (unregistering): left promiscuous mode [ 1820.532878][ T1389] bond1627 (unregistering): Released all slaves [ 1820.536570][ T1389] bond1626 (unregistering): (slave batadv1435): Releasing backup interface [ 1820.648220][ T1389] batadv1435 (unregistering): left promiscuous mode [ 1820.652758][ T1389] bond1626 (unregistering): Released all slaves [ 1820.656385][ T1389] bond1625 (unregistering): (slave batadv1434): Releasing backup interface [ 1820.700266][ T1389] batadv1434 (unregistering): left promiscuous mode [ 1820.705188][ T1389] bond1625 (unregistering): Released all slaves [ 1820.709346][ T1389] bond1624 (unregistering): (slave batadv1433): Releasing backup interface [ 1820.728271][T20957] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 1820.730289][T20957] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input283 [ 1820.758399][ T1389] batadv1433 (unregistering): left promiscuous mode [ 1820.763027][ T1389] bond1624 (unregistering): Released all slaves [ 1820.766794][ T1389] bond1623 (unregistering): (slave batadv1432): Releasing backup interface [ 1820.859655][ T1389] batadv1432 (unregistering): left promiscuous mode [ 1820.864207][ T1389] bond1623 (unregistering): Released all slaves [ 1820.868554][ T1389] bond1622 (unregistering): (slave batadv1431): Releasing backup interface [ 1820.928463][ T1389] batadv1431 (unregistering): left promiscuous mode [ 1820.933522][ T1389] bond1622 (unregistering): Released all slaves [ 1820.937165][ T1389] bond1621 (unregistering): (slave batadv1430): Releasing backup interface [ 1820.998380][ T1389] batadv1430 (unregistering): left promiscuous mode [ 1821.002894][ T1389] bond1621 (unregistering): Released all slaves [ 1821.008136][ T1389] bond1620 (unregistering): (slave batadv1429): Releasing backup interface [ 1821.068377][ T1389] batadv1429 (unregistering): left promiscuous mode [ 1821.073090][ T1389] bond1620 (unregistering): Released all slaves [ 1821.077097][ T1389] bond1619 (unregistering): (slave batadv1428): Releasing backup interface [ 1821.128596][ T1389] batadv1428 (unregistering): left promiscuous mode [ 1821.133361][ T1389] bond1619 (unregistering): Released all slaves [ 1821.137154][ T1389] bond1618 (unregistering): (slave batadv1427): Releasing backup interface [ 1821.188270][ T1389] batadv1427 (unregistering): left promiscuous mode [ 1821.193533][ T1389] bond1618 (unregistering): Released all slaves [ 1821.198046][ T1389] bond1617 (unregistering): (slave batadv1426): Releasing backup interface [ 1821.269353][ T1389] batadv1426 (unregistering): left promiscuous mode [ 1821.273828][ T1389] bond1617 (unregistering): Released all slaves [ 1821.280320][ T1389] bond1616 (unregistering): (slave batadv1425): Releasing backup interface [ 1821.338681][ T1389] batadv1425 (unregistering): left promiscuous mode [ 1821.343356][ T1389] bond1616 (unregistering): Released all slaves [ 1821.347685][ T1389] bond1615 (unregistering): (slave batadv1424): Releasing backup interface [ 1821.368136][T31847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1821.370474][T31847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1821.398993][ T1389] batadv1424 (unregistering): left promiscuous mode [ 1821.403488][ T1389] bond1615 (unregistering): Released all slaves [ 1821.407136][ T1389] bond1614 (unregistering): (slave batadv1423): Releasing backup interface [ 1821.458350][ T1389] batadv1423 (unregistering): left promiscuous mode [ 1821.463059][ T1389] bond1614 (unregistering): Released all slaves [ 1821.466888][ T1389] bond1613 (unregistering): (slave batadv1422): Releasing backup interface [ 1821.530381][ T1389] batadv1422 (unregistering): left promiscuous mode [ 1821.535245][ T1389] bond1613 (unregistering): Released all slaves [ 1821.539398][ T1389] bond1612 (unregistering): (slave batadv1421): Releasing backup interface [ 1821.589537][ T1389] batadv1421 (unregistering): left promiscuous mode [ 1821.595128][ T1389] bond1612 (unregistering): Released all slaves [ 1821.599384][ T1389] bond1611 (unregistering): (slave batadv1420): Releasing backup interface [ 1821.648259][ T1389] batadv1420 (unregistering): left promiscuous mode [ 1821.652712][ T1389] bond1611 (unregistering): Released all slaves [ 1821.656321][ T1389] bond1610 (unregistering): (slave batadv1419): Releasing backup interface [ 1821.708444][ T1389] batadv1419 (unregistering): left promiscuous mode [ 1821.713048][ T1389] bond1610 (unregistering): Released all slaves [ 1821.716907][ T1389] bond1609 (unregistering): (slave batadv1418): Releasing backup interface [ 1821.768547][ T1389] batadv1418 (unregistering): left promiscuous mode [ 1821.773177][ T1389] bond1609 (unregistering): Released all slaves [ 1821.777674][ T1389] bond1608 (unregistering): (slave batadv1417): Releasing backup interface [ 1821.828184][ T1389] batadv1417 (unregistering): left promiscuous mode [ 1821.832741][ T1389] bond1608 (unregistering): Released all slaves [ 1821.838148][ T1389] bond1607 (unregistering): (slave batadv1416): Releasing backup interface [ 1821.878455][ T1389] batadv1416 (unregistering): left promiscuous mode [ 1821.883328][ T1389] bond1607 (unregistering): Released all slaves [ 1821.887171][ T1389] bond1606 (unregistering): (slave batadv1415): Releasing backup interface [ 1821.929697][ T1389] batadv1415 (unregistering): left promiscuous mode [ 1821.934308][ T1389] bond1606 (unregistering): Released all slaves [ 1821.938353][ T1389] bond1605 (unregistering): (slave batadv1414): Releasing backup interface [ 1821.978475][ T1389] batadv1414 (unregistering): left promiscuous mode [ 1821.983060][ T1389] bond1605 (unregistering): Released all slaves [ 1821.988387][ T1389] bond1604 (unregistering): (slave batadv1413): Releasing backup interface [ 1822.048283][ T1389] batadv1413 (unregistering): left promiscuous mode [ 1822.052864][ T1389] bond1604 (unregistering): Released all slaves [ 1822.056571][ T1389] bond1603 (unregistering): (slave batadv1412): Releasing backup interface [ 1822.108444][ T1389] batadv1412 (unregistering): left promiscuous mode [ 1822.113600][ T1389] bond1603 (unregistering): Released all slaves [ 1822.119457][ T1389] bond1602 (unregistering): (slave batadv1411): Releasing backup interface [ 1822.188405][ T1389] batadv1411 (unregistering): left promiscuous mode [ 1822.193002][ T1389] bond1602 (unregistering): Released all slaves [ 1822.196783][ T1389] bond1601 (unregistering): (slave batadv1410): Releasing backup interface [ 1822.259737][ T1389] batadv1410 (unregistering): left promiscuous mode [ 1822.264432][ T1389] bond1601 (unregistering): Released all slaves [ 1822.268435][ T1389] bond1600 (unregistering): (slave batadv1409): Releasing backup interface [ 1822.308494][ T1389] batadv1409 (unregistering): left promiscuous mode [ 1822.313149][ T1389] bond1600 (unregistering): Released all slaves [ 1822.317088][ T1389] bond1599 (unregistering): (slave batadv1408): Releasing backup interface [ 1822.368543][ T1389] batadv1408 (unregistering): left promiscuous mode [ 1822.373308][ T1389] bond1599 (unregistering): Released all slaves [ 1822.379174][ T1389] bond1598 (unregistering): (slave batadv1407): Releasing backup interface [ 1822.448302][ T1389] batadv1407 (unregistering): left promiscuous mode [ 1822.453342][ T1389] bond1598 (unregistering): Released all slaves [ 1822.457506][ T1389] bond1597 (unregistering): (slave batadv1406): Releasing backup interface [ 1822.526449][T13379] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1822.528778][ T1389] batadv1406 (unregistering): left promiscuous mode [ 1822.537169][ T1389] bond1597 (unregistering): Released all slaves [ 1822.541727][ T1389] bond1596 (unregistering): (slave batadv1405): Releasing backup interface [ 1822.598976][ T1389] batadv1405 (unregistering): left promiscuous mode [ 1822.603924][ T1389] bond1596 (unregistering): Released all slaves [ 1822.609091][ T1389] bond1595 (unregistering): (slave batadv1404): Releasing backup interface [ 1822.650027][ T1389] batadv1404 (unregistering): left promiscuous mode [ 1822.654548][ T1389] bond1595 (unregistering): Released all slaves [ 1822.658539][ T1389] bond1594 (unregistering): (slave batadv1403): Releasing backup interface [ 1822.708576][ T1389] batadv1403 (unregistering): left promiscuous mode [ 1822.713340][ T1389] bond1594 (unregistering): Released all slaves [ 1822.718845][ T1389] bond1593 (unregistering): (slave batadv1402): Releasing backup interface [ 1822.769156][ T1389] batadv1402 (unregistering): left promiscuous mode [ 1822.774580][ T1389] bond1593 (unregistering): Released all slaves [ 1822.778773][ T1389] bond1592 (unregistering): (slave batadv1401): Releasing backup interface [ 1822.848355][ T1389] batadv1401 (unregistering): left promiscuous mode [ 1822.852984][ T1389] bond1592 (unregistering): Released all slaves [ 1822.857843][ T1389] bond1591 (unregistering): (slave batadv1400): Releasing backup interface [ 1822.908290][ T1389] batadv1400 (unregistering): left promiscuous mode [ 1822.912936][ T1389] bond1591 (unregistering): Released all slaves [ 1822.916990][ T1389] bond1590 (unregistering): (slave batadv1399): Releasing backup interface [ 1822.969165][ T1389] batadv1399 (unregistering): left promiscuous mode [ 1822.973657][ T1389] bond1590 (unregistering): Released all slaves [ 1822.977537][ T1389] bond1589 (unregistering): (slave batadv1398): Releasing backup interface [ 1823.038688][ T1389] batadv1398 (unregistering): left promiscuous mode [ 1823.043419][ T1389] bond1589 (unregistering): Released all slaves [ 1823.047930][ T1389] bond1588 (unregistering): (slave batadv1397): Releasing backup interface [ 1823.108186][ T1389] batadv1397 (unregistering): left promiscuous mode [ 1823.113028][ T1389] bond1588 (unregistering): Released all slaves [ 1823.117931][ T1389] bond1587 (unregistering): (slave batadv1396): Releasing backup interface [ 1823.178572][ T1389] batadv1396 (unregistering): left promiscuous mode [ 1823.183224][ T1389] bond1587 (unregistering): Released all slaves [ 1823.187032][ T1389] bond1586 (unregistering): (slave batadv1395): Releasing backup interface [ 1823.248209][ T1389] batadv1395 (unregistering): left promiscuous mode [ 1823.252745][ T1389] bond1586 (unregistering): Released all slaves [ 1823.256519][ T1389] bond1585 (unregistering): (slave batadv1394): Releasing backup interface [ 1823.329207][ T1389] batadv1394 (unregistering): left promiscuous mode [ 1823.333923][ T1389] bond1585 (unregistering): Released all slaves [ 1823.338039][ T1389] bond1584 (unregistering): (slave batadv1393): Releasing backup interface [ 1823.408265][ T1389] batadv1393 (unregistering): left promiscuous mode [ 1823.412806][ T1389] bond1584 (unregistering): Released all slaves [ 1823.417537][ T1389] bond1583 (unregistering): (slave batadv1392): Releasing backup interface [ 1823.468251][ T1389] batadv1392 (unregistering): left promiscuous mode [ 1823.473090][ T1389] bond1583 (unregistering): Released all slaves [ 1823.476885][ T1389] bond1582 (unregistering): (slave batadv1391): Releasing backup interface [ 1823.519489][ T1389] batadv1391 (unregistering): left promiscuous mode [ 1823.524200][ T1389] bond1582 (unregistering): Released all slaves [ 1823.528544][ T1389] bond1581 (unregistering): (slave batadv1390): Releasing backup interface [ 1823.567301][ C1] yealink 1-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1823.578446][ T1389] batadv1390 (unregistering): left promiscuous mode [ 1823.583034][ T1389] bond1581 (unregistering): Released all slaves [ 1823.586783][ T1389] bond1580 (unregistering): (slave batadv1389): Releasing backup interface [ 1823.638203][ T1389] batadv1389 (unregistering): left promiscuous mode [ 1823.642855][ T1389] bond1580 (unregistering): Released all slaves [ 1823.646555][ T1389] bond1579 (unregistering): (slave batadv1388): Releasing backup interface [ 1823.730518][ T1389] batadv1388 (unregistering): left promiscuous mode [ 1823.735197][ T1389] bond1579 (unregistering): Released all slaves [ 1823.747516][ T1389] bond1578 (unregistering): (slave batadv1387): Releasing backup interface [ 1823.808364][ T1389] batadv1387 (unregistering): left promiscuous mode [ 1823.812934][ T1389] bond1578 (unregistering): Released all slaves [ 1823.816734][ T1389] bond1577 (unregistering): (slave batadv1386): Releasing backup interface [ 1823.868973][ T1389] batadv1386 (unregistering): left promiscuous mode [ 1823.873438][ T1389] bond1577 (unregistering): Released all slaves [ 1823.877413][ T1389] bond1576 (unregistering): (slave batadv1385): Releasing backup interface [ 1823.938362][ T1389] batadv1385 (unregistering): left promiscuous mode [ 1823.943050][ T1389] bond1576 (unregistering): Released all slaves [ 1823.946865][ T1389] bond1575 (unregistering): (slave batadv1384): Releasing backup interface [ 1824.008643][ T1389] batadv1384 (unregistering): left promiscuous mode [ 1824.013278][ T1389] bond1575 (unregistering): Released all slaves [ 1824.019214][ T1389] bond1574 (unregistering): (slave batadv1383): Releasing backup interface [ 1824.068307][ T1389] batadv1383 (unregistering): left promiscuous mode [ 1824.072845][ T1389] bond1574 (unregistering): Released all slaves [ 1824.076570][ T1389] bond1573 (unregistering): (slave batadv1382): Releasing backup interface [ 1824.121747][T31848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1824.123999][T31848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1824.148428][ T1389] batadv1382 (unregistering): left promiscuous mode [ 1824.156948][ T1389] bond1573 (unregistering): Released all slaves [ 1824.163674][ T25] usb 1-1: USB disconnect, device number 90 21:54:40 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090587e3"], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, &(0x7f0000000080)) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, &(0x7f0000000980)={0x40, 0xa, 0xf7, {0xf7, 0x30, "62e3885b71e3e05e4c8798117a6420c62b9a67f3ed17da53960276da524e7c9d6be0d0b482d3f559d968d62af97e11f0e9b920bf401ae0bf9e29b22b263b6d6c232b5988c3ca542e30f7a1a199fbc5135fc04f3202d302775a3ee489bb612ae6f388e7eb522fae912caf2d3b0986ded3d8c1f1fd8cffa5246cc1eb8921f377ac7528d1f8f4fe3f017307d3d14f7362650215d4b6f6f995bbc51f2c1c21c5319080b9c5fec1f5b1dc2098f648d1aa3f850203a23d3d17a1a62bd4886b20cec65f69449c5d09c390ac955b9deb887a9ad8129f6beee4ddff74bc4ff9bdd8dd4631cfd476049d6a3becd9ed7461c373d7f76599b25fac"}}, &(0x7f0000000a80)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "e092e359d446cf22ffc410c791b4a0957377c604cbcb3945ecb24cd679e54b15d97fe48e546f1114e832a35d47d5daf06e8545b48dcb1b44d46c3343a4155c84749ec464475c64b5fcbfb6264acd94b76cd4f60618e2efb793633059bc50bd3f6867c159f15fed73ded19e2df70670bbf44a0526192280142038ad8f876a0a903eb9dcf4949da94d2e0978198604e652dc5e85ddf2a002d4c5cc8444601209350b3790bacb684772ab5951e714dc326a"}}, &(0x7f0000000b40)={0x0, 0x22, 0x1a, {[@main=@item_4={0x3, 0x0, 0x9, "f2a230da"}, @global=@item_4={0x3, 0x1, 0x0, '*oCp'}, @global=@item_4={0x3, 0x1, 0xb, "e1d96569"}, @global=@item_012={0x0, 0x1, 0x5}, @global=@item_4={0x3, 0x1, 0xa, "2c9b4396"}, @main=@item_4={0x3, 0x0, 0xa, "14a890ce"}]}}, &(0x7f0000000b80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0xa6e}}}}, &(0x7f0000000e00)={0x2c, &(0x7f0000000c00)={0x40, 0x0, 0xa5, "0eb543f4a9766f40c0aa4192310a2186da13fbc410526db6f4d658b40f95fee795b1ba40ec984c21dfe2fc03d034a51f09a2e324598f2f8e1845d57d85f396bbdae27ab6ef34965705be807ac57713044711b708d75650e2cbe11f1cfa5466cce879808d08e795469882c3840350c8a20ba2e961d2e0bb3738eee47e57c90d6f2459d8242e987d0399f34916cb5b5d8897d872900aaad6a53256cd2a2997a5ad2c535e6e1b"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000d40)={0x20, 0x1, 0x5c, "e08be5ae86e11b6dcf70a12b969be2328c8e4aa1bd6f5f75a4df1966dcfba560811cfc8cc6990f3cb0118886f046c548bc09c7f872494c34ba7ae6ef34408617cfdcb0ba75c7fd12a69ccd7e70d2c35eff967b3a859b42ec7b139e62"}, &(0x7f0000000dc0)={0x20, 0x3, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000080)={0x0, 0x7, 0x4e, {0x4e, 0x31, "f83292a50c3c8bfb30def6b1a9a20a0eb1d6d8d650a89cf47543204f048547b1bb40818d2c406c6677302837eaf8abc1286f9911b7792e3930a7dd587ff81b188dfb53deec1b0b20748a0826"}}, &(0x7f0000000100)={0x0, 0x3, 0x9e, @string={0x9e, 0x3, "bdcc256fc7dcd00a514e44b24d3ecf9f9a8b5fe86d8ff1c5564e4c250b66ebd64eece62a5f69d200d5d96fee4755ab122d87a1017a3187d41305d26f66057d6f2234af404c2d402b5d93310b6214aabfd69c7220bdf7985cbd17ee9ffbdbd7ac29c017e55c5a5720949d0a9e8bcce93f5578688c92d5f1311e187d62f457a8c7a70f62f45fb6e8f3f0511bb76a145715ccb5a12db45e9d65f5947194"}}, &(0x7f0000000280)={0x0, 0xf, 0x181, {0x5, 0xf, 0x181, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x9, 0x101}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x7, 0xff, 0x1}, @ptm_cap={0x3}, @generic={0x81, 0x10, 0xa, "467a220d14771660b039afc13e95c37a1a606b093e6f0852ab2584e0fb82b7759549c2c084289b60637a147573ec6c89b17c72fd232d6211f991ffd5c0b4261a8d8a8e1fb670503901b0975deec81c3601474c32e638b59a8856ffefddad2330ff0eb2e7056dde19167b7b346e3c35cbc6a60ffb99866d05c809d938c759"}, @generic={0xd3, 0x10, 0x3, "008de0cf956e2872fe7e799ce80031b3e83693ea82331c80ac5dc66af37005dcfb4a4bd301653317c9f0440bc970b02302042a26cfc7dece2398df959706a807bb6dc16c4d678640f86de40efae0ab819c75ea912efb607e313049ca7821cbd5e14c914c31e65959899c0b8ae110d8fca7a3e488b9c3a5cda4add77867b3c7b82b7142db4d91d577f808add67c58016c706f979ce58168762b5353c2ec301403173ecd6e45d67bb0e2470725e8a466a6c13c9eb873460819f8a815adad51f4d4d7051c0743d6ae9704ceb68100d13f05"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "f45da367bf7d5a1d22ad464a7e6f89ee"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x0, 0x80, "29f06496", "52e6d313"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2c, 0x0, 0x3f, 0x2, 0x6, 0x2, 0x32fc}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000480)={0x20, 0x6, 0x64, "93680aa796f2fc8e0f70c61fc0f599d9131d816c2b2404f860b5657c6bb8f799209750c13d58bb78648e8ba1eb0dbed5746d187b8c865fc2e61b72fcbbff29555e9cfa8c4f61d308c20464bf6b5705e27096859af01a4676a4ac664a3b72ec7201c000b3"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4c}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000005c0)={0x20, 0x0, 0x8, {0x200, 0x10, [0xf000]}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000000680)={0x40, 0xb, 0x2, "d5da"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000700)={0x40, 0x13, 0x6, @local}, &(0x7f0000000740)={0x40, 0x17, 0x6}, &(0x7f0000000780)={0x40, 0x19, 0x2, "57dc"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x52}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x1}}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1824.176556][ T1389] bond1572 (unregistering): (slave batadv1381): Releasing backup interface [ 1824.199522][ T1389] batadv1381 (unregistering): left promiscuous mode [ 1824.204636][ T1389] bond1572 (unregistering): Released all slaves [ 1824.210277][ T1389] bond1571 (unregistering): (slave batadv1380): Releasing backup interface [ 1824.261474][ T1389] batadv1380 (unregistering): left promiscuous mode [ 1824.270008][ T1389] bond1571 (unregistering): Released all slaves [ 1824.277745][ T1389] bond1570 (unregistering): (slave batadv1379): Releasing backup interface [ 1824.318250][ T1389] batadv1379 (unregistering): left promiscuous mode [ 1824.325153][ T1389] bond1570 (unregistering): Released all slaves [ 1824.329109][ T1389] bond1569 (unregistering): (slave batadv1378): Releasing backup interface [ 1824.378277][ T1389] batadv1378 (unregistering): left promiscuous mode [ 1824.382962][ T1389] bond1569 (unregistering): Released all slaves [ 1824.386643][ T1389] bond1568 (unregistering): (slave batadv1377): Releasing backup interface [ 1824.438202][ T1389] batadv1377 (unregistering): left promiscuous mode [ 1824.442879][ T1389] bond1568 (unregistering): Released all slaves [ 1824.446653][ T1389] bond1567 (unregistering): (slave batadv1376): Releasing backup interface [ 1824.509246][ T1389] batadv1376 (unregistering): left promiscuous mode [ 1824.513873][ T1389] bond1567 (unregistering): Released all slaves [ 1824.519772][ T1389] bond1566 (unregistering): (slave batadv1375): Releasing backup interface [ 1824.568636][ T1389] batadv1375 (unregistering): left promiscuous mode [ 1824.573460][ T1389] bond1566 (unregistering): Released all slaves [ 1824.577507][ T1389] bond1565 (unregistering): (slave batadv1374): Releasing backup interface [ 1824.607332][ T25] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1824.638204][ T1389] batadv1374 (unregistering): left promiscuous mode [ 1824.642797][ T1389] bond1565 (unregistering): Released all slaves [ 1824.646623][ T1389] bond1564 (unregistering): (slave batadv1373): Releasing backup interface [ 1824.708425][ T1389] batadv1373 (unregistering): left promiscuous mode [ 1824.712930][ T1389] bond1564 (unregistering): Released all slaves [ 1824.716737][ T1389] bond1563 (unregistering): (slave batadv1372): Releasing backup interface [ 1824.778188][ T1389] batadv1372 (unregistering): left promiscuous mode [ 1824.782907][ T1389] bond1563 (unregistering): Released all slaves [ 1824.786722][ T1389] bond1562 (unregistering): (slave batadv1371): Releasing backup interface [ 1824.849234][ T1389] batadv1371 (unregistering): left promiscuous mode [ 1824.854121][ T1389] bond1562 (unregistering): Released all slaves [ 1824.858680][ T1389] bond1561 (unregistering): (slave batadv1370): Releasing backup interface [ 1824.938730][ T1389] batadv1370 (unregistering): left promiscuous mode [ 1824.943814][ T1389] bond1561 (unregistering): Released all slaves [ 1824.950784][ T1389] bond1560 (unregistering): (slave batadv1369): Releasing backup interface [ 1824.967344][ T25] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1824.970601][ T25] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1824.998453][ T1389] batadv1369 (unregistering): left promiscuous mode [ 1825.003535][ T1389] bond1560 (unregistering): Released all slaves [ 1825.008529][ T1389] bond1559 (unregistering): (slave batadv1368): Releasing backup interface [ 1825.087406][ T25] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1825.091156][ T1389] batadv1368 (unregistering): left promiscuous mode [ 1825.093957][ T25] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1825.096287][ T25] usb 1-1: Manufacturer: syz [ 1825.097770][ T25] usb 1-1: SerialNumber: syz [ 1825.104300][ T1389] bond1559 (unregistering): Released all slaves [ 1825.109648][ T1389] bond1558 (unregistering): (slave batadv1367): Releasing backup interface [ 1825.158664][ T1389] batadv1367 (unregistering): left promiscuous mode [ 1825.163664][ T1389] bond1558 (unregistering): Released all slaves [ 1825.168977][ T1389] bond1557 (unregistering): (slave batadv1366): Releasing backup interface [ 1825.208463][ T1389] batadv1366 (unregistering): left promiscuous mode [ 1825.213158][ T1389] bond1557 (unregistering): Released all slaves [ 1825.217674][ T1389] bond1556 (unregistering): (slave batadv1365): Releasing backup interface [ 1825.258531][ T1389] batadv1365 (unregistering): left promiscuous mode [ 1825.263047][ T1389] bond1556 (unregistering): Released all slaves [ 1825.266887][ T1389] bond1555 (unregistering): (slave batadv1364): Releasing backup interface [ 1825.319347][ T1389] batadv1364 (unregistering): left promiscuous mode [ 1825.324285][ T1389] bond1555 (unregistering): Released all slaves [ 1825.328572][ T1389] bond1554 (unregistering): (slave batadv1363): Releasing backup interface [ 1825.358053][ T25] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 1825.360392][ T25] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input284 21:54:41 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eaf97240936901b0293df400100109021b000124a80080090400000103000000090587e3"], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0xffffffffffffffd3, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x20, 0x9, 0x8c, {0x8c, 0xe, "9b7f4a49335489c3966e266ddb9b6c740ab1d538cd5fbf8de1532930cf721198fe23b5bb9e076943db245ace290f61f8ae0db4c440c6231a5b7dcb8e601ec129d41f8257d30f25e6e8f6a612e97840b86980eba391352cfae8402b6f1107dcf13ce764d43945698d972564b95a1258b01941e5fbf4c313e6ad1d17c946178a1da989d0e5e40a6d0fadc7"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}, &(0x7f0000000100)={0x0, 0xf, 0x52, {0x5, 0xf, 0x52, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x88, 0x0, 0x63, 0x9, 0xff}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "35370607bf292d13d663e701d7ee0344"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x1, 0x3, 0x8}, @ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x4, 0x0, 0x9, [0x0, 0xc00f, 0xff0f, 0xffc0, 0xff000f, 0xff00f0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x80, 0x8, 0x20, "084731ed", "f7160357"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x2, 0x8, 0x2, 0xfd, 0xb2e, 0x8}}}, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0x0, 0xdb, "6c566ea5f714dc943c86b59e9ab9b479fa6e1bff7d42334aaca48ca89de599c2e798532989df73208fe864bfa0b085f2b35ec88bf09559bce79ddefa8f9a1165d1fa0414f25ce65fcc1bee59779f9beddc2e039859c6a1a7c0dfdb3b3add4df927be844f159d54f47192cf3c2b70794ecf4d42bc43ec4dda403fc7959c7bb15c56c6fdcb4f7193970efd820cb731da229a511ec8515b8fd20450e0758cc3e5ed9bf0786303d02eaba415b9652ef57017da868b80eb6416bf7b9e17fc8ba0a82b81ab33fdc5b096d522cfba3bc5bd8f31464859f622ad520a7dea85"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0xc0, 0x10, [0xf000]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x7e4}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "8598"}, &(0x7f0000000500)={0x40, 0xf, 0x2}, &(0x7f0000000540)={0x40, 0x13, 0x6, @local}, &(0x7f0000000580)={0x40, 0x17, 0x6, @random="97a3f8ebe461"}, &(0x7f00000005c0)={0x40, 0x19, 0x2, 'k3'}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0xd054}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x8}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io$hid(r0, &(0x7f0000000a80)={0x24, &(0x7f00000007c0)={0x20, 0xa, 0xfc, {0xfc, 0x31, "ca2d5821367ece91cda866ea0cee119ec54ed115c2c98149b129bace592f7bbc2b1dbbd7eaa57807ce86dfb2164d9cf10618256290d12c15a15db4cae1f347abfc726e584947e764ca8699a31ab58862d8bb8460617633409a3d0f4a26de7cd06862890d10b81c9b447ac51a3874fd11c1fd09fbc973add5b56a27e02b6c9e7b7ce52bc1baecad37b5bc393a3063b12e696b8bd686d35fd0c340707684ee2d96ad3670afe7031e381a251846321441d15442c5014a06ebec5eb3cd852c7e58e128f2891ee305e0874f66f8c21b91c33975c9559afa089ce5b3287e0a34c9767202eee36f71114a1a051a9ac6b7bf85ced13882e67e242218e120"}}, &(0x7f0000000900)={0x0, 0x3, 0xeb, @string={0xeb, 0x3, "ffa0b5b67a2477e381e51a77e31a1b213b53c59c7320b3c101db794cf292aad4ab60ade7253f4ba9f56940111e8ef9e000afdf7c8462db3bd1c4b524beada5e8ae57d8132a77822d12756e79a3235893e298d9a171f1a30e880b8b6575de5592d55b007909b0771388340ccfdf86514ff61e37afcbc954a46a7684b98dafd5efae6d17c306c619e5406cc467aaece29e789e17374a890c473d0aba0c19b0bc27961b055c043989a38e7c685629dcb2e49dae88bcfb30d26734f796c43043beb4e9fdd5eef8fe10b681c1818287c1f23ce7136f3ae31505b33391cc517dd5dbdedacc33958b20a9eb5e"}}, &(0x7f0000000a00)={0x0, 0x22, 0xc, {[@local, @global=@item_012={0x2, 0x1, 0xa, "f2de"}, @global=@item_012={0x2, 0x1, 0x8, "4f85"}, @global=@item_4={0x3, 0x1, 0x6, "4ecec664"}]}}, &(0x7f0000000a40)={0x0, 0x21, 0x9, {0x9, 0x21, 0xffff, 0x7f, 0x1, {0x22, 0xc7b}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000ac0)={0x40, 0x10, 0x6, "50b077168202"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000b80)={0x20, 0x1, 0x9d, "310e635792f91bd40b03a3eafb0aaa325e10f1fad7efbf34dc3071767263f0f358242d163bd232c0c5b1eedb280f010e7b13d90e9a71415c73f15537cfdb4cc7f6c7937954d7f32e879e218e489e338d9aeb0c6f8092707012c3a35e27cf391f0051a066be7a6dc93ecb8bb27d0759824cff3795ccb44c6eabaebdb1fda440d075e606d0b86cabe56cebe861adf45f6db9cc3e30f5cfc33d68efcb0781"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x33}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1825.380407][ T1389] batadv1363 (unregistering): left promiscuous mode [ 1825.394555][ T1389] bond1554 (unregistering): Released all slaves [ 1825.399334][ T1389] bond1553 (unregistering): (slave batadv1362): Releasing backup interface [ 1825.438852][ T1389] batadv1362 (unregistering): left promiscuous mode [ 1825.443519][ T1389] bond1553 (unregistering): Released all slaves [ 1825.447195][ T1389] bond1552 (unregistering): (slave batadv1361): Releasing backup interface [ 1825.480332][ T25] usb 1-1: USB disconnect, device number 91 [ 1825.497300][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -2 [ 1825.500310][ T1389] batadv1361 (unregistering): left promiscuous mode [ 1825.506463][ T1389] bond1552 (unregistering): Released all slaves [ 1825.510684][ T1389] bond1551 (unregistering): (slave batadv1360): Releasing backup interface [ 1825.549084][ T1389] batadv1360 (unregistering): left promiscuous mode [ 1825.559916][ T1389] bond1551 (unregistering): Released all slaves [ 1825.564637][ T1389] bond1550 (unregistering): (slave batadv1359): Releasing backup interface [ 1825.599801][ T1389] batadv1359 (unregistering): left promiscuous mode [ 1825.610225][ T1389] bond1550 (unregistering): Released all slaves [ 1825.618356][ T1389] bond1549 (unregistering): (slave batadv1358): Releasing backup interface [ 1825.668272][ T1389] batadv1358 (unregistering): left promiscuous mode [ 1825.678748][ T1389] bond1549 (unregistering): Released all slaves [ 1825.683626][ T1389] bond1548 (unregistering): Released all slaves [ 1825.688794][ T1389] bond1547 (unregistering): Released all slaves [ 1825.693497][ T1389] bond1546 (unregistering): Released all slaves [ 1825.699063][ T1389] bond1545 (unregistering): Released all slaves [ 1825.703727][ T1389] bond1544 (unregistering): Released all slaves [ 1825.708936][ T1389] bond1543 (unregistering): Released all slaves [ 1825.714601][ T1389] bond1542 (unregistering): Released all slaves [ 1825.720547][ T1389] bond1541 (unregistering): Released all slaves [ 1825.725208][ T1389] bond1540 (unregistering): Released all slaves [ 1825.730577][ T1389] bond1539 (unregistering): Released all slaves [ 1825.735376][ T1389] bond1538 (unregistering): Released all slaves [ 1825.741271][ T1389] bond1537 (unregistering): Released all slaves [ 1825.745907][ T1389] bond1536 (unregistering): Released all slaves [ 1825.751220][ T1389] bond1535 (unregistering): Released all slaves [ 1825.755847][ T1389] bond1534 (unregistering): Released all slaves [ 1825.762123][ T1389] bond1533 (unregistering): Released all slaves [ 1825.766743][ T1389] bond1532 (unregistering): Released all slaves [ 1825.775622][ T1389] bond1531 (unregistering): Released all slaves [ 1825.780543][ T1389] bond1530 (unregistering): Released all slaves [ 1825.785156][ T1389] bond1529 (unregistering): Released all slaves [ 1825.791557][ T1389] bond1528 (unregistering): Released all slaves [ 1825.796198][ T1389] bond1527 (unregistering): Released all slaves [ 1825.802397][ T1389] bond1526 (unregistering): Released all slaves [ 1825.807038][ T1389] bond1525 (unregistering): Released all slaves [ 1825.818550][ T1389] bond1524 (unregistering): Released all slaves [ 1825.823022][ T1389] bond1523 (unregistering): Released all slaves [ 1825.830062][ T1389] bond1522 (unregistering): Released all slaves [ 1825.834789][ T1389] bond1521 (unregistering): Released all slaves [ 1825.839698][ T1389] bond1520 (unregistering): Released all slaves [ 1825.844294][ T1389] bond1519 (unregistering): Released all slaves [ 1825.849515][ T1389] bond1518 (unregistering): Released all slaves [ 1825.859524][ T1389] bond1517 (unregistering): (slave batadv1357): Releasing backup interface [ 1825.888479][ T1389] batadv1357 (unregistering): left promiscuous mode [ 1825.893223][ T1389] bond1517 (unregistering): Released all slaves [ 1825.897790][ T1389] bond1516 (unregistering): (slave batadv1356): Releasing backup interface [ 1825.947313][ T25] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1825.950470][ T1389] batadv1356 (unregistering): left promiscuous mode [ 1825.956943][ T1389] bond1516 (unregistering): Released all slaves [ 1825.962588][ T1389] bond1515 (unregistering): Released all slaves [ 1825.966450][ T1389] bond1514 (unregistering): (slave batadv1355): Releasing backup interface [ 1826.008782][ T1389] batadv1355 (unregistering): left promiscuous mode [ 1826.014243][ T1389] bond1514 (unregistering): Released all slaves [ 1826.018896][ T1389] bond1513 (unregistering): (slave batadv1354): Releasing backup interface [ 1826.070110][ T1389] batadv1354 (unregistering): left promiscuous mode [ 1826.075729][ T1389] bond1513 (unregistering): Released all slaves [ 1826.081513][ T1389] bond1512 (unregistering): Released all slaves [ 1826.086806][ T1389] bond1511 (unregistering): Released all slaves [ 1826.092270][ T1389] bond1510 (unregistering): Released all slaves [ 1826.097640][ T1389] bond1509 (unregistering): Released all slaves [ 1826.102817][ T1389] bond1508 (unregistering): Released all slaves [ 1826.108773][ T1389] bond1507 (unregistering): Released all slaves [ 1826.114754][ T1389] bond1506 (unregistering): Released all slaves [ 1826.120338][ T1389] bond1505 (unregistering): Released all slaves [ 1826.125363][ T1389] bond1504 (unregistering): Released all slaves [ 1826.131138][ T1389] bond1503 (unregistering): Released all slaves [ 1826.136129][ T1389] bond1502 (unregistering): Released all slaves [ 1826.141553][ T1389] bond1501 (unregistering): Released all slaves [ 1826.146536][ T1389] bond1500 (unregistering): Released all slaves [ 1826.156504][ T1389] bond1499 (unregistering): Released all slaves [ 1826.164498][ T1389] bond1498 (unregistering): Released all slaves [ 1826.170269][ T1389] bond1497 (unregistering): Released all slaves [ 1826.175176][ T1389] bond1496 (unregistering): Released all slaves [ 1826.180541][ T1389] bond1495 (unregistering): Released all slaves [ 1826.185267][ T1389] bond1494 (unregistering): (slave batadv1352): Releasing backup interface [ 1826.218382][ T1389] batadv1352 (unregistering): left promiscuous mode [ 1826.222978][ T1389] bond1494 (unregistering): Released all slaves [ 1826.226705][ T1389] bond1493 (unregistering): (slave batadv1351): Releasing backup interface [ 1826.268588][ T1389] batadv1351 (unregistering): left promiscuous mode [ 1826.273493][ T1389] bond1493 (unregistering): Released all slaves [ 1826.280023][ T1389] bond1492 (unregistering): (slave batadv1350): Releasing backup interface [ 1826.317718][ T25] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1826.320655][ T25] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1826.328649][ T1389] batadv1350 (unregistering): left promiscuous mode [ 1826.333839][ T1389] bond1492 (unregistering): Released all slaves [ 1826.338368][ T1389] bond1491 (unregistering): (slave batadv1349): Releasing backup interface [ 1826.378252][ T1389] batadv1349 (unregistering): left promiscuous mode [ 1826.382984][ T1389] bond1491 (unregistering): Released all slaves [ 1826.387070][ T1389] bond1490 (unregistering): (slave batadv1348): Releasing backup interface [ 1826.438235][ T1389] batadv1348 (unregistering): left promiscuous mode [ 1826.443056][ T1389] bond1490 (unregistering): Released all slaves [ 1826.447188][ T1389] bond1489 (unregistering): (slave batadv1347): Releasing backup interface [ 1826.449787][ T25] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1826.452680][ T25] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1826.454977][ T25] usb 1-1: Manufacturer: syz [ 1826.456240][ T25] usb 1-1: SerialNumber: syz [ 1826.498262][ T1389] batadv1347 (unregistering): left promiscuous mode [ 1826.503119][ T1389] bond1489 (unregistering): Released all slaves [ 1826.506995][ T1389] bond1488 (unregistering): (slave batadv1346): Releasing backup interface [ 1826.549180][ T1389] batadv1346 (unregistering): left promiscuous mode [ 1826.553927][ T1389] bond1488 (unregistering): Released all slaves [ 1826.558161][ T1389] bond1487 (unregistering): (slave batadv1345): Releasing backup interface [ 1826.618803][ T1389] batadv1345 (unregistering): left promiscuous mode [ 1826.623511][ T1389] bond1487 (unregistering): Released all slaves [ 1826.627577][ T1389] bond1486 (unregistering): (slave batadv1344): Releasing backup interface [ 1826.688493][ T1389] batadv1344 (unregistering): left promiscuous mode [ 1826.693201][ T1389] bond1486 (unregistering): Released all slaves [ 1826.698361][ T1389] bond1485 (unregistering): (slave batadv1343): Releasing backup interface [ 1826.778455][ T1389] batadv1343 (unregistering): left promiscuous mode [ 1826.790104][ T1389] bond1485 (unregistering): Released all slaves [ 1826.798405][ T1389] bond1484 (unregistering): (slave batadv1342): Releasing backup interface [ 1826.828270][ T1389] batadv1342 (unregistering): left promiscuous mode [ 1826.836453][ T1389] bond1484 (unregistering): Released all slaves [ 1826.843319][ T1389] bond1483 (unregistering): (slave batadv1341): Releasing backup interface [ 1826.888264][ T1389] batadv1341 (unregistering): left promiscuous mode [ 1826.892985][ T1389] bond1483 (unregistering): Released all slaves [ 1826.896940][ T1389] bond1482 (unregistering): (slave batadv1340): Releasing backup interface [ 1826.958264][ T1389] batadv1340 (unregistering): left promiscuous mode [ 1826.963055][ T1389] bond1482 (unregistering): Released all slaves [ 1826.967138][ T1389] bond1481 (unregistering): (slave batadv1339): Releasing backup interface [ 1827.018234][ T1389] batadv1339 (unregistering): left promiscuous mode [ 1827.023646][ T1389] bond1481 (unregistering): Released all slaves [ 1827.028673][ T1389] bond1480 (unregistering): (slave batadv1338): Releasing backup interface [ 1827.078247][ T1389] batadv1338 (unregistering): left promiscuous mode [ 1827.083014][ T1389] bond1480 (unregistering): Released all slaves [ 1827.086843][ T1389] bond1479 (unregistering): (slave batadv1337): Releasing backup interface [ 1827.128387][ T1389] batadv1337 (unregistering): left promiscuous mode [ 1827.135585][ T1389] bond1479 (unregistering): Released all slaves [ 1827.140902][ T1389] bond1478 (unregistering): (slave batadv1336): Releasing backup interface [ 1827.189332][ T1389] batadv1336 (unregistering): left promiscuous mode [ 1827.194163][ T1389] bond1478 (unregistering): Released all slaves [ 1827.198508][ T1389] bond1477 (unregistering): (slave batadv1335): Releasing backup interface [ 1827.248299][ T1389] batadv1335 (unregistering): left promiscuous mode [ 1827.253204][ T1389] bond1477 (unregistering): Released all slaves [ 1827.257189][ T1389] bond1476 (unregistering): (slave batadv1334): Releasing backup interface [ 1827.298342][ T1389] batadv1334 (unregistering): left promiscuous mode [ 1827.304077][ T1389] bond1476 (unregistering): Released all slaves [ 1827.308337][ T1389] bond1475 (unregistering): (slave batadv1333): Releasing backup interface [ 1827.368273][ T1389] batadv1333 (unregistering): left promiscuous mode [ 1827.372902][ T1389] bond1475 (unregistering): Released all slaves [ 1827.376723][ T1389] bond1474 (unregistering): (slave batadv1332): Releasing backup interface [ 1827.428200][ T1389] batadv1332 (unregistering): left promiscuous mode [ 1827.438972][ T1389] bond1474 (unregistering): Released all slaves [ 1827.442684][ T1389] bond1473 (unregistering): (slave batadv1331): Releasing backup interface [ 1827.508511][ T1389] batadv1331 (unregistering): left promiscuous mode 21:54:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0xc3ffffff}, 0x0) [ 1827.513644][ T1389] bond1473 (unregistering): Released all slaves [ 1827.518561][ T1389] bond1472 (unregistering): (slave batadv1330): Releasing backup interface 21:54:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000858600effffe0100000000000000", @ANYRES32=r2, @ANYBLOB="0001004c000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) [ 1827.602661][ T1389] batadv1330 (unregistering): left promiscuous mode [ 1827.614349][ T1389] bond1472 (unregistering): Released all slaves [ 1827.622269][ T1389] bond1471 (unregistering): (slave batadv1329): Releasing backup interface [ 1827.668510][ T1389] batadv1329 (unregistering): left promiscuous mode [ 1827.678535][ T1389] bond1471 (unregistering): Released all slaves [ 1827.685850][ T1389] bond1470 (unregistering): (slave batadv1328): Releasing backup interface [ 1827.729557][ T1389] batadv1328 (unregistering): left promiscuous mode [ 1827.739820][ T1389] bond1470 (unregistering): Released all slaves [ 1827.747814][ T1389] bond1469 (unregistering): (slave batadv1327): Releasing backup interface [ 1827.788589][ T1389] batadv1327 (unregistering): left promiscuous mode [ 1827.798388][ T1389] bond1469 (unregistering): Released all slaves [ 1827.806732][ T1389] bond1468 (unregistering): (slave batadv1326): Releasing backup interface [ 1827.848500][ T1389] batadv1326 (unregistering): left promiscuous mode [ 1827.867936][ T1389] bond1468 (unregistering): Released all slaves [ 1827.872021][ T1389] bond1467 (unregistering): (slave batadv1325): Releasing backup interface 21:54:43 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eaf97240936901b0293df400100109021b000124a80080090400000103000000090587e3"], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0xffffffffffffffd3, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) (rerun: 64) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x20, 0x9, 0x8c, {0x8c, 0xe, "9b7f4a49335489c3966e266ddb9b6c740ab1d538cd5fbf8de1532930cf721198fe23b5bb9e076943db245ace290f61f8ae0db4c440c6231a5b7dcb8e601ec129d41f8257d30f25e6e8f6a612e97840b86980eba391352cfae8402b6f1107dcf13ce764d43945698d972564b95a1258b01941e5fbf4c313e6ad1d17c946178a1da989d0e5e40a6d0fadc7"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}, &(0x7f0000000100)={0x0, 0xf, 0x52, {0x5, 0xf, 0x52, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x88, 0x0, 0x63, 0x9, 0xff}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "35370607bf292d13d663e701d7ee0344"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x1, 0x3, 0x8}, @ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x4, 0x0, 0x9, [0x0, 0xc00f, 0xff0f, 0xffc0, 0xff000f, 0xff00f0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x80, 0x8, 0x20, "084731ed", "f7160357"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x2, 0x8, 0x2, 0xfd, 0xb2e, 0x8}}}, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0x0, 0xdb, "6c566ea5f714dc943c86b59e9ab9b479fa6e1bff7d42334aaca48ca89de599c2e798532989df73208fe864bfa0b085f2b35ec88bf09559bce79ddefa8f9a1165d1fa0414f25ce65fcc1bee59779f9beddc2e039859c6a1a7c0dfdb3b3add4df927be844f159d54f47192cf3c2b70794ecf4d42bc43ec4dda403fc7959c7bb15c56c6fdcb4f7193970efd820cb731da229a511ec8515b8fd20450e0758cc3e5ed9bf0786303d02eaba415b9652ef57017da868b80eb6416bf7b9e17fc8ba0a82b81ab33fdc5b096d522cfba3bc5bd8f31464859f622ad520a7dea85"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0xc0, 0x10, [0xf000]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x7e4}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "8598"}, &(0x7f0000000500)={0x40, 0xf, 0x2}, &(0x7f0000000540)={0x40, 0x13, 0x6, @local}, &(0x7f0000000580)={0x40, 0x17, 0x6, @random="97a3f8ebe461"}, &(0x7f00000005c0)={0x40, 0x19, 0x2, 'k3'}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0xd054}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x8}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x9}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000a80)={0x24, &(0x7f00000007c0)={0x20, 0xa, 0xfc, {0xfc, 0x31, "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"}}, &(0x7f0000000900)={0x0, 0x3, 0xeb, @string={0xeb, 0x3, "ffa0b5b67a2477e381e51a77e31a1b213b53c59c7320b3c101db794cf292aad4ab60ade7253f4ba9f56940111e8ef9e000afdf7c8462db3bd1c4b524beada5e8ae57d8132a77822d12756e79a3235893e298d9a171f1a30e880b8b6575de5592d55b007909b0771388340ccfdf86514ff61e37afcbc954a46a7684b98dafd5efae6d17c306c619e5406cc467aaece29e789e17374a890c473d0aba0c19b0bc27961b055c043989a38e7c685629dcb2e49dae88bcfb30d26734f796c43043beb4e9fdd5eef8fe10b681c1818287c1f23ce7136f3ae31505b33391cc517dd5dbdedacc33958b20a9eb5e"}}, &(0x7f0000000a00)={0x0, 0x22, 0xc, {[@local, @global=@item_012={0x2, 0x1, 0xa, "f2de"}, @global=@item_012={0x2, 0x1, 0x8, "4f85"}, @global=@item_4={0x3, 0x1, 0x6, "4ecec664"}]}}, &(0x7f0000000a40)={0x0, 0x21, 0x9, {0x9, 0x21, 0xffff, 0x7f, 0x1, {0x22, 0xc7b}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000ac0)={0x40, 0x10, 0x6, "50b077168202"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000b80)={0x20, 0x1, 0x9d, "310e635792f91bd40b03a3eafb0aaa325e10f1fad7efbf34dc3071767263f0f358242d163bd232c0c5b1eedb280f010e7b13d90e9a71415c73f15537cfdb4cc7f6c7937954d7f32e879e218e489e338d9aeb0c6f8092707012c3a35e27cf391f0051a066be7a6dc93ecb8bb27d0759824cff3795ccb44c6eabaebdb1fda440d075e606d0b86cabe56cebe861adf45f6db9cc3e30f5cfc33d68efcb0781"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x33}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1827.910213][ T25] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 1827.912334][ T25] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input285 [ 1827.940413][ T1389] batadv1325 (unregistering): left promiscuous mode [ 1827.946202][ T1389] bond1467 (unregistering): Released all slaves [ 1827.959441][ T1389] bond1466 (unregistering): (slave batadv1324): Releasing backup interface [ 1827.998414][ T1389] batadv1324 (unregistering): left promiscuous mode [ 1828.002960][ T1389] bond1466 (unregistering): Released all slaves [ 1828.017941][ T25] usb 1-1: USB disconnect, device number 92 [ 1828.019983][ T1389] bond1465 (unregistering): (slave batadv1323): Releasing backup interface [ 1828.027297][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -2 [ 1828.049964][ T1389] batadv1323 (unregistering): left promiscuous mode [ 1828.055813][ T1389] bond1465 (unregistering): Released all slaves [ 1828.069452][ T1389] bond1464 (unregistering): (slave batadv1322): Releasing backup interface [ 1828.111584][ T1389] batadv1322 (unregistering): left promiscuous mode [ 1828.120784][ T1389] bond1464 (unregistering): Released all slaves [ 1828.127423][ T1389] bond1463 (unregistering): (slave batadv1321): Releasing backup interface [ 1828.176000][ T1389] batadv1321 (unregistering): left promiscuous mode [ 1828.180675][ T1389] bond1463 (unregistering): Released all slaves [ 1828.187886][ T1389] bond1462 (unregistering): (slave batadv1320): Releasing backup interface [ 1828.238377][ T1389] batadv1320 (unregistering): left promiscuous mode [ 1828.243321][ T1389] bond1462 (unregistering): Released all slaves [ 1828.259402][ T1389] bond1461 (unregistering): (slave batadv1319): Releasing backup interface [ 1828.298336][ T1389] batadv1319 (unregistering): left promiscuous mode [ 1828.304654][ T1389] bond1461 (unregistering): Released all slaves [ 1828.310472][ T1389] bond1460 (unregistering): (slave batadv1318): Releasing backup interface [ 1828.368546][ T1389] batadv1318 (unregistering): left promiscuous mode [ 1828.378890][ T1389] bond1460 (unregistering): Released all slaves [ 1828.390826][ T1389] bond1459 (unregistering): (slave batadv1317): Releasing backup interface [ 1828.438520][ T1389] batadv1317 (unregistering): left promiscuous mode [ 1828.443340][ T1389] bond1459 (unregistering): Released all slaves [ 1828.448072][ T1389] bond1458 (unregistering): (slave batadv1316): Releasing backup interface [ 1828.467326][ T25] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1828.499261][ T1389] batadv1316 (unregistering): left promiscuous mode [ 1828.503761][ T1389] bond1458 (unregistering): Released all slaves [ 1828.507421][ T1389] bond1457 (unregistering): (slave batadv1315): Releasing backup interface [ 1828.548338][ T1389] batadv1315 (unregistering): left promiscuous mode [ 1828.552829][ T1389] bond1457 (unregistering): Released all slaves [ 1828.556629][ T1389] bond1456 (unregistering): (slave batadv1314): Releasing backup interface [ 1828.608156][ T1389] batadv1314 (unregistering): left promiscuous mode [ 1828.612806][ T1389] bond1456 (unregistering): Released all slaves [ 1828.616538][ T1389] bond1455 (unregistering): (slave batadv1313): Releasing backup interface [ 1828.698110][ T1389] batadv1313 (unregistering): left promiscuous mode [ 1828.702659][ T1389] bond1455 (unregistering): Released all slaves [ 1828.706430][ T1389] bond1454 (unregistering): (slave batadv1312): Releasing backup interface [ 1828.758276][ T1389] batadv1312 (unregistering): left promiscuous mode [ 1828.762703][ T1389] bond1454 (unregistering): Released all slaves [ 1828.766214][ T1389] bond1453 (unregistering): (slave batadv1311): Releasing backup interface [ 1828.828201][ T1389] batadv1311 (unregistering): left promiscuous mode [ 1828.832794][ T1389] bond1453 (unregistering): Released all slaves [ 1828.836629][ T1389] bond1452 (unregistering): (slave batadv1310): Releasing backup interface [ 1828.867425][ T25] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1828.870287][ T25] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1828.888474][ T1389] batadv1310 (unregistering): left promiscuous mode [ 1828.893017][ T1389] bond1452 (unregistering): Released all slaves [ 1828.896575][ T1389] bond1451 (unregistering): (slave batadv1309): Releasing backup interface [ 1828.948514][ T1389] batadv1309 (unregistering): left promiscuous mode [ 1828.954091][ T1389] bond1451 (unregistering): Released all slaves [ 1828.960407][ T1389] bond1450 (unregistering): (slave batadv1308): Releasing backup interface [ 1828.987470][ T25] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1828.989803][ T25] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1828.991935][ T25] usb 1-1: Manufacturer: syz [ 1828.993112][ T25] usb 1-1: SerialNumber: syz [ 1829.008191][ T1389] batadv1308 (unregistering): left promiscuous mode [ 1829.012810][ T1389] bond1450 (unregistering): Released all slaves [ 1829.016401][ T1389] bond1449 (unregistering): (slave batadv1307): Releasing backup interface [ 1829.048350][ T1389] batadv1307 (unregistering): left promiscuous mode [ 1829.058663][ T1389] bond1449 (unregistering): Released all slaves [ 1829.064760][ T1389] bond1448 (unregistering): (slave batadv1306): Releasing backup interface [ 1829.108446][ T1389] batadv1306 (unregistering): left promiscuous mode [ 1829.116691][ T1389] bond1448 (unregistering): Released all slaves [ 1829.124057][ T1389] bond1447 (unregistering): (slave batadv1305): Releasing backup interface [ 1829.168097][ T1389] batadv1305 (unregistering): left promiscuous mode [ 1829.168292][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1829.172687][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1829.175292][ T1389] bond1447 (unregistering): Released all slaves [ 1829.175301][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1829.179680][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1829.181762][ T50] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1829.183657][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1829.185679][ T1389] bond1446 (unregistering): (slave batadv1304): Releasing backup interface [ 1829.239255][ T1389] batadv1304 (unregistering): left promiscuous mode [ 1829.245803][ T1389] bond1446 (unregistering): Released all slaves [ 1829.253034][ T1389] bond1445 (unregistering): (slave batadv1303): Releasing backup interface [ 1829.288249][ T1389] batadv1303 (unregistering): left promiscuous mode [ 1829.292737][ T1389] bond1445 (unregistering): Released all slaves [ 1829.298011][ T1389] bond1444 (unregistering): (slave batadv1302): Releasing backup interface [ 1829.358417][ T1389] batadv1302 (unregistering): left promiscuous mode [ 1829.363231][ T1389] bond1444 (unregistering): Released all slaves [ 1829.366976][ T1389] bond1443 (unregistering): (slave batadv1301): Releasing backup interface [ 1829.418329][ T1389] batadv1301 (unregistering): left promiscuous mode [ 1829.423224][ T1389] bond1443 (unregistering): Released all slaves [ 1829.426930][ T1389] bond1442 (unregistering): (slave batadv1300): Releasing backup interface [ 1829.478122][ T1389] batadv1300 (unregistering): left promiscuous mode [ 1829.489107][ T1389] bond1442 (unregistering): Released all slaves [ 1829.498491][ T1389] bond1441 (unregistering): (slave batadv1299): Releasing backup interface [ 1829.548453][ T1389] batadv1299 (unregistering): left promiscuous mode [ 1829.561351][ T1389] bond1441 (unregistering): Released all slaves [ 1829.565375][ T1389] bond1440 (unregistering): (slave batadv1298): Releasing backup interface [ 1829.568150][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1829.570161][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1829.572077][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1829.574257][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1829.576232][ T50] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1829.578385][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1829.598276][ T1389] batadv1298 (unregistering): left promiscuous mode [ 1829.606166][ T1389] bond1440 (unregistering): Released all slaves [ 1829.609999][ T1389] bond1439 (unregistering): (slave batadv1297): Releasing backup interface [ 1829.638296][ T1389] batadv1297 (unregistering): left promiscuous mode [ 1829.642823][ T1389] bond1439 (unregistering): Released all slaves [ 1829.648522][ T1389] bond1438 (unregistering): (slave batadv1296): Releasing backup interface [ 1829.708131][ T1389] batadv1296 (unregistering): left promiscuous mode [ 1829.712538][ T1389] bond1438 (unregistering): Released all slaves [ 1829.716258][ T1389] bond1437 (unregistering): (slave batadv1295): Releasing backup interface [ 1829.759700][ T1389] batadv1295 (unregistering): left promiscuous mode [ 1829.764574][ T1389] bond1437 (unregistering): Released all slaves [ 1829.773119][ T1389] bond1436 (unregistering): (slave batadv1294): Releasing backup interface [ 1829.818312][ T1389] batadv1294 (unregistering): left promiscuous mode [ 1829.823041][ T1389] bond1436 (unregistering): Released all slaves [ 1829.826981][ T1389] bond1435 (unregistering): (slave batadv1293): Releasing backup interface [ 1829.878516][ T1389] batadv1293 (unregistering): left promiscuous mode [ 1829.883204][ T1389] bond1435 (unregistering): Released all slaves [ 1829.887082][ T1389] bond1434 (unregistering): (slave batadv1292): Releasing backup interface [ 1829.938376][ T1389] batadv1292 (unregistering): left promiscuous mode [ 1829.946824][ T1389] bond1434 (unregistering): Released all slaves [ 1829.954637][ T1389] bond1433 (unregistering): (slave batadv1291): Releasing backup interface 21:54:45 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eaf97240936901b0293df400100109021b000124a80080090400000103000000090587e3"], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0xffffffffffffffd3, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x20, 0x9, 0x8c, {0x8c, 0xe, "9b7f4a49335489c3966e266ddb9b6c740ab1d538cd5fbf8de1532930cf721198fe23b5bb9e076943db245ace290f61f8ae0db4c440c6231a5b7dcb8e601ec129d41f8257d30f25e6e8f6a612e97840b86980eba391352cfae8402b6f1107dcf13ce764d43945698d972564b95a1258b01941e5fbf4c313e6ad1d17c946178a1da989d0e5e40a6d0fadc7"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}, &(0x7f0000000100)={0x0, 0xf, 0x52, {0x5, 0xf, 0x52, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x88, 0x0, 0x63, 0x9, 0xff}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "35370607bf292d13d663e701d7ee0344"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x1, 0x3, 0x8}, @ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x4, 0x0, 0x9, [0x0, 0xc00f, 0xff0f, 0xffc0, 0xff000f, 0xff00f0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x80, 0x8, 0x20, "084731ed", "f7160357"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x2, 0x8, 0x2, 0xfd, 0xb2e, 0x8}}}, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0x0, 0xdb, "6c566ea5f714dc943c86b59e9ab9b479fa6e1bff7d42334aaca48ca89de599c2e798532989df73208fe864bfa0b085f2b35ec88bf09559bce79ddefa8f9a1165d1fa0414f25ce65fcc1bee59779f9beddc2e039859c6a1a7c0dfdb3b3add4df927be844f159d54f47192cf3c2b70794ecf4d42bc43ec4dda403fc7959c7bb15c56c6fdcb4f7193970efd820cb731da229a511ec8515b8fd20450e0758cc3e5ed9bf0786303d02eaba415b9652ef57017da868b80eb6416bf7b9e17fc8ba0a82b81ab33fdc5b096d522cfba3bc5bd8f31464859f622ad520a7dea85"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0xc0, 0x10, [0xf000]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x7e4}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "8598"}, &(0x7f0000000500)={0x40, 0xf, 0x2}, &(0x7f0000000540)={0x40, 0x13, 0x6, @local}, &(0x7f0000000580)={0x40, 0x17, 0x6, @random="97a3f8ebe461"}, &(0x7f00000005c0)={0x40, 0x19, 0x2, 'k3'}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0xd054}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x8}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io$hid(r0, &(0x7f0000000a80)={0x24, &(0x7f00000007c0)={0x20, 0xa, 0xfc, {0xfc, 0x31, "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"}}, &(0x7f0000000900)={0x0, 0x3, 0xeb, @string={0xeb, 0x3, "ffa0b5b67a2477e381e51a77e31a1b213b53c59c7320b3c101db794cf292aad4ab60ade7253f4ba9f56940111e8ef9e000afdf7c8462db3bd1c4b524beada5e8ae57d8132a77822d12756e79a3235893e298d9a171f1a30e880b8b6575de5592d55b007909b0771388340ccfdf86514ff61e37afcbc954a46a7684b98dafd5efae6d17c306c619e5406cc467aaece29e789e17374a890c473d0aba0c19b0bc27961b055c043989a38e7c685629dcb2e49dae88bcfb30d26734f796c43043beb4e9fdd5eef8fe10b681c1818287c1f23ce7136f3ae31505b33391cc517dd5dbdedacc33958b20a9eb5e"}}, &(0x7f0000000a00)={0x0, 0x22, 0xc, {[@local, @global=@item_012={0x2, 0x1, 0xa, "f2de"}, @global=@item_012={0x2, 0x1, 0x8, "4f85"}, @global=@item_4={0x3, 0x1, 0x6, "4ecec664"}]}}, &(0x7f0000000a40)={0x0, 0x21, 0x9, {0x9, 0x21, 0xffff, 0x7f, 0x1, {0x22, 0xc7b}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000ac0)={0x40, 0x10, 0x6, "50b077168202"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000b80)={0x20, 0x1, 0x9d, "310e635792f91bd40b03a3eafb0aaa325e10f1fad7efbf34dc3071767263f0f358242d163bd232c0c5b1eedb280f010e7b13d90e9a71415c73f15537cfdb4cc7f6c7937954d7f32e879e218e489e338d9aeb0c6f8092707012c3a35e27cf391f0051a066be7a6dc93ecb8bb27d0759824cff3795ccb44c6eabaebdb1fda440d075e606d0b86cabe56cebe861adf45f6db9cc3e30f5cfc33d68efcb0781"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x33}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eaf97240936901b0293df400100109021b000124a80080090400000103000000090587e3"], 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001d00)={0xffffffffffffffd3, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x20, 0x9, 0x8c, {0x8c, 0xe, "9b7f4a49335489c3966e266ddb9b6c740ab1d538cd5fbf8de1532930cf721198fe23b5bb9e076943db245ace290f61f8ae0db4c440c6231a5b7dcb8e601ec129d41f8257d30f25e6e8f6a612e97840b86980eba391352cfae8402b6f1107dcf13ce764d43945698d972564b95a1258b01941e5fbf4c313e6ad1d17c946178a1da989d0e5e40a6d0fadc7"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}, &(0x7f0000000100)={0x0, 0xf, 0x52, {0x5, 0xf, 0x52, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x88, 0x0, 0x63, 0x9, 0xff}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "35370607bf292d13d663e701d7ee0344"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x1, 0x3, 0x8}, @ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x4, 0x0, 0x9, [0x0, 0xc00f, 0xff0f, 0xffc0, 0xff000f, 0xff00f0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x80, 0x8, 0x20, "084731ed", "f7160357"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x2, 0x8, 0x2, 0xfd, 0xb2e, 0x8}}}, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0x0, 0xdb, "6c566ea5f714dc943c86b59e9ab9b479fa6e1bff7d42334aaca48ca89de599c2e798532989df73208fe864bfa0b085f2b35ec88bf09559bce79ddefa8f9a1165d1fa0414f25ce65fcc1bee59779f9beddc2e039859c6a1a7c0dfdb3b3add4df927be844f159d54f47192cf3c2b70794ecf4d42bc43ec4dda403fc7959c7bb15c56c6fdcb4f7193970efd820cb731da229a511ec8515b8fd20450e0758cc3e5ed9bf0786303d02eaba415b9652ef57017da868b80eb6416bf7b9e17fc8ba0a82b81ab33fdc5b096d522cfba3bc5bd8f31464859f622ad520a7dea85"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0xc0, 0x10, [0xf000]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x7e4}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "8598"}, &(0x7f0000000500)={0x40, 0xf, 0x2}, &(0x7f0000000540)={0x40, 0x13, 0x6, @local}, &(0x7f0000000580)={0x40, 0x17, 0x6, @random="97a3f8ebe461"}, &(0x7f00000005c0)={0x40, 0x19, 0x2, 'k3'}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0xd054}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x8}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x9}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000a80)={0x24, &(0x7f00000007c0)={0x20, 0xa, 0xfc, {0xfc, 0x31, "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"}}, &(0x7f0000000900)={0x0, 0x3, 0xeb, @string={0xeb, 0x3, "ffa0b5b67a2477e381e51a77e31a1b213b53c59c7320b3c101db794cf292aad4ab60ade7253f4ba9f56940111e8ef9e000afdf7c8462db3bd1c4b524beada5e8ae57d8132a77822d12756e79a3235893e298d9a171f1a30e880b8b6575de5592d55b007909b0771388340ccfdf86514ff61e37afcbc954a46a7684b98dafd5efae6d17c306c619e5406cc467aaece29e789e17374a890c473d0aba0c19b0bc27961b055c043989a38e7c685629dcb2e49dae88bcfb30d26734f796c43043beb4e9fdd5eef8fe10b681c1818287c1f23ce7136f3ae31505b33391cc517dd5dbdedacc33958b20a9eb5e"}}, &(0x7f0000000a00)={0x0, 0x22, 0xc, {[@local, @global=@item_012={0x2, 0x1, 0xa, "f2de"}, @global=@item_012={0x2, 0x1, 0x8, "4f85"}, @global=@item_4={0x3, 0x1, 0x6, "4ecec664"}]}}, &(0x7f0000000a40)={0x0, 0x21, 0x9, {0x9, 0x21, 0xffff, 0x7f, 0x1, {0x22, 0xc7b}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000ac0)={0x40, 0x10, 0x6, "50b077168202"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000b80)={0x20, 0x1, 0x9d, "310e635792f91bd40b03a3eafb0aaa325e10f1fad7efbf34dc3071767263f0f358242d163bd232c0c5b1eedb280f010e7b13d90e9a71415c73f15537cfdb4cc7f6c7937954d7f32e879e218e489e338d9aeb0c6f8092707012c3a35e27cf391f0051a066be7a6dc93ecb8bb27d0759824cff3795ccb44c6eabaebdb1fda440d075e606d0b86cabe56cebe861adf45f6db9cc3e30f5cfc33d68efcb0781"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x33}}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) [ 1829.989573][ T1389] batadv1291 (unregistering): left promiscuous mode [ 1829.995110][ T1389] bond1433 (unregistering): Released all slaves [ 1829.998794][ T25] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 1830.002692][ T25] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input286 [ 1830.005704][ T1389] bond1432 (unregistering): (slave batadv1290): Releasing backup interface [ 1830.048197][ T1389] batadv1290 (unregistering): left promiscuous mode [ 1830.052791][ T1389] bond1432 (unregistering): Released all slaves [ 1830.056705][ T1389] bond1431 (unregistering): (slave batadv1289): Releasing backup interface [ 1830.108071][ T1389] batadv1289 (unregistering): left promiscuous mode [ 1830.112481][ T1389] bond1431 (unregistering): Released all slaves [ 1830.116233][ T1389] bond1430 (unregistering): (slave batadv1288): Releasing backup interface [ 1830.119877][ T25] usb 1-1: USB disconnect, device number 93 [ 1830.137273][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -2 [ 1830.170483][ T1389] batadv1288 (unregistering): left promiscuous mode [ 1830.175140][ T1389] bond1430 (unregistering): Released all slaves [ 1830.179365][ T1389] bond1429 (unregistering): (slave batadv1287): Releasing backup interface [ 1830.238550][ T1389] batadv1287 (unregistering): left promiscuous mode [ 1830.243128][ T1389] bond1429 (unregistering): Released all slaves [ 1830.246939][ T1389] bond1428 (unregistering): (slave batadv1286): Releasing backup interface [ 1830.278318][ T1389] batadv1286 (unregistering): left promiscuous mode [ 1830.283975][ T1389] bond1428 (unregistering): Released all slaves [ 1830.288017][ T1389] bond1427 (unregistering): (slave batadv1285): Releasing backup interface [ 1830.348173][ T1389] batadv1285 (unregistering): left promiscuous mode [ 1830.352810][ T1389] bond1427 (unregistering): Released all slaves [ 1830.356841][ T1389] bond1426 (unregistering): (slave batadv1284): Releasing backup interface [ 1830.409102][ T1389] batadv1284 (unregistering): left promiscuous mode [ 1830.413946][ T1389] bond1426 (unregistering): Released all slaves [ 1830.418060][ T1389] bond1425 (unregistering): (slave batadv1283): Releasing backup interface [ 1830.458622][ T1389] batadv1283 (unregistering): left promiscuous mode [ 1830.463548][ T1389] bond1425 (unregistering): Released all slaves [ 1830.467737][ T1389] bond1424 (unregistering): (slave batadv1282): Releasing backup interface [ 1830.529450][ T1389] batadv1282 (unregistering): left promiscuous mode [ 1830.533989][ T1389] bond1424 (unregistering): Released all slaves [ 1830.538431][ T1389] bond1423 (unregistering): (slave batadv1281): Releasing backup interface [ 1830.598272][ T1389] batadv1281 (unregistering): left promiscuous mode [ 1830.602810][ T1389] bond1423 (unregistering): Released all slaves [ 1830.606552][ T1389] bond1422 (unregistering): (slave batadv1280): Releasing backup interface [ 1830.609760][ T25] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1830.648185][ T1389] batadv1280 (unregistering): left promiscuous mode [ 1830.652685][ T1389] bond1422 (unregistering): Released all slaves [ 1830.656104][ T1389] bond1421 (unregistering): (slave batadv1279): Releasing backup interface [ 1830.708167][ T1389] batadv1279 (unregistering): left promiscuous mode [ 1830.712641][ T1389] bond1421 (unregistering): Released all slaves [ 1830.716672][ T1389] bond1420 (unregistering): (slave batadv1278): Releasing backup interface [ 1830.769984][ T1389] batadv1278 (unregistering): left promiscuous mode [ 1830.774582][ T1389] bond1420 (unregistering): Released all slaves [ 1830.778919][ T1389] bond1419 (unregistering): (slave batadv1277): Releasing backup interface [ 1830.828269][ T1389] batadv1277 (unregistering): left promiscuous mode [ 1830.832821][ T1389] bond1419 (unregistering): Released all slaves [ 1830.836521][ T1389] bond1418 (unregistering): (slave batadv1276): Releasing backup interface [ 1830.898234][ T1389] batadv1276 (unregistering): left promiscuous mode [ 1830.902624][ T1389] bond1418 (unregistering): Released all slaves [ 1830.906322][ T1389] bond1417 (unregistering): (slave batadv1275): Releasing backup interface [ 1830.978984][ T1389] batadv1275 (unregistering): left promiscuous mode [ 1830.983705][ T1389] bond1417 (unregistering): Released all slaves [ 1830.989070][ T1389] bond1416 (unregistering): (slave batadv1274): Releasing backup interface [ 1831.017341][ T25] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1831.020126][ T25] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1831.058290][ T1389] batadv1274 (unregistering): left promiscuous mode [ 1831.064038][ T1389] bond1416 (unregistering): Released all slaves [ 1831.069216][ T1389] bond1415 (unregistering): (slave batadv1273): Releasing backup interface [ 1831.128517][ T1389] batadv1273 (unregistering): left promiscuous mode [ 1831.133353][ T1389] bond1415 (unregistering): Released all slaves [ 1831.137006][ T1389] bond1414 (unregistering): (slave batadv1272): Releasing backup interface [ 1831.147352][ T25] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1831.149939][ T25] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1831.152225][ T25] usb 1-1: Manufacturer: syz [ 1831.153400][ T25] usb 1-1: SerialNumber: syz [ 1831.188228][ T1389] batadv1272 (unregistering): left promiscuous mode [ 1831.192850][ T1389] bond1414 (unregistering): Released all slaves [ 1831.196704][ T1389] bond1413 (unregistering): (slave batadv1271): Releasing backup interface [ 1831.197549][ T50] Bluetooth: hci6: command 0x0409 tx timeout [ 1831.248170][ T1389] batadv1271 (unregistering): left promiscuous mode [ 1831.252981][ T1389] bond1413 (unregistering): Released all slaves [ 1831.256827][ T1389] bond1412 (unregistering): (slave batadv1270): Releasing backup interface [ 1831.309490][ T1389] batadv1270 (unregistering): left promiscuous mode [ 1831.314277][ T1389] bond1412 (unregistering): Released all slaves [ 1831.318253][ T1389] bond1411 (unregistering): (slave batadv1269): Releasing backup interface [ 1831.368308][ T1389] batadv1269 (unregistering): left promiscuous mode [ 1831.372997][ T1389] bond1411 (unregistering): Released all slaves [ 1831.376885][ T1389] bond1410 (unregistering): (slave batadv1268): Releasing backup interface [ 1831.428344][ T1389] batadv1268 (unregistering): left promiscuous mode [ 1831.433601][ T1389] bond1410 (unregistering): Released all slaves [ 1831.439266][ T1389] bond1409 (unregistering): (slave batadv1267): Releasing backup interface [ 1831.509555][ T1389] batadv1267 (unregistering): left promiscuous mode [ 1831.514493][ T1389] bond1409 (unregistering): Released all slaves [ 1831.520004][ T1389] bond1408 (unregistering): (slave batadv1266): Releasing backup interface [ 1831.568395][ T1389] batadv1266 (unregistering): left promiscuous mode [ 1831.575509][ T1389] bond1408 (unregistering): Released all slaves [ 1831.579547][ T1389] bond1407 (unregistering): (slave batadv1265): Releasing backup interface [ 1831.597482][ T50] Bluetooth: hci7: command 0x0409 tx timeout [ 1831.628387][ T1389] batadv1265 (unregistering): left promiscuous mode [ 1831.632948][ T1389] bond1407 (unregistering): Released all slaves [ 1831.639640][ T1389] bond1406 (unregistering): (slave batadv1264): Releasing backup interface [ 1831.688252][ T1389] batadv1264 (unregistering): left promiscuous mode [ 1831.692702][ T1389] bond1406 (unregistering): Released all slaves [ 1831.696445][ T1389] bond1405 (unregistering): (slave batadv1263): Releasing backup interface 21:54:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70fd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5}]}}}]}, 0x38}}, 0x0) [ 1831.768661][ T1389] batadv1263 (unregistering): left promiscuous mode [ 1831.776699][ T1389] bond1405 (unregistering): Released all slaves [ 1831.797749][ T1389] bond1404 (unregistering): (slave batadv1262): Releasing backup interface [ 1831.849172][ T1389] batadv1262 (unregistering): left promiscuous mode [ 1831.853738][ T1389] bond1404 (unregistering): Released all slaves [ 1831.869055][ T1389] bond1403 (unregistering): (slave batadv1261): Releasing backup interface [ 1831.908388][ T1389] batadv1261 (unregistering): left promiscuous mode [ 1831.913008][ T1389] bond1403 (unregistering): Released all slaves [ 1831.927663][ T1389] bond1402 (unregistering): (slave batadv1260): Releasing backup interface [ 1831.969433][ T1389] batadv1260 (unregistering): left promiscuous mode [ 1831.978091][ T1389] bond1402 (unregistering): Released all slaves [ 1831.987447][ T1389] bond1401 (unregistering): (slave batadv1259): Releasing backup interface [ 1832.048166][ T1389] batadv1259 (unregistering): left promiscuous mode [ 1832.059536][ T1389] bond1401 (unregistering): Released all slaves [ 1832.063604][ T1389] bond1400 (unregistering): (slave batadv1258): Releasing backup interface [ 1832.099650][ T1389] batadv1258 (unregistering): left promiscuous mode [ 1832.104278][ T1389] bond1400 (unregistering): Released all slaves [ 1832.117556][ T1389] bond1399 (unregistering): (slave batadv1257): Releasing backup interface [ 1832.148659][ T1389] batadv1257 (unregistering): left promiscuous mode [ 1832.153182][ T1389] bond1399 (unregistering): Released all slaves [ 1832.156957][ T1389] bond1398 (unregistering): (slave batadv1256): Releasing backup interface [ 1832.209205][ T1389] batadv1256 (unregistering): left promiscuous mode [ 1832.214922][ T1389] bond1398 (unregistering): Released all slaves [ 1832.219130][ T1389] bond1397 (unregistering): (slave batadv1255): Releasing backup interface [ 1832.268223][ T1389] batadv1255 (unregistering): left promiscuous mode [ 1832.272972][ T1389] bond1397 (unregistering): Released all slaves [ 1832.276898][ T1389] bond1396 (unregistering): (slave batadv1254): Releasing backup interface [ 1832.328250][ T1389] batadv1254 (unregistering): left promiscuous mode [ 1832.332854][ T1389] bond1396 (unregistering): Released all slaves [ 1832.337013][ T1389] bond1395 (unregistering): (slave batadv1253): Releasing backup interface [ 1832.398344][ T1389] batadv1253 (unregistering): left promiscuous mode [ 1832.404013][ T1389] bond1395 (unregistering): Released all slaves [ 1832.408352][ T1389] bond1394 (unregistering): (slave batadv1252): Releasing backup interface [ 1832.488289][ T1389] batadv1252 (unregistering): left promiscuous mode [ 1832.496509][ T1389] bond1394 (unregistering): Released all slaves [ 1832.505359][ T1389] bond1393 (unregistering): (slave batadv1251): Releasing backup interface 21:54:48 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="fe000000eafa7240936901b0293df400100109021b0001245ab3d27c89f01ee267d3a753a80080090400000103000000090587e30b823e4c40b171c59c1e53ae4eb3206923f4"], 0x0) r1 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x3, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x7df, 0x0, 0xff, 0x8c}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0x0, 0x2}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x9, 0x4, 0x80, 0xff}, 0x2e, &(0x7f0000000fc0)=ANY=[@ANYBLOB="050f2e0003141004078caa0c97e352ec52ae7d4e784e7731f6010000003052934e9092d80c0a1003000000711f06000b1001044000ff3f1305f2e9c3d9f99b1053f0527775bbd368955933436b4853a37b000000000000000000"], 0x3, [{0xfa, &(0x7f0000000140)=@string={0xfa, 0x3, "aca9b12407e1e08071e7f9fa8b4d87a4515ba60d895af6b32273a22893ce2b6a09d699a4ad39bb56e105e9d661b7d560c46ec72f2330130c34737c9b884203362312ac426e970f1b29963686131d60718c41c420a1c0644529368bb87e313ea88d698e865f50b47bb53b23ec2402785c0cea8a1d1b6af28d9567b1ac8ef50981266db70cab0f0947e013cf5cd39026176e646d20577d29ee139b7c2d6fb932a816077c49f653a7ec26c4793addd2627a934975a07dcca83b673726ae998ab6d106ffe38a00da8a73be9b31821d2dc41840841b2a7229c3eb8123b4f15e096fc6b561d7b17040da82ca72ad97a4712c9ddcf029324b67d798"}}, {0x8d, &(0x7f0000000280)=@string={0x8d, 0x3, "b31ce3432505af37b99f9a94e7c4992ce234005251a278746170d1ab87f3c98004d493dfae6db9278838f9721591b332df5136a420132a8e870711431607f8fc16e1161fed88eaf51927c53017b7b2c99c3ab4c9d242665b9022b8793f4842aa4285d930f7f0dfc00b6af7848432b829dae118c56b87d815d23d3fdb931d72bf3df84e71e03d69d9e1a348"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x402}}]}) syz_usb_disconnect(r1) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000a00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ef, 0x81, 0x7f, 0x81}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x7, 0x7f}}]}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x200, 0x4, 0x2, 0x9, 0x20, 0x5}, 0x19, &(0x7f0000000a80)={0x5, 0xf, 0x19, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xa, 0x74, 0x1, 0x32, 0x3ff, 0x7}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0xc1a}}]}) syz_usb_control_io$printer(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000b40)={0x40, 0x11, 0x87, {0x87, 0x9, "6a82bc81992376daaee82d1dba96e1030e6ba790d799a722a5670cf42ff74137b6d38e707c8dd0e587af13ba554121d07bbb033b998ce5388f2e424fba4a24f45abdd47b53a7631cd97bad52b8fec6bd4fb6fb1a9ee631b35a04802699d4915c3069e64660a52e7a4af28886ee1ea4c9d39d3e6882b05cc5226be5cddf9bb4488f90656be5"}}, &(0x7f0000000c00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}}, &(0x7f0000000f80)={0x34, &(0x7f0000000c80)={0xa0497df6479df207, 0x30, 0xd0, "7a6e7171ddae6a4ffd5671c5c1e5caac01fb05f1048c885e83b87d3687c37225ad4b17850ecbc31378725debf094bff7e8424c60acfaac61fa58f986cdb1d2aab6a5e7ab0d93fae92ba677ed1d60612e5c1cb81aefc35989e1ffb564226ade0107ec53c0a9e3ad20ec53cb5ccd0780e4d247f72f5266d4467d2de1ffbd62a5085d06676b8c38bf011f1cb136e7a518443800eb1409d10ecc781ebe40db180680bf2eac4d226072bd2d3c31b33d17fcaec1c5355bcb75bb4260d40ef7547a99abe51472675e08c0cad7b10d120bd1a1a9"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x4f}, &(0x7f0000000e00)={0x20, 0x0, 0xc2, {0xc0, "984e39c1555dc3a01c5ec78e988bec13b4d7e444ea4cb9c3795415f8186215f184a21ab5dd8069f4de05ac8bd6f0bc34a70586cef49bdfda62629d58f96d30fe0c060c675174b6cc455faad206ab60fad9131d56231fb2344ef34758a7710da581a6f44d69bc705c56fd34d09ccb7294b404d62abdb330cd3221c6b5a527b4fc322c4e9a6fb2c37e2d5fd0573072b5944c246ad1bd262aa1e0fda368d21d6a87161cf78733308ea899204e01aa0d7f65ea992c32956fafe20e85f9189919fa35"}}, &(0x7f0000000f00)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000f40)={0x20, 0x0, 0x1, 0x5}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f00000003c0)={0x40, 0x31, 0x35, {0x35, 0x2, "4f4badeaa9b759918ff7d6e890a4d0a338703d639744a15196a1a8bc23eec7ec04be9f16ffd90a3a70cc9766a76e8b76ed0341"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, &(0x7f0000000440)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfb, 0x18, 0x5, 0xe1, "2c04ee04", "a38f75a9"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2b, 0x2, 0x1, 0xef, 0x7, 0x101}}}, &(0x7f0000000940)={0x84, &(0x7f0000000540)={0x40, 0x11, 0x12, "fcb05b607283666d3d70a229603842cef7c9"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xf8}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x280, 0x10, [0xf0]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000700)={0x40, 0xb, 0x2, "a61d"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0xbbab}, &(0x7f0000000780)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000800)={0x40, 0x19, 0x2, "b339"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x2}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1832.539294][ T25] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 1832.541548][ T25] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input287 [ 1832.559196][ T1389] batadv1251 (unregistering): left promiscuous mode [ 1832.563945][ T1389] bond1393 (unregistering): Released all slaves [ 1832.568357][ T1389] bond1392 (unregistering): (slave batadv1250): Releasing backup interface [ 1832.619434][ T1389] batadv1250 (unregistering): left promiscuous mode [ 1832.623959][ T1389] bond1392 (unregistering): Released all slaves [ 1832.628655][ T1389] bond1391 (unregistering): (slave batadv1249): Releasing backup interface [ 1832.650093][ T25] usb 1-1: USB disconnect, device number 94 [ 1832.667316][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -2 [ 1832.678311][ T1389] batadv1249 (unregistering): left promiscuous mode [ 1832.686354][ T1389] bond1391 (unregistering): Released all slaves [ 1832.690141][ T1389] bond1390 (unregistering): (slave batadv1248): Releasing backup interface [ 1832.738286][ T1389] batadv1248 (unregistering): left promiscuous mode [ 1832.742932][ T1389] bond1390 (unregistering): Released all slaves [ 1832.747569][ T1389] bond1389 (unregistering): (slave batadv1247): Releasing backup interface [ 1832.799143][ T1389] batadv1247 (unregistering): left promiscuous mode [ 1832.803805][ T1389] bond1389 (unregistering): Released all slaves [ 1832.807679][ T1389] bond1388 (unregistering): (slave batadv1246): Releasing backup interface [ 1832.848195][ T1389] batadv1246 (unregistering): left promiscuous mode [ 1832.852767][ T1389] bond1388 (unregistering): Released all slaves [ 1832.856466][ T1389] bond1387 (unregistering): (slave batadv1245): Releasing backup interface [ 1832.931869][ T1389] batadv1245 (unregistering): left promiscuous mode [ 1832.936320][ T1389] bond1387 (unregistering): Released all slaves [ 1832.940371][ T1389] bond1386 (unregistering): (slave batadv1244): Releasing backup interface [ 1832.989412][ T1389] batadv1244 (unregistering): left promiscuous mode [ 1832.993974][ T1389] bond1386 (unregistering): Released all slaves [ 1832.997843][ T1389] bond1385 (unregistering): (slave batadv1243): Releasing backup interface [ 1833.048174][ T1389] batadv1243 (unregistering): left promiscuous mode [ 1833.052549][ T1389] bond1385 (unregistering): Released all slaves [ 1833.056336][ T1389] bond1384 (unregistering): (slave batadv1242): Releasing backup interface [ 1833.098247][ T1389] batadv1242 (unregistering): left promiscuous mode [ 1833.102625][ T1389] bond1384 (unregistering): Released all slaves [ 1833.107340][ T25] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1833.109844][ T1389] bond1383 (unregistering): (slave batadv1241): Releasing backup interface [ 1833.169848][ T1389] batadv1241 (unregistering): left promiscuous mode [ 1833.174831][ T1389] bond1383 (unregistering): Released all slaves [ 1833.178997][ T1389] bond1382 (unregistering): (slave batadv1240): Releasing backup interface [ 1833.228365][ T1389] batadv1240 (unregistering): left promiscuous mode [ 1833.236397][ T1389] bond1382 (unregistering): Released all slaves [ 1833.245078][ T1389] bond1381 (unregistering): (slave batadv1239): Releasing backup interface [ 1833.272816][T31614] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1833.275120][T31614] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1833.277083][T31614] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1833.279049][T31614] Bluetooth: hci6: command 0x041b tx timeout [ 1833.281071][T31614] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1833.283160][T31614] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1833.285143][T31614] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1833.289199][ T1389] batadv1239 (unregistering): left promiscuous mode [ 1833.294999][ T1389] bond1381 (unregistering): Released all slaves [ 1833.297392][ T25] usb 1-1: device descriptor read/64, error -71 [ 1833.299333][ T1389] bond1380 (unregistering): (slave batadv1238): Releasing backup interface [ 1833.338215][ T1389] batadv1238 (unregistering): left promiscuous mode [ 1833.343235][ T1389] bond1380 (unregistering): Released all slaves [ 1833.348013][ T1389] bond1379 (unregistering): (slave batadv1237): Releasing backup interface [ 1833.389063][ T1389] batadv1237 (unregistering): left promiscuous mode [ 1833.393738][ T1389] bond1379 (unregistering): Released all slaves [ 1833.397932][ T1389] bond1378 (unregistering): (slave batadv1236): Releasing backup interface [ 1833.448347][ T1389] batadv1236 (unregistering): left promiscuous mode [ 1833.452888][ T1389] bond1378 (unregistering): Released all slaves [ 1833.456714][ T1389] bond1377 (unregistering): (slave batadv1235): Releasing backup interface [ 1833.518421][ T1389] batadv1235 (unregistering): left promiscuous mode [ 1833.523370][ T1389] bond1377 (unregistering): Released all slaves [ 1833.527930][ T1389] bond1376 (unregistering): (slave batadv1234): Releasing backup interface [ 1833.567375][ T25] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1833.588494][ T1389] batadv1234 (unregistering): left promiscuous mode [ 1833.593142][ T1389] bond1376 (unregistering): Released all slaves [ 1833.596819][ T1389] bond1375 (unregistering): (slave batadv1233): Releasing backup interface [ 1833.638325][ T1389] batadv1233 (unregistering): left promiscuous mode [ 1833.642815][ T1389] bond1375 (unregistering): Released all slaves [ 1833.648174][ T1389] bond1374 (unregistering): (slave batadv1232): Releasing backup interface [ 1833.677571][ T50] Bluetooth: hci7: command 0x041b tx timeout [ 1833.698180][ T1389] batadv1232 (unregistering): left promiscuous mode [ 1833.702772][ T1389] bond1374 (unregistering): Released all slaves [ 1833.706473][ T1389] bond1373 (unregistering): (slave batadv1231): Releasing backup interface [ 1833.757659][ T25] usb 1-1: device descriptor read/64, error -71 [ 1833.759110][ T1389] batadv1231 (unregistering): left promiscuous mode [ 1833.763856][ T1389] bond1373 (unregistering): Released all slaves [ 1833.767883][ T1389] bond1372 (unregistering): (slave batadv1230): Releasing backup interface [ 1833.808646][ T1389] batadv1230 (unregistering): left promiscuous mode [ 1833.813500][ T1389] bond1372 (unregistering): Released all slaves [ 1833.817769][ T1389] bond1371 (unregistering): (slave batadv1229): Releasing backup interface [ 1833.868350][ T1389] batadv1229 (unregistering): left promiscuous mode [ 1833.873010][ T1389] bond1371 (unregistering): Released all slaves [ 1833.877162][ T1389] bond1370 (unregistering): (slave batadv1228): Releasing backup interface [ 1833.877377][ T25] usb usb1-port1: attempt power cycle [ 1833.918409][ T1389] batadv1228 (unregistering): left promiscuous mode [ 1833.922877][ T1389] bond1370 (unregistering): Released all slaves [ 1833.926500][ T1389] bond1369 (unregistering): (slave batadv1227): Releasing backup interface [ 1833.979049][ T1389] batadv1227 (unregistering): left promiscuous mode [ 1833.983543][ T1389] bond1369 (unregistering): Released all slaves [ 1833.987849][ T1389] bond1368 (unregistering): (slave batadv1226): Releasing backup interface [ 1834.048143][ T1389] batadv1226 (unregistering): left promiscuous mode [ 1834.052597][ T1389] bond1368 (unregistering): Released all slaves [ 1834.056419][ T1389] bond1367 (unregistering): (slave batadv1225): Releasing backup interface [ 1834.108150][ T1389] batadv1225 (unregistering): left promiscuous mode [ 1834.112516][ T1389] bond1367 (unregistering): Released all slaves [ 1834.116881][ T1389] bond1366 (unregistering): (slave batadv1224): Releasing backup interface [ 1834.169282][ T1389] batadv1224 (unregistering): left promiscuous mode [ 1834.173878][ T1389] bond1366 (unregistering): Released all slaves [ 1834.177922][ T1389] bond1365 (unregistering): (slave batadv1223): Releasing backup interface [ 1834.218096][ T1389] batadv1223 (unregistering): left promiscuous mode [ 1834.222462][ T1389] bond1365 (unregistering): Released all slaves [ 1834.226147][ T1389] bond1364 (unregistering): (slave batadv1222): Releasing backup interface [ 1834.278275][ T1389] batadv1222 (unregistering): left promiscuous mode [ 1834.283087][ T1389] bond1364 (unregistering): Released all slaves [ 1834.286771][ T1389] bond1363 (unregistering): (slave batadv1221): Releasing backup interface [ 1834.297313][ T25] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1834.349050][ T1389] batadv1221 (unregistering): left promiscuous mode [ 1834.353635][ T1389] bond1363 (unregistering): Released all slaves [ 1834.359310][ T1389] bond1362 (unregistering): (slave batadv1220): Releasing backup interface [ 1834.387503][ T25] usb 1-1: device descriptor read/8, error -71 [ 1834.408194][ T1389] batadv1220 (unregistering): left promiscuous mode [ 1834.412827][ T1389] bond1362 (unregistering): Released all slaves [ 1834.416591][ T1389] bond1361 (unregistering): (slave batadv1219): Releasing backup interface [ 1834.468347][ T1389] batadv1219 (unregistering): left promiscuous mode [ 1834.472809][ T1389] bond1361 (unregistering): Released all slaves [ 1834.476467][ T1389] bond1360 (unregistering): (slave batadv1218): Releasing backup interface [ 1834.528292][ T1389] batadv1218 (unregistering): left promiscuous mode [ 1834.532790][ T1389] bond1360 (unregistering): Released all slaves [ 1834.536523][ T1389] bond1359 (unregistering): (slave batadv1217): Releasing backup interface [ 1834.588313][ T1389] batadv1217 (unregistering): left promiscuous mode [ 1834.592848][ T1389] bond1359 (unregistering): Released all slaves [ 1834.596594][ T1389] bond1358 (unregistering): (slave batadv1216): Releasing backup interface [ 1834.648072][ T1389] batadv1216 (unregistering): left promiscuous mode [ 1834.652420][ T1389] bond1358 (unregistering): Released all slaves [ 1834.655991][ T1389] bond1357 (unregistering): (slave batadv1215): Releasing backup interface [ 1834.658244][ T25] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1834.719054][ T1389] batadv1215 (unregistering): left promiscuous mode [ 1834.723879][ T1389] bond1357 (unregistering): Released all slaves [ 1834.729648][ T1389] bond1356 (unregistering): (slave batadv1214): Releasing backup interface [ 1834.747471][ T25] usb 1-1: device descriptor read/8, error -71 [ 1834.778304][ T1389] batadv1214 (unregistering): left promiscuous mode [ 1834.782893][ T1389] bond1356 (unregistering): Released all slaves [ 1834.786596][ T1389] bond1355 (unregistering): (slave batadv1213): Releasing backup interface [ 1834.839267][ T1389] batadv1213 (unregistering): left promiscuous mode [ 1834.844111][ T1389] bond1355 (unregistering): Released all slaves [ 1834.849883][ T1389] bond1354 (unregistering): (slave batadv1212): Releasing backup interface [ 1834.867477][ T25] usb usb1-port1: unable to enumerate USB device [ 1834.888533][ T1389] batadv1212 (unregistering): left promiscuous mode [ 1834.893158][ T1389] bond1354 (unregistering): Released all slaves [ 1834.896959][ T1389] bond1353 (unregistering): (slave batadv1211): Releasing backup interface [ 1834.939327][ T1389] batadv1211 (unregistering): left promiscuous mode [ 1834.944254][ T1389] bond1353 (unregistering): Released all slaves [ 1834.948161][ T1389] bond1352 (unregistering): (slave batadv1210): Releasing backup interface [ 1834.998315][ T1389] batadv1210 (unregistering): left promiscuous mode [ 1835.002902][ T1389] bond1352 (unregistering): Released all slaves [ 1835.006686][ T1389] bond1351 (unregistering): (slave batadv1209): Releasing backup interface [ 1835.058268][ T1389] batadv1209 (unregistering): left promiscuous mode [ 1835.065666][ T1389] bond1351 (unregistering): Released all slaves [ 1835.069644][ T1389] bond1350 (unregistering): (slave batadv1208): Releasing backup interface [ 1835.118766][ T1389] batadv1208 (unregistering): left promiscuous mode [ 1835.124210][ T1389] bond1350 (unregistering): Released all slaves [ 1835.128347][ T1389] bond1349 (unregistering): (slave batadv1207): Releasing backup interface [ 1835.179411][ T1389] batadv1207 (unregistering): left promiscuous mode [ 1835.184176][ T1389] bond1349 (unregistering): Released all slaves [ 1835.188155][ T1389] bond1348 (unregistering): (slave batadv1206): Releasing backup interface [ 1835.248237][ T1389] batadv1206 (unregistering): left promiscuous mode [ 1835.252727][ T1389] bond1348 (unregistering): Released all slaves [ 1835.256464][ T1389] bond1347 (unregistering): (slave batadv1205): Releasing backup interface [ 1835.318200][ T1389] batadv1205 (unregistering): left promiscuous mode [ 1835.323223][ T1389] bond1347 (unregistering): Released all slaves [ 1835.327057][ T1389] bond1346 (unregistering): (slave batadv1204): Releasing backup interface [ 1835.358048][ T50] Bluetooth: hci8: command 0x0409 tx timeout [ 1835.358060][T31614] Bluetooth: hci6: command 0x040f tx timeout [ 1835.408250][ T1389] batadv1204 (unregistering): left promiscuous mode [ 1835.412815][ T1389] bond1346 (unregistering): Released all slaves [ 1835.416549][ T1389] bond1345 (unregistering): (slave batadv1203): Releasing backup interface [ 1835.468141][ T1389] batadv1203 (unregistering): left promiscuous mode [ 1835.472467][ T1389] bond1345 (unregistering): Released all slaves [ 1835.477052][ T1389] bond1344 (unregistering): (slave batadv1202): Releasing backup interface 21:54:51 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="fe000000eafa7240936901b0293df400100109021b0001245ab3d27c89f01ee267d3a753a80080090400000103000000090587e30b823e4c40b171c59c1e53ae4eb3206923f4"], 0x0) r1 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x3, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x7df, 0x0, 0xff, 0x8c}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0x0, 0x2}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x9, 0x4, 0x80, 0xff}, 0x2e, &(0x7f0000000fc0)=ANY=[@ANYBLOB="050f2e0003141004078caa0c97e352ec52ae7d4e784e7731f6010000003052934e9092d80c0a1003000000711f06000b1001044000ff3f1305f2e9c3d9f99b1053f0527775bbd368955933436b4853a37b000000000000000000"], 0x3, [{0xfa, &(0x7f0000000140)=@string={0xfa, 0x3, "aca9b12407e1e08071e7f9fa8b4d87a4515ba60d895af6b32273a22893ce2b6a09d699a4ad39bb56e105e9d661b7d560c46ec72f2330130c34737c9b884203362312ac426e970f1b29963686131d60718c41c420a1c0644529368bb87e313ea88d698e865f50b47bb53b23ec2402785c0cea8a1d1b6af28d9567b1ac8ef50981266db70cab0f0947e013cf5cd39026176e646d20577d29ee139b7c2d6fb932a816077c49f653a7ec26c4793addd2627a934975a07dcca83b673726ae998ab6d106ffe38a00da8a73be9b31821d2dc41840841b2a7229c3eb8123b4f15e096fc6b561d7b17040da82ca72ad97a4712c9ddcf029324b67d798"}}, {0x8d, &(0x7f0000000280)=@string={0x8d, 0x3, "b31ce3432505af37b99f9a94e7c4992ce234005251a278746170d1ab87f3c98004d493dfae6db9278838f9721591b332df5136a420132a8e870711431607f8fc16e1161fed88eaf51927c53017b7b2c99c3ab4c9d242665b9022b8793f4842aa4285d930f7f0dfc00b6af7848432b829dae118c56b87d815d23d3fdb931d72bf3df84e71e03d69d9e1a348"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x402}}]}) syz_usb_disconnect(r1) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000a00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ef, 0x81, 0x7f, 0x81}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x7, 0x7f}}]}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x200, 0x4, 0x2, 0x9, 0x20, 0x5}, 0x19, &(0x7f0000000a80)={0x5, 0xf, 0x19, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xa, 0x74, 0x1, 0x32, 0x3ff, 0x7}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0xc1a}}]}) (async) r2 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000a00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ef, 0x81, 0x7f, 0x81}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x7, 0x7f}}]}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x200, 0x4, 0x2, 0x9, 0x20, 0x5}, 0x19, &(0x7f0000000a80)={0x5, 0xf, 0x19, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xa, 0x74, 0x1, 0x32, 0x3ff, 0x7}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0xc1a}}]}) syz_usb_control_io$printer(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000b40)={0x40, 0x11, 0x87, {0x87, 0x9, "6a82bc81992376daaee82d1dba96e1030e6ba790d799a722a5670cf42ff74137b6d38e707c8dd0e587af13ba554121d07bbb033b998ce5388f2e424fba4a24f45abdd47b53a7631cd97bad52b8fec6bd4fb6fb1a9ee631b35a04802699d4915c3069e64660a52e7a4af28886ee1ea4c9d39d3e6882b05cc5226be5cddf9bb4488f90656be5"}}, &(0x7f0000000c00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}}, &(0x7f0000000f80)={0x34, &(0x7f0000000c80)={0xa0497df6479df207, 0x30, 0xd0, "7a6e7171ddae6a4ffd5671c5c1e5caac01fb05f1048c885e83b87d3687c37225ad4b17850ecbc31378725debf094bff7e8424c60acfaac61fa58f986cdb1d2aab6a5e7ab0d93fae92ba677ed1d60612e5c1cb81aefc35989e1ffb564226ade0107ec53c0a9e3ad20ec53cb5ccd0780e4d247f72f5266d4467d2de1ffbd62a5085d06676b8c38bf011f1cb136e7a518443800eb1409d10ecc781ebe40db180680bf2eac4d226072bd2d3c31b33d17fcaec1c5355bcb75bb4260d40ef7547a99abe51472675e08c0cad7b10d120bd1a1a9"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x4f}, &(0x7f0000000e00)={0x20, 0x0, 0xc2, {0xc0, "984e39c1555dc3a01c5ec78e988bec13b4d7e444ea4cb9c3795415f8186215f184a21ab5dd8069f4de05ac8bd6f0bc34a70586cef49bdfda62629d58f96d30fe0c060c675174b6cc455faad206ab60fad9131d56231fb2344ef34758a7710da581a6f44d69bc705c56fd34d09ccb7294b404d62abdb330cd3221c6b5a527b4fc322c4e9a6fb2c37e2d5fd0573072b5944c246ad1bd262aa1e0fda368d21d6a87161cf78733308ea899204e01aa0d7f65ea992c32956fafe20e85f9189919fa35"}}, &(0x7f0000000f00)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000f40)={0x20, 0x0, 0x1, 0x5}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f00000003c0)={0x40, 0x31, 0x35, {0x35, 0x2, "4f4badeaa9b759918ff7d6e890a4d0a338703d639744a15196a1a8bc23eec7ec04be9f16ffd90a3a70cc9766a76e8b76ed0341"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, &(0x7f0000000440)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfb, 0x18, 0x5, 0xe1, "2c04ee04", "a38f75a9"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2b, 0x2, 0x1, 0xef, 0x7, 0x101}}}, &(0x7f0000000940)={0x84, &(0x7f0000000540)={0x40, 0x11, 0x12, "fcb05b607283666d3d70a229603842cef7c9"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xf8}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x280, 0x10, [0xf0]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000700)={0x40, 0xb, 0x2, "a61d"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0xbbab}, &(0x7f0000000780)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000800)={0x40, 0x19, 0x2, "b339"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x2}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1835.542654][ T1389] batadv1202 (unregistering): left promiscuous mode [ 1835.553969][ T1389] bond1344 (unregistering): Released all slaves [ 1835.561552][ T1389] bond1343 (unregistering): (slave batadv1201): Releasing backup interface [ 1835.608299][ T1389] batadv1201 (unregistering): left promiscuous mode [ 1835.612777][ T1389] bond1343 (unregistering): Released all slaves [ 1835.616699][ T1389] bond1342 (unregistering): (slave batadv1200): Releasing backup interface [ 1835.658101][ T1389] batadv1200 (unregistering): left promiscuous mode [ 1835.662410][ T1389] bond1342 (unregistering): Released all slaves [ 1835.665980][ T1389] bond1341 (unregistering): (slave batadv1199): Releasing backup interface [ 1835.718344][ T1389] batadv1199 (unregistering): left promiscuous mode [ 1835.723286][ T1389] bond1341 (unregistering): Released all slaves [ 1835.728976][ T1389] bond1340 (unregistering): (slave batadv1198): Releasing backup interface [ 1835.757649][T31614] Bluetooth: hci7: command 0x040f tx timeout [ 1835.768565][ T1389] batadv1198 (unregistering): left promiscuous mode [ 1835.773070][ T1389] bond1340 (unregistering): Released all slaves [ 1835.776796][ T1389] bond1339 (unregistering): (slave batadv1197): Releasing backup interface [ 1835.828433][ T1389] batadv1197 (unregistering): left promiscuous mode [ 1835.833055][ T1389] bond1339 (unregistering): Released all slaves [ 1835.840148][ T1389] bond1338 (unregistering): (slave batadv1196): Releasing backup interface [ 1835.908506][ T1389] batadv1196 (unregistering): left promiscuous mode [ 1835.913167][ T1389] bond1338 (unregistering): Released all slaves [ 1835.917036][ T1389] bond1337 (unregistering): (slave batadv1195): Releasing backup interface [ 1835.968206][ T1389] batadv1195 (unregistering): left promiscuous mode [ 1835.972890][ T1389] bond1337 (unregistering): Released all slaves [ 1835.976683][ T1389] bond1336 (unregistering): (slave batadv1194): Releasing backup interface [ 1835.997540][ T6258] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1836.028073][ T1389] batadv1194 (unregistering): left promiscuous mode [ 1836.032382][ T1389] bond1336 (unregistering): Released all slaves [ 1836.036098][ T1389] bond1335 (unregistering): (slave batadv1193): Releasing backup interface [ 1836.089115][ T1389] batadv1193 (unregistering): left promiscuous mode [ 1836.094526][ T1389] bond1335 (unregistering): Released all slaves [ 1836.098736][ T1389] bond1334 (unregistering): (slave batadv1192): Releasing backup interface [ 1836.168114][ T1389] batadv1192 (unregistering): left promiscuous mode [ 1836.172480][ T1389] bond1334 (unregistering): Released all slaves [ 1836.176258][ T1389] bond1333 (unregistering): (slave batadv1191): Releasing backup interface [ 1836.187344][ T6258] usb 1-1: device descriptor read/64, error -71 [ 1836.228155][ T1389] batadv1191 (unregistering): left promiscuous mode [ 1836.232752][ T1389] bond1333 (unregistering): Released all slaves [ 1836.236804][ T1389] bond1332 (unregistering): (slave batadv1190): Releasing backup interface [ 1836.288359][ T1389] batadv1190 (unregistering): left promiscuous mode [ 1836.292881][ T1389] bond1332 (unregistering): Released all slaves [ 1836.296541][ T1389] bond1331 (unregistering): (slave batadv1189): Releasing backup interface [ 1836.349248][ T1389] batadv1189 (unregistering): left promiscuous mode [ 1836.354716][ T1389] bond1331 (unregistering): Released all slaves [ 1836.358679][ T1389] bond1330 (unregistering): (slave batadv1188): Releasing backup interface [ 1836.398530][ T1389] batadv1188 (unregistering): left promiscuous mode [ 1836.402977][ T1389] bond1330 (unregistering): Released all slaves [ 1836.406732][ T1389] bond1329 (unregistering): (slave batadv1187): Releasing backup interface [ 1836.457330][ T6258] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1836.458140][ T1389] batadv1187 (unregistering): left promiscuous mode [ 1836.463590][ T1389] bond1329 (unregistering): Released all slaves [ 1836.468203][ T1389] bond1328 (unregistering): (slave batadv1186): Releasing backup interface [ 1836.519129][ T1389] batadv1186 (unregistering): left promiscuous mode [ 1836.529368][ T1389] bond1328 (unregistering): Released all slaves [ 1836.533139][ T1389] bond1327 (unregistering): (slave batadv1185): Releasing backup interface [ 1836.578137][ T1389] batadv1185 (unregistering): left promiscuous mode [ 1836.582414][ T1389] bond1327 (unregistering): Released all slaves [ 1836.586166][ T1389] bond1326 (unregistering): (slave batadv1184): Releasing backup interface [ 1836.638122][ T1389] batadv1184 (unregistering): left promiscuous mode [ 1836.638817][T23612] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1836.645193][ T1389] bond1326 (unregistering): Released all slaves [ 1836.647357][ T6258] usb 1-1: device descriptor read/64, error -71 [ 1836.650587][ T1389] bond1325 (unregistering): (slave batadv1183): Releasing backup interface [ 1836.718415][ T1389] batadv1183 (unregistering): left promiscuous mode [ 1836.723047][ T1389] bond1325 (unregistering): Released all slaves [ 1836.726871][ T1389] bond1324 (unregistering): (slave batadv1182): Releasing backup interface [ 1836.767553][ T6258] usb usb1-port1: attempt power cycle [ 1836.778435][ T1389] batadv1182 (unregistering): left promiscuous mode [ 1836.783251][ T1389] bond1324 (unregistering): Released all slaves [ 1836.787034][ T1389] bond1323 (unregistering): (slave batadv1181): Releasing backup interface [ 1836.848301][ T1389] batadv1181 (unregistering): left promiscuous mode [ 1836.852895][ T1389] bond1323 (unregistering): Released all slaves [ 1836.858143][ T1389] bond1322 (unregistering): (slave batadv1180): Releasing backup interface [ 1836.908179][ T1389] batadv1180 (unregistering): left promiscuous mode [ 1836.912601][ T1389] bond1322 (unregistering): Released all slaves [ 1836.916324][ T1389] bond1321 (unregistering): (slave batadv1179): Releasing backup interface [ 1836.968277][ T1389] batadv1179 (unregistering): left promiscuous mode [ 1836.973017][ T1389] bond1321 (unregistering): Released all slaves [ 1836.976864][ T1389] bond1320 (unregistering): (slave batadv1178): Releasing backup interface [ 1837.029147][ T1389] batadv1178 (unregistering): left promiscuous mode [ 1837.033720][ T1389] bond1320 (unregistering): Released all slaves [ 1837.037971][ T1389] bond1319 (unregistering): (slave batadv1177): Releasing backup interface [ 1837.088135][ T1389] batadv1177 (unregistering): left promiscuous mode [ 1837.092561][ T1389] bond1319 (unregistering): Released all slaves [ 1837.096234][ T1389] bond1318 (unregistering): (slave batadv1176): Releasing backup interface [ 1837.148083][ T1389] batadv1176 (unregistering): left promiscuous mode [ 1837.152503][ T1389] bond1318 (unregistering): Released all slaves [ 1837.156302][ T1389] bond1317 (unregistering): (slave batadv1175): Releasing backup interface [ 1837.187436][ T6258] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1837.211831][ T1389] batadv1175 (unregistering): left promiscuous mode [ 1837.216474][ T1389] bond1317 (unregistering): Released all slaves [ 1837.220453][ T1389] bond1316 (unregistering): (slave batadv1174): Releasing backup interface [ 1837.268318][ T1389] batadv1174 (unregistering): left promiscuous mode [ 1837.272723][ T1389] bond1316 (unregistering): Released all slaves [ 1837.276442][ T1389] bond1315 (unregistering): (slave batadv1173): Releasing backup interface [ 1837.279771][ T6258] usb 1-1: device descriptor read/8, error -71 [ 1837.329286][ T1389] batadv1173 (unregistering): left promiscuous mode [ 1837.333857][ T1389] bond1315 (unregistering): Released all slaves [ 1837.338569][ T1389] bond1314 (unregistering): (slave batadv1172): Releasing backup interface [ 1837.388224][ T1389] batadv1172 (unregistering): left promiscuous mode [ 1837.392768][ T1389] bond1314 (unregistering): Released all slaves [ 1837.397907][ T1389] bond1313 (unregistering): (slave batadv1171): Releasing backup interface [ 1837.437489][T31614] Bluetooth: hci8: command 0x041b tx timeout [ 1837.439158][T31614] Bluetooth: hci6: command 0x0419 tx timeout [ 1837.448219][ T1389] batadv1171 (unregistering): left promiscuous mode [ 1837.454785][ T1389] bond1313 (unregistering): Released all slaves [ 1837.458960][ T1389] bond1312 (unregistering): (slave batadv1170): Releasing backup interface [ 1837.508356][ T1389] batadv1170 (unregistering): left promiscuous mode [ 1837.512719][ T1389] bond1312 (unregistering): Released all slaves [ 1837.517528][ T1389] bond1311 (unregistering): (slave batadv1169): Releasing backup interface [ 1837.547355][ T6258] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1837.558309][ T1389] batadv1169 (unregistering): left promiscuous mode [ 1837.562800][ T1389] bond1311 (unregistering): Released all slaves [ 1837.567146][ T1389] bond1310 (unregistering): (slave batadv1168): Releasing backup interface [ 1837.608236][ T1389] batadv1168 (unregistering): left promiscuous mode [ 1837.612714][ T1389] bond1310 (unregistering): Released all slaves [ 1837.616542][ T1389] bond1309 (unregistering): (slave batadv1167): Releasing backup interface [ 1837.637423][ T6258] usb 1-1: device descriptor read/8, error -71 [ 1837.669264][ T1389] batadv1167 (unregistering): left promiscuous mode [ 1837.673791][ T1389] bond1309 (unregistering): Released all slaves [ 1837.678566][ T1389] bond1308 (unregistering): (slave batadv1166): Releasing backup interface [ 1837.728348][ T1389] batadv1166 (unregistering): left promiscuous mode [ 1837.732944][ T1389] bond1308 (unregistering): Released all slaves [ 1837.737555][ T1389] bond1307 (unregistering): (slave batadv1165): Releasing backup interface [ 1837.757583][ T6258] usb usb1-port1: unable to enumerate USB device [ 1837.788175][ T1389] batadv1165 (unregistering): left promiscuous mode [ 1837.792589][ T1389] bond1307 (unregistering): Released all slaves [ 1837.796338][ T1389] bond1306 (unregistering): (slave batadv1164): Releasing backup interface [ 1837.829057][ T1389] batadv1164 (unregistering): left promiscuous mode [ 1837.833584][ T1389] bond1306 (unregistering): Released all slaves [ 1837.837388][T31614] Bluetooth: hci7: command 0x0419 tx timeout [ 1837.839549][ T1389] bond1305 (unregistering): (slave batadv1163): Releasing backup interface [ 1837.888940][ T1389] batadv1163 (unregistering): left promiscuous mode [ 1837.893295][ T1389] bond1305 (unregistering): Released all slaves [ 1837.896968][ T1389] bond1304 (unregistering): (slave batadv1162): Releasing backup interface [ 1837.928272][ T1389] batadv1162 (unregistering): left promiscuous mode [ 1837.932708][ T1389] bond1304 (unregistering): Released all slaves [ 1837.937957][ T1389] bond1303 (unregistering): (slave batadv1161): Releasing backup interface [ 1837.998479][ T1389] batadv1161 (unregistering): left promiscuous mode [ 1838.003819][ T1389] bond1303 (unregistering): Released all slaves [ 1838.007464][ T1389] bond1302 (unregistering): (slave batadv1160): Releasing backup interface [ 1838.048224][ T1389] batadv1160 (unregistering): left promiscuous mode [ 1838.052734][ T1389] bond1302 (unregistering): Released all slaves [ 1838.056360][ T1389] bond1301 (unregistering): (slave batadv1159): Releasing backup interface [ 1838.108125][ T1389] batadv1159 (unregistering): left promiscuous mode [ 1838.113232][ T1389] bond1301 (unregistering): Released all slaves [ 1838.116795][ T1389] bond1300 (unregistering): (slave batadv1158): Releasing backup interface [ 1838.168081][ T1389] batadv1158 (unregistering): left promiscuous mode [ 1838.172393][ T1389] bond1300 (unregistering): Released all slaves [ 1838.176024][ T1389] bond1299 (unregistering): (slave batadv1157): Releasing backup interface [ 1838.228526][ T1389] batadv1157 (unregistering): left promiscuous mode [ 1838.233064][ T1389] bond1299 (unregistering): Released all slaves [ 1838.238431][ T1389] bond1298 (unregistering): (slave batadv1156): Releasing backup interface [ 1838.308640][ T1389] batadv1156 (unregistering): left promiscuous mode [ 1838.313085][ T1389] bond1298 (unregistering): Released all slaves [ 1838.316841][ T1389] bond1297 (unregistering): (slave batadv1155): Releasing backup interface [ 1838.368169][ T1389] batadv1155 (unregistering): left promiscuous mode [ 1838.372719][ T1389] bond1297 (unregistering): Released all slaves [ 1838.376306][ T1389] bond1296 (unregistering): (slave batadv1154): Releasing backup interface [ 1838.438099][ T1389] batadv1154 (unregistering): left promiscuous mode [ 1838.442621][ T1389] bond1296 (unregistering): Released all slaves [ 1838.446327][ T1389] bond1295 (unregistering): (slave batadv1153): Releasing backup interface [ 1838.498202][ T1389] batadv1153 (unregistering): left promiscuous mode [ 1838.504091][ T1389] bond1295 (unregistering): Released all slaves [ 1838.508188][ T1389] bond1294 (unregistering): (slave batadv1152): Releasing backup interface [ 1838.549186][ T1389] batadv1152 (unregistering): left promiscuous mode [ 1838.557041][ T1389] bond1294 (unregistering): Released all slaves 21:54:54 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="fe000000eafa7240936901b0293df400100109021b0001245ab3d27c89f01ee267d3a753a80080090400000103000000090587e30b823e4c40b171c59c1e53ae4eb3206923f4"], 0x0) r1 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x3, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x7df, 0x0, 0xff, 0x8c}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0x0, 0x2}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x9, 0x4, 0x80, 0xff}, 0x2e, &(0x7f0000000fc0)=ANY=[@ANYBLOB="050f2e0003141004078caa0c97e352ec52ae7d4e784e7731f6010000003052934e9092d80c0a1003000000711f06000b1001044000ff3f1305f2e9c3d9f99b1053f0527775bbd368955933436b4853a37b000000000000000000"], 0x3, [{0xfa, &(0x7f0000000140)=@string={0xfa, 0x3, "aca9b12407e1e08071e7f9fa8b4d87a4515ba60d895af6b32273a22893ce2b6a09d699a4ad39bb56e105e9d661b7d560c46ec72f2330130c34737c9b884203362312ac426e970f1b29963686131d60718c41c420a1c0644529368bb87e313ea88d698e865f50b47bb53b23ec2402785c0cea8a1d1b6af28d9567b1ac8ef50981266db70cab0f0947e013cf5cd39026176e646d20577d29ee139b7c2d6fb932a816077c49f653a7ec26c4793addd2627a934975a07dcca83b673726ae998ab6d106ffe38a00da8a73be9b31821d2dc41840841b2a7229c3eb8123b4f15e096fc6b561d7b17040da82ca72ad97a4712c9ddcf029324b67d798"}}, {0x8d, &(0x7f0000000280)=@string={0x8d, 0x3, "b31ce3432505af37b99f9a94e7c4992ce234005251a278746170d1ab87f3c98004d493dfae6db9278838f9721591b332df5136a420132a8e870711431607f8fc16e1161fed88eaf51927c53017b7b2c99c3ab4c9d242665b9022b8793f4842aa4285d930f7f0dfc00b6af7848432b829dae118c56b87d815d23d3fdb931d72bf3df84e71e03d69d9e1a348"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x402}}]}) syz_usb_disconnect(r1) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000a00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ef, 0x81, 0x7f, 0x81}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x7, 0x7f}}]}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x200, 0x4, 0x2, 0x9, 0x20, 0x5}, 0x19, &(0x7f0000000a80)={0x5, 0xf, 0x19, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xa, 0x74, 0x1, 0x32, 0x3ff, 0x7}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0xc1a}}]}) syz_usb_control_io$printer(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000b40)={0x40, 0x11, 0x87, {0x87, 0x9, "6a82bc81992376daaee82d1dba96e1030e6ba790d799a722a5670cf42ff74137b6d38e707c8dd0e587af13ba554121d07bbb033b998ce5388f2e424fba4a24f45abdd47b53a7631cd97bad52b8fec6bd4fb6fb1a9ee631b35a04802699d4915c3069e64660a52e7a4af28886ee1ea4c9d39d3e6882b05cc5226be5cddf9bb4488f90656be5"}}, &(0x7f0000000c00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}}, &(0x7f0000000f80)={0x34, &(0x7f0000000c80)={0xa0497df6479df207, 0x30, 0xd0, "7a6e7171ddae6a4ffd5671c5c1e5caac01fb05f1048c885e83b87d3687c37225ad4b17850ecbc31378725debf094bff7e8424c60acfaac61fa58f986cdb1d2aab6a5e7ab0d93fae92ba677ed1d60612e5c1cb81aefc35989e1ffb564226ade0107ec53c0a9e3ad20ec53cb5ccd0780e4d247f72f5266d4467d2de1ffbd62a5085d06676b8c38bf011f1cb136e7a518443800eb1409d10ecc781ebe40db180680bf2eac4d226072bd2d3c31b33d17fcaec1c5355bcb75bb4260d40ef7547a99abe51472675e08c0cad7b10d120bd1a1a9"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x4f}, &(0x7f0000000e00)={0x20, 0x0, 0xc2, {0xc0, "984e39c1555dc3a01c5ec78e988bec13b4d7e444ea4cb9c3795415f8186215f184a21ab5dd8069f4de05ac8bd6f0bc34a70586cef49bdfda62629d58f96d30fe0c060c675174b6cc455faad206ab60fad9131d56231fb2344ef34758a7710da581a6f44d69bc705c56fd34d09ccb7294b404d62abdb330cd3221c6b5a527b4fc322c4e9a6fb2c37e2d5fd0573072b5944c246ad1bd262aa1e0fda368d21d6a87161cf78733308ea899204e01aa0d7f65ea992c32956fafe20e85f9189919fa35"}}, &(0x7f0000000f00)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000f40)={0x20, 0x0, 0x1, 0x5}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f00000003c0)={0x40, 0x31, 0x35, {0x35, 0x2, "4f4badeaa9b759918ff7d6e890a4d0a338703d639744a15196a1a8bc23eec7ec04be9f16ffd90a3a70cc9766a76e8b76ed0341"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, &(0x7f0000000440)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfb, 0x18, 0x5, 0xe1, "2c04ee04", "a38f75a9"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2b, 0x2, 0x1, 0xef, 0x7, 0x101}}}, &(0x7f0000000940)={0x84, &(0x7f0000000540)={0x40, 0x11, 0x12, "fcb05b607283666d3d70a229603842cef7c9"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xf8}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x280, 0x10, [0xf0]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000700)={0x40, 0xb, 0x2, "a61d"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0xbbab}, &(0x7f0000000780)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000800)={0x40, 0x19, 0x2, "b339"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x2}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="fe000000eafa7240936901b0293df400100109021b0001245ab3d27c89f01ee267d3a753a80080090400000103000000090587e30b823e4c40b171c59c1e53ae4eb3206923f4"], 0x0) (async) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x3, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x7df, 0x0, 0xff, 0x8c}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0x0, 0x2}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x9, 0x4, 0x80, 0xff}, 0x2e, &(0x7f0000000fc0)=ANY=[@ANYBLOB="050f2e0003141004078caa0c97e352ec52ae7d4e784e7731f6010000003052934e9092d80c0a1003000000711f06000b1001044000ff3f1305f2e9c3d9f99b1053f0527775bbd368955933436b4853a37b000000000000000000"], 0x3, [{0xfa, &(0x7f0000000140)=@string={0xfa, 0x3, "aca9b12407e1e08071e7f9fa8b4d87a4515ba60d895af6b32273a22893ce2b6a09d699a4ad39bb56e105e9d661b7d560c46ec72f2330130c34737c9b884203362312ac426e970f1b29963686131d60718c41c420a1c0644529368bb87e313ea88d698e865f50b47bb53b23ec2402785c0cea8a1d1b6af28d9567b1ac8ef50981266db70cab0f0947e013cf5cd39026176e646d20577d29ee139b7c2d6fb932a816077c49f653a7ec26c4793addd2627a934975a07dcca83b673726ae998ab6d106ffe38a00da8a73be9b31821d2dc41840841b2a7229c3eb8123b4f15e096fc6b561d7b17040da82ca72ad97a4712c9ddcf029324b67d798"}}, {0x8d, &(0x7f0000000280)=@string={0x8d, 0x3, "b31ce3432505af37b99f9a94e7c4992ce234005251a278746170d1ab87f3c98004d493dfae6db9278838f9721591b332df5136a420132a8e870711431607f8fc16e1161fed88eaf51927c53017b7b2c99c3ab4c9d242665b9022b8793f4842aa4285d930f7f0dfc00b6af7848432b829dae118c56b87d815d23d3fdb931d72bf3df84e71e03d69d9e1a348"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x402}}]}) (async) syz_usb_disconnect(r1) (async) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000a00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ef, 0x81, 0x7f, 0x81}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x7, 0x7f}}]}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x200, 0x4, 0x2, 0x9, 0x20, 0x5}, 0x19, &(0x7f0000000a80)={0x5, 0xf, 0x19, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xa, 0x74, 0x1, 0x32, 0x3ff, 0x7}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0xc1a}}]}) (async) syz_usb_control_io$printer(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000b40)={0x40, 0x11, 0x87, {0x87, 0x9, "6a82bc81992376daaee82d1dba96e1030e6ba790d799a722a5670cf42ff74137b6d38e707c8dd0e587af13ba554121d07bbb033b998ce5388f2e424fba4a24f45abdd47b53a7631cd97bad52b8fec6bd4fb6fb1a9ee631b35a04802699d4915c3069e64660a52e7a4af28886ee1ea4c9d39d3e6882b05cc5226be5cddf9bb4488f90656be5"}}, &(0x7f0000000c00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}}, &(0x7f0000000f80)={0x34, &(0x7f0000000c80)={0xa0497df6479df207, 0x30, 0xd0, "7a6e7171ddae6a4ffd5671c5c1e5caac01fb05f1048c885e83b87d3687c37225ad4b17850ecbc31378725debf094bff7e8424c60acfaac61fa58f986cdb1d2aab6a5e7ab0d93fae92ba677ed1d60612e5c1cb81aefc35989e1ffb564226ade0107ec53c0a9e3ad20ec53cb5ccd0780e4d247f72f5266d4467d2de1ffbd62a5085d06676b8c38bf011f1cb136e7a518443800eb1409d10ecc781ebe40db180680bf2eac4d226072bd2d3c31b33d17fcaec1c5355bcb75bb4260d40ef7547a99abe51472675e08c0cad7b10d120bd1a1a9"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x4f}, &(0x7f0000000e00)={0x20, 0x0, 0xc2, {0xc0, "984e39c1555dc3a01c5ec78e988bec13b4d7e444ea4cb9c3795415f8186215f184a21ab5dd8069f4de05ac8bd6f0bc34a70586cef49bdfda62629d58f96d30fe0c060c675174b6cc455faad206ab60fad9131d56231fb2344ef34758a7710da581a6f44d69bc705c56fd34d09ccb7294b404d62abdb330cd3221c6b5a527b4fc322c4e9a6fb2c37e2d5fd0573072b5944c246ad1bd262aa1e0fda368d21d6a87161cf78733308ea899204e01aa0d7f65ea992c32956fafe20e85f9189919fa35"}}, &(0x7f0000000f00)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000f40)={0x20, 0x0, 0x1, 0x5}}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f00000003c0)={0x40, 0x31, 0x35, {0x35, 0x2, "4f4badeaa9b759918ff7d6e890a4d0a338703d639744a15196a1a8bc23eec7ec04be9f16ffd90a3a70cc9766a76e8b76ed0341"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, &(0x7f0000000440)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfb, 0x18, 0x5, 0xe1, "2c04ee04", "a38f75a9"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2b, 0x2, 0x1, 0xef, 0x7, 0x101}}}, &(0x7f0000000940)={0x84, &(0x7f0000000540)={0x40, 0x11, 0x12, "fcb05b607283666d3d70a229603842cef7c9"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xf8}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x280, 0x10, [0xf0]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000700)={0x40, 0xb, 0x2, "a61d"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0xbbab}, &(0x7f0000000780)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000800)={0x40, 0x19, 0x2, "b339"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x2}}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) [ 1838.577706][ T1389] bond1293 (unregistering): (slave batadv1151): Releasing backup interface [ 1838.618165][ T1389] batadv1151 (unregistering): left promiscuous mode [ 1838.622524][ T1389] bond1293 (unregistering): Released all slaves [ 1838.626012][ T1389] bond1292 (unregistering): (slave batadv1150): Releasing backup interface [ 1838.678052][ T1389] batadv1150 (unregistering): left promiscuous mode [ 1838.682303][ T1389] bond1292 (unregistering): Released all slaves [ 1838.685878][ T1389] bond1291 (unregistering): (slave batadv1149): Releasing backup interface [ 1838.738326][ T1389] batadv1149 (unregistering): left promiscuous mode [ 1838.742643][ T1389] bond1291 (unregistering): Released all slaves [ 1838.746260][ T1389] bond1290 (unregistering): (slave batadv1148): Releasing backup interface [ 1838.788261][ T1389] batadv1148 (unregistering): left promiscuous mode [ 1838.793547][ T1389] bond1290 (unregistering): Released all slaves [ 1838.797739][ T1389] bond1289 (unregistering): (slave batadv1147): Releasing backup interface [ 1838.848199][ T1389] batadv1147 (unregistering): left promiscuous mode [ 1838.853200][ T1389] bond1289 (unregistering): Released all slaves [ 1838.856988][ T1389] bond1288 (unregistering): (slave batadv1146): Releasing backup interface [ 1838.908126][ T1389] batadv1146 (unregistering): left promiscuous mode [ 1838.912643][ T1389] bond1288 (unregistering): Released all slaves [ 1838.916419][ T1389] bond1287 (unregistering): (slave batadv1145): Releasing backup interface [ 1838.968359][ T1389] batadv1145 (unregistering): left promiscuous mode [ 1838.973033][ T1389] bond1287 (unregistering): Released all slaves [ 1838.978151][ T1389] bond1286 (unregistering): (slave batadv1144): Releasing backup interface [ 1839.017328][T20957] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1839.028191][ T1389] batadv1144 (unregistering): left promiscuous mode [ 1839.032587][ T1389] bond1286 (unregistering): Released all slaves [ 1839.036234][ T1389] bond1285 (unregistering): (slave batadv1143): Releasing backup interface [ 1839.088302][ T1389] batadv1143 (unregistering): left promiscuous mode [ 1839.093154][ T1389] bond1285 (unregistering): Released all slaves [ 1839.098474][ T1389] bond1284 (unregistering): (slave batadv1142): Releasing backup interface [ 1839.138150][ T1389] batadv1142 (unregistering): left promiscuous mode [ 1839.142695][ T1389] bond1284 (unregistering): Released all slaves [ 1839.146334][ T1389] bond1283 (unregistering): (slave batadv1141): Releasing backup interface [ 1839.198269][ T1389] batadv1141 (unregistering): left promiscuous mode [ 1839.203182][ T1389] bond1283 (unregistering): Released all slaves [ 1839.206936][ T1389] bond1282 (unregistering): (slave batadv1140): Releasing backup interface [ 1839.247345][T20957] usb 1-1: device descriptor read/64, error -71 [ 1839.260384][ T1389] batadv1140 (unregistering): left promiscuous mode [ 1839.265036][ T1389] bond1282 (unregistering): Released all slaves [ 1839.269215][ T1389] bond1281 (unregistering): (slave batadv1139): Releasing backup interface [ 1839.330494][ T1389] batadv1139 (unregistering): left promiscuous mode [ 1839.335200][ T1389] bond1281 (unregistering): Released all slaves [ 1839.339360][ T1389] bond1280 (unregistering): (slave batadv1138): Releasing backup interface [ 1839.388764][ T1389] batadv1138 (unregistering): left promiscuous mode [ 1839.393493][ T1389] bond1280 (unregistering): Released all slaves [ 1839.397698][ T1389] bond1279 (unregistering): (slave batadv1137): Releasing backup interface [ 1839.438265][ T1389] batadv1137 (unregistering): left promiscuous mode [ 1839.442870][ T1389] bond1279 (unregistering): Released all slaves [ 1839.446559][ T1389] bond1278 (unregistering): (slave batadv1136): Releasing backup interface [ 1839.488097][ T1389] batadv1136 (unregistering): left promiscuous mode [ 1839.492629][ T1389] bond1278 (unregistering): Released all slaves [ 1839.496271][ T1389] bond1277 (unregistering): (slave batadv1135): Releasing backup interface [ 1839.517567][T31614] Bluetooth: hci8: command 0x040f tx timeout [ 1839.527542][T20957] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1839.550907][ T1389] batadv1135 (unregistering): left promiscuous mode [ 1839.555485][ T1389] bond1277 (unregistering): Released all slaves [ 1839.559539][ T1389] bond1276 (unregistering): (slave batadv1134): Releasing backup interface [ 1839.610820][ T1389] bond1276 (unregistering): Released all slaves [ 1839.614315][ T1389] bond1275 (unregistering): (slave batadv1133): Releasing backup interface [ 1839.650933][ T1389] bond1275 (unregistering): Released all slaves [ 1839.655373][ T1389] bond1274 (unregistering): Released all slaves [ 1839.662068][ T1389] bond1273 (unregistering): Released all slaves [ 1839.666414][ T1389] bond1272 (unregistering): Released all slaves [ 1839.671656][ T1389] bond1271 (unregistering): (slave batadv1132): Releasing backup interface [ 1839.708244][ T1389] batadv1132 (unregistering): left promiscuous mode [ 1839.712910][ T1389] bond1271 (unregistering): Released all slaves [ 1839.716593][ T1389] bond1270 (unregistering): (slave batadv1131): Releasing backup interface [ 1839.727304][T20957] usb 1-1: device descriptor read/64, error -71 [ 1839.772852][ T1389] bond1270 (unregistering): Released all slaves [ 1839.776657][ T1389] bond1269 (unregistering): (slave batadv1130): Releasing backup interface [ 1839.828405][ T1389] batadv1130 (unregistering): left promiscuous mode [ 1839.832886][ T1389] bond1269 (unregistering): Released all slaves [ 1839.839345][ T1389] bond1268 (unregistering): Released all slaves [ 1839.843328][ T1389] bond1267 (unregistering): (slave batadv1129): Releasing backup interface [ 1839.847409][T20957] usb usb1-port1: attempt power cycle [ 1839.889852][ T1389] batadv1129 (unregistering): left promiscuous mode [ 1839.894790][ T1389] bond1267 (unregistering): Released all slaves [ 1839.898962][ T1389] bond1266 (unregistering): (slave batadv1128): Releasing backup interface [ 1839.958079][ T1389] batadv1128 (unregistering): left promiscuous mode [ 1839.962892][ T1389] bond1266 (unregistering): Released all slaves [ 1839.977491][ T1389] bond1265 (unregistering): (slave batadv1127): Releasing backup interface [ 1840.038081][ T1389] batadv1127 (unregistering): left promiscuous mode [ 1840.045001][ T1389] bond1265 (unregistering): Released all slaves [ 1840.049343][ T1389] bond1264 (unregistering): (slave batadv1126): Releasing backup interface [ 1840.099648][ T1389] batadv1126 (unregistering): left promiscuous mode [ 1840.104368][ T1389] bond1264 (unregistering): Released all slaves [ 1840.110930][ T1389] bond1263 (unregistering): Released all slaves [ 1840.114833][ T1389] bond1262 (unregistering): (slave batadv1125): Releasing backup interface [ 1840.178118][ T1389] batadv1125 (unregistering): left promiscuous mode [ 1840.182506][ T1389] bond1262 (unregistering): Released all slaves [ 1840.186282][ T1389] bond1261 (unregistering): (slave batadv1124): Releasing backup interface [ 1840.238252][ T1389] batadv1124 (unregistering): left promiscuous mode [ 1840.242468][ T1389] bond1261 (unregistering): Released all slaves [ 1840.246021][ T1389] bond1260 (unregistering): (slave batadv1123): Releasing backup interface [ 1840.277341][T20957] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1840.298093][ T1389] batadv1123 (unregistering): left promiscuous mode [ 1840.302340][ T1389] bond1260 (unregistering): Released all slaves [ 1840.306440][ T1389] bond1259 (unregistering): (slave batadv1122): Releasing backup interface [ 1840.348242][ T1389] batadv1122 (unregistering): left promiscuous mode [ 1840.352928][ T1389] bond1259 (unregistering): Released all slaves [ 1840.356641][ T1389] bond1258 (unregistering): (slave batadv1121): Releasing backup interface [ 1840.377366][T20957] usb 1-1: device descriptor read/8, error -71 [ 1840.418147][ T1389] batadv1121 (unregistering): left promiscuous mode [ 1840.422738][ T1389] bond1258 (unregistering): Released all slaves [ 1840.426539][ T1389] bond1257 (unregistering): (slave batadv1120): Releasing backup interface [ 1840.478868][ T1389] batadv1120 (unregistering): left promiscuous mode [ 1840.483445][ T1389] bond1257 (unregistering): Released all slaves [ 1840.487796][ T1389] bond1256 (unregistering): (slave batadv1119): Releasing backup interface [ 1840.538342][ T1389] batadv1119 (unregistering): left promiscuous mode [ 1840.546223][ T1389] bond1256 (unregistering): Released all slaves [ 1840.550314][ T1389] bond1255 (unregistering): (slave batadv1118): Releasing backup interface [ 1840.598348][ T1389] batadv1118 (unregistering): left promiscuous mode [ 1840.602986][ T1389] bond1255 (unregistering): Released all slaves [ 1840.606763][ T1389] bond1254 (unregistering): (slave batadv1117): Releasing backup interface [ 1840.647654][T20957] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1840.658257][ T1389] batadv1117 (unregistering): left promiscuous mode [ 1840.664059][ T1389] bond1254 (unregistering): Released all slaves [ 1840.668137][ T1389] bond1253 (unregistering): (slave batadv1116): Releasing backup interface [ 1840.708124][ T1389] batadv1116 (unregistering): left promiscuous mode [ 1840.712750][ T1389] bond1253 (unregistering): Released all slaves [ 1840.717533][ T1389] bond1252 (unregistering): Released all slaves [ 1840.722747][ T1389] bond1251 (unregistering): (slave batadv1115): Releasing backup interface [ 1840.767409][T20957] usb 1-1: device descriptor read/8, error -71 [ 1840.768285][ T1389] batadv1115 (unregistering): left promiscuous mode [ 1840.773532][ T1389] bond1251 (unregistering): Released all slaves [ 1840.777570][ T1389] bond1250 (unregistering): (slave batadv1114): Releasing backup interface [ 1840.829415][ T1389] batadv1114 (unregistering): left promiscuous mode [ 1840.834211][ T1389] bond1250 (unregistering): Released all slaves [ 1840.838514][ T1389] bond1249 (unregistering): (slave batadv1113): Releasing backup interface [ 1840.878468][ T1389] batadv1113 (unregistering): left promiscuous mode [ 1840.883055][ T1389] bond1249 (unregistering): Released all slaves [ 1840.887407][T20957] usb usb1-port1: unable to enumerate USB device [ 1840.889279][ T1389] bond1248 (unregistering): (slave batadv1112): Releasing backup interface [ 1840.951651][ T1389] bond1248 (unregistering): Released all slaves [ 1840.955547][ T1389] bond1247 (unregistering): (slave batadv1111): Releasing backup interface [ 1841.008352][ T1389] batadv1111 (unregistering): left promiscuous mode [ 1841.012789][ T1389] bond1247 (unregistering): Released all slaves [ 1841.016655][ T1389] bond1246 (unregistering): (slave batadv1110): Releasing backup interface [ 1841.068330][ T1389] batadv1110 (unregistering): left promiscuous mode [ 1841.072927][ T1389] bond1246 (unregistering): Released all slaves [ 1841.077716][ T1389] bond1245 (unregistering): Released all slaves [ 1841.081666][ T1389] bond1244 (unregistering): (slave batadv1109): Releasing backup interface [ 1841.128123][ T1389] batadv1109 (unregistering): left promiscuous mode [ 1841.132525][ T1389] bond1244 (unregistering): Released all slaves [ 1841.140329][ T1389] bond1243 (unregistering): (slave batadv1108): Releasing backup interface [ 1841.198099][ T1389] batadv1108 (unregistering): left promiscuous mode [ 1841.202517][ T1389] bond1243 (unregistering): Released all slaves [ 1841.207384][ T1389] bond1242 (unregistering): (slave batadv1107): Releasing backup interface [ 1841.248049][ T1389] batadv1107 (unregistering): left promiscuous mode [ 1841.252603][ T1389] bond1242 (unregistering): Released all slaves [ 1841.258732][ T1389] bond1241 (unregistering): (slave batadv1106): Releasing backup interface [ 1841.298113][ T1389] batadv1106 (unregistering): left promiscuous mode [ 1841.305828][ T1389] bond1241 (unregistering): Released all slaves [ 1841.312849][ T1389] bond1240 (unregistering): (slave batadv1105): Releasing backup interface [ 1841.358159][ T1389] batadv1105 (unregistering): left promiscuous mode [ 1841.363940][ T1389] bond1240 (unregistering): Released all slaves [ 1841.368122][ T1389] bond1239 (unregistering): (slave batadv1104): Releasing backup interface [ 1841.429120][ T1389] batadv1104 (unregistering): left promiscuous mode [ 1841.433551][ T1389] bond1239 (unregistering): Released all slaves [ 1841.437748][ T1389] bond1238 (unregistering): (slave batadv1103): Releasing backup interface [ 1841.488330][ T1389] batadv1103 (unregistering): left promiscuous mode [ 1841.492855][ T1389] bond1238 (unregistering): Released all slaves [ 1841.496594][ T1389] bond1237 (unregistering): (slave batadv1102): Releasing backup interface [ 1841.548179][ T1389] batadv1102 (unregistering): left promiscuous mode [ 1841.560076][ T1389] bond1237 (unregistering): Released all slaves [ 1841.563800][ T1389] bond1236 (unregistering): (slave batadv1101): Releasing backup interface 21:54:57 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090587e3"], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x40, 0xb, 0xa5, {0xa5, 0x1, "0b1b47540bade15b2fcccecce0a7f2b90a6baf4299bad86197bc463031ae29bd4304d16ec358dcee761739e30591b2407abb0aa292f3069162a723baee37b8d7f8f26b41b4b523437dddbdcc1a5bf02de53698878cd092635fba5fb6e8c216a3e92d89882f66d221ab60b36711f72c271cc01627d02be65b47f536b24fc57ba0c2471531f540f6f6b19f9199ab60912b6f65a1428ec35f0c983080a76fede872ac805e"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x480a}}, &(0x7f0000000100)={0x0, 0xf, 0x74, {0x5, 0xf, 0x74, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x5, 0x3f, 0x50db}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x6, 0xb, 0x101}, @ptm_cap={0x3}, @generic={0x5b, 0x10, 0x4, "ca453ced76f2a0107cba1c027e2f35c93211fe42a85071bf554a88cebc64b2d23c7ae61bdf83a3c4ebdd06c42e2997aeb3f1c3acadcbd24b64063dacf8af746fe4b3de324be0e98c60a7dc59956d04304c00ff93a530c0fa"}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x1, 0x5, 0x7, "6ae77ad3", "6d5fe15d"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x8, 0x9, 0x40, 0x4, 0x8}}}, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x20, 0x3, 0xad, "debd15324e5199068140312b312903b797c366751ba23b29f8af30509d4400b4655a66015d50a6ebee107258dd1ce3e69bf2f53cd3349cf98fc2ce4783135d04199e37b92c63b0425761be96cd2cb27630d213877d7d20ab4545fe6562b5c0118b3e19f1c8dfbb95a37c1ca042098a866f8db1636c0c93773a029e5f8c4442aef0a3143b396f604d60bca926b04b0237358835f455bcad3bc71e3e6a0f26ff3d4da12e63dfa10dcce9a81801a0"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xb1}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0x400, 0x10, [0xf00]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x7f}, &(0x7f00000004c0)={0x40, 0xb, 0x2, '!;'}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000540)={0x40, 0x13, 0x6}, &(0x7f0000000580)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "f8b3"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x81}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x40}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x40}}) [ 1841.599186][ T1389] batadv1101 (unregistering): left promiscuous mode [ 1841.605218][ T1389] bond1236 (unregistering): Released all slaves [ 1841.607509][T31614] Bluetooth: hci8: command 0x0419 tx timeout [ 1841.611206][ T1389] bond1235 (unregistering): (slave batadv1100): Releasing backup interface [ 1841.650087][ T1389] batadv1100 (unregistering): left promiscuous mode [ 1841.654476][ T1389] bond1235 (unregistering): Released all slaves [ 1841.658411][ T1389] bond1234 (unregistering): (slave batadv1099): Releasing backup interface [ 1841.708147][ T1389] batadv1099 (unregistering): left promiscuous mode [ 1841.712426][ T1389] bond1234 (unregistering): Released all slaves [ 1841.716006][ T1389] bond1233 (unregistering): (slave batadv1098): Releasing backup interface [ 1841.768066][ T1389] batadv1098 (unregistering): left promiscuous mode [ 1841.772582][ T1389] bond1233 (unregistering): Released all slaves [ 1841.777381][ T1389] bond1232 (unregistering): (slave batadv1097): Releasing backup interface [ 1841.828307][ T1389] batadv1097 (unregistering): left promiscuous mode [ 1841.833209][ T1389] bond1232 (unregistering): Released all slaves [ 1841.836940][ T1389] bond1231 (unregistering): (slave batadv1096): Releasing backup interface [ 1841.888736][ T1389] batadv1096 (unregistering): left promiscuous mode [ 1841.893636][ T1389] bond1231 (unregistering): Released all slaves [ 1841.897698][ T1389] bond1230 (unregistering): (slave batadv1095): Releasing backup interface [ 1841.968198][ T1389] batadv1095 (unregistering): left promiscuous mode [ 1841.972729][ T1389] bond1230 (unregistering): Released all slaves [ 1841.976405][ T1389] bond1229 (unregistering): (slave batadv1094): Releasing backup interface [ 1842.028116][ T1389] batadv1094 (unregistering): left promiscuous mode [ 1842.032997][ T1389] bond1229 (unregistering): Released all slaves [ 1842.038894][ T1389] bond1228 (unregistering): (slave batadv1093): Releasing backup interface [ 1842.067469][T21206] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1842.098191][ T1389] batadv1093 (unregistering): left promiscuous mode [ 1842.102789][ T1389] bond1228 (unregistering): Released all slaves [ 1842.107777][ T1389] bond1227 (unregistering): (slave batadv1092): Releasing backup interface [ 1842.148051][ T1389] batadv1092 (unregistering): left promiscuous mode [ 1842.152408][ T1389] bond1227 (unregistering): Released all slaves [ 1842.157189][ T1389] bond1226 (unregistering): (slave batadv1091): Releasing backup interface [ 1842.228329][ T1389] batadv1091 (unregistering): left promiscuous mode [ 1842.236057][ T1389] bond1226 (unregistering): Released all slaves [ 1842.240010][ T1389] bond1225 (unregistering): (slave batadv1090): Releasing backup interface [ 1842.278407][ T1389] batadv1090 (unregistering): left promiscuous mode [ 1842.282683][ T1389] bond1225 (unregistering): Released all slaves [ 1842.286907][ T1389] bond1224 (unregistering): (slave batadv1089): Releasing backup interface [ 1842.338225][ T1389] batadv1089 (unregistering): left promiscuous mode [ 1842.342812][ T1389] bond1224 (unregistering): Released all slaves [ 1842.346541][ T1389] bond1223 (unregistering): (slave batadv1088): Releasing backup interface [ 1842.408055][ T1389] batadv1088 (unregistering): left promiscuous mode [ 1842.413062][ T1389] bond1223 (unregistering): Released all slaves [ 1842.417083][ T1389] bond1222 (unregistering): (slave batadv1087): Releasing backup interface [ 1842.457360][T21206] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1842.461015][ T1389] batadv1087 (unregistering): left promiscuous mode [ 1842.463589][T21206] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1842.469272][ T1389] bond1222 (unregistering): Released all slaves [ 1842.473070][ T1389] bond1221 (unregistering): (slave batadv1086): Releasing backup interface [ 1842.538445][ T1389] batadv1086 (unregistering): left promiscuous mode [ 1842.543142][ T1389] bond1221 (unregistering): Released all slaves [ 1842.546978][ T1389] bond1220 (unregistering): (slave batadv1085): Releasing backup interface [ 1842.577508][T21206] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1842.580035][T21206] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1842.582267][T21206] usb 1-1: Manufacturer: syz [ 1842.583513][T21206] usb 1-1: SerialNumber: syz [ 1842.628262][ T1389] batadv1085 (unregistering): left promiscuous mode [ 1842.632770][ T1389] bond1220 (unregistering): Released all slaves [ 1842.636512][ T1389] bond1219 (unregistering): (slave batadv1084): Releasing backup interface [ 1842.708097][ T1389] batadv1084 (unregistering): left promiscuous mode [ 1842.713639][ T1389] bond1219 (unregistering): Released all slaves [ 1842.719593][ T1389] bond1218 (unregistering): (slave batadv1083): Releasing backup interface [ 1842.758090][ T1389] batadv1083 (unregistering): left promiscuous mode [ 1842.762468][ T1389] bond1218 (unregistering): Released all slaves [ 1842.766080][ T1389] bond1217 (unregistering): (slave batadv1082): Releasing backup interface [ 1842.808003][ T1389] batadv1082 (unregistering): left promiscuous mode [ 1842.812520][ T1389] bond1217 (unregistering): Released all slaves [ 1842.816140][ T1389] bond1216 (unregistering): (slave batadv1081): Releasing backup interface [ 1842.848405][T21206] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 1842.850556][T21206] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input288 [ 1842.868146][ T1389] batadv1081 (unregistering): left promiscuous mode [ 1842.874079][ T1389] bond1216 (unregistering): Released all slaves [ 1842.878122][ T1389] bond1215 (unregistering): (slave batadv1080): Releasing backup interface [ 1842.918277][ T1389] batadv1080 (unregistering): left promiscuous mode [ 1842.923235][ T1389] bond1215 (unregistering): Released all slaves [ 1842.926993][ T1389] bond1214 (unregistering): (slave batadv1079): Releasing backup interface [ 1842.988037][ T1389] batadv1079 (unregistering): left promiscuous mode [ 1842.992437][ T1389] bond1214 (unregistering): Released all slaves [ 1842.996249][ T1389] bond1213 (unregistering): (slave batadv1078): Releasing backup interface [ 1843.048110][ T1389] batadv1078 (unregistering): left promiscuous mode [ 1843.052508][ T1389] bond1213 (unregistering): Released all slaves [ 1843.058196][ T1389] bond1212 (unregistering): (slave batadv1077): Releasing backup interface [ 1843.108156][ T1389] batadv1077 (unregistering): left promiscuous mode [ 1843.112760][ T1389] bond1212 (unregistering): Released all slaves [ 1843.117212][ T1389] bond1211 (unregistering): Released all slaves [ 1843.121750][ T1389] bond1210 (unregistering): (slave batadv1076): Releasing backup interface [ 1843.168644][ T1389] batadv1076 (unregistering): left promiscuous mode [ 1843.173091][ T1389] bond1210 (unregistering): Released all slaves [ 1843.176827][ T1389] bond1209 (unregistering): (slave batadv1075): Releasing backup interface [ 1843.248263][ T1389] batadv1075 (unregistering): left promiscuous mode [ 1843.252997][ T1389] bond1209 (unregistering): Released all slaves [ 1843.256758][ T1389] bond1208 (unregistering): (slave batadv1074): Releasing backup interface [ 1843.308034][ T1389] batadv1074 (unregistering): left promiscuous mode [ 1843.312640][ T1389] bond1208 (unregistering): Released all slaves [ 1843.316291][ T1389] bond1207 (unregistering): (slave batadv1073): Releasing backup interface [ 1843.378952][ T1389] batadv1073 (unregistering): left promiscuous mode [ 1843.383336][ T1389] bond1207 (unregistering): Released all slaves [ 1843.387949][ T1389] bond1206 (unregistering): (slave batadv1072): Releasing backup interface [ 1843.448386][ T1389] batadv1072 (unregistering): left promiscuous mode [ 1843.458809][ T1389] bond1206 (unregistering): Released all slaves [ 1843.462307][ T1389] bond1205 (unregistering): (slave batadv1071): Releasing backup interface [ 1843.518447][ T1389] batadv1071 (unregistering): left promiscuous mode [ 1843.523127][ T1389] bond1205 (unregistering): Released all slaves [ 1843.526923][ T1389] bond1204 (unregistering): (slave batadv1070): Releasing backup interface [ 1843.579098][ T1389] batadv1070 (unregistering): left promiscuous mode [ 1843.583582][ T1389] bond1204 (unregistering): Released all slaves [ 1843.587782][ T1389] bond1203 (unregistering): (slave batadv1069): Releasing backup interface [ 1843.649048][ T1389] batadv1069 (unregistering): left promiscuous mode [ 1843.653462][ T1389] bond1203 (unregistering): Released all slaves [ 1843.657205][ T1389] bond1202 (unregistering): (slave batadv1068): Releasing backup interface [ 1843.719074][ T1389] batadv1068 (unregistering): left promiscuous mode [ 1843.724103][ T1389] bond1202 (unregistering): Released all slaves [ 1843.729114][ T1389] bond1201 (unregistering): (slave batadv1067): Releasing backup interface [ 1843.778207][ T1389] batadv1067 (unregistering): left promiscuous mode [ 1843.782793][ T1389] bond1201 (unregistering): Released all slaves [ 1843.786577][ T1389] bond1200 (unregistering): (slave batadv1066): Releasing backup interface [ 1843.838183][ T1389] batadv1066 (unregistering): left promiscuous mode [ 1843.842508][ T1389] bond1200 (unregistering): Released all slaves [ 1843.846247][ T1389] bond1199 (unregistering): (slave batadv1065): Releasing backup interface [ 1843.898818][ T1389] batadv1065 (unregistering): left promiscuous mode [ 1843.903110][ T1389] bond1199 (unregistering): Released all slaves [ 1843.906891][ T1389] bond1198 (unregistering): (slave batadv1064): Releasing backup interface [ 1843.958115][ T1389] batadv1064 (unregistering): left promiscuous mode [ 1843.964088][ T1389] bond1198 (unregistering): Released all slaves [ 1843.968183][ T1389] bond1197 (unregistering): (slave batadv1063): Releasing backup interface [ 1844.043857][ T1389] batadv1063 (unregistering): left promiscuous mode [ 1844.051159][ T1389] bond1197 (unregistering): Released all slaves [ 1844.058823][ T1389] bond1196 (unregistering): (slave batadv1062): Releasing backup interface [ 1844.098169][ T1389] batadv1062 (unregistering): left promiscuous mode [ 1844.102531][ T1389] bond1196 (unregistering): Released all slaves [ 1844.108689][ T1389] bond1195 (unregistering): (slave batadv1061): Releasing backup interface [ 1844.158588][ T1389] batadv1061 (unregistering): left promiscuous mode [ 1844.164187][ T1389] bond1195 (unregistering): Released all slaves [ 1844.168173][ T1389] bond1194 (unregistering): (slave batadv1060): Releasing backup interface [ 1844.218024][ T1389] batadv1060 (unregistering): left promiscuous mode [ 1844.222411][ T1389] bond1194 (unregistering): Released all slaves [ 1844.226111][ T1389] bond1193 (unregistering): (slave batadv1059): Releasing backup interface [ 1844.299243][ T1389] batadv1059 (unregistering): left promiscuous mode [ 1844.303601][ T1389] bond1193 (unregistering): Released all slaves [ 1844.307745][ T1389] bond1192 (unregistering): (slave batadv1058): Releasing backup interface [ 1844.368305][ T1389] batadv1058 (unregistering): left promiscuous mode [ 1844.372861][ T1389] bond1192 (unregistering): Released all slaves [ 1844.376655][ T1389] bond1191 (unregistering): (slave batadv1057): Releasing backup interface [ 1844.428234][ T1389] batadv1057 (unregistering): left promiscuous mode [ 1844.434738][ T1389] bond1191 (unregistering): Released all slaves [ 1844.439407][ T1389] bond1190 (unregistering): (slave batadv1056): Releasing backup interface [ 1844.518326][ T1389] batadv1056 (unregistering): left promiscuous mode [ 1844.523098][ T1389] bond1190 (unregistering): Released all slaves [ 1844.528221][ T1389] bond1189 (unregistering): Released all slaves [ 1844.533003][ T1389] bond1188 (unregistering): Released all slaves [ 1844.541558][ T1389] bond1187 (unregistering): Released all slaves [ 1844.545922][ T1389] bond1186 (unregistering): Released all slaves [ 1844.550509][ T1389] bond1185 (unregistering): Released all slaves [ 1844.555026][ T1389] bond1184 (unregistering): Released all slaves [ 1844.559983][ T1389] bond1183 (unregistering): Released all slaves [ 1844.563739][ T1389] bond1182 (unregistering): (slave batadv1055): Releasing backup interface [ 1844.588320][ T1389] batadv1055 (unregistering): left promiscuous mode [ 1844.592812][ T1389] bond1182 (unregistering): Released all slaves [ 1844.597726][ T1389] bond1181 (unregistering): Released all slaves [ 1844.601554][ T1389] bond1180 (unregistering): (slave batadv1054): Releasing backup interface [ 1844.648146][ T1389] batadv1054 (unregistering): left promiscuous mode [ 1844.652804][ T1389] bond1180 (unregistering): Released all slaves [ 1844.656575][ T1389] bond1179 (unregistering): (slave batadv1053): Releasing backup interface [ 1844.718369][ T1389] batadv1053 (unregistering): left promiscuous mode [ 1844.722827][ T1389] bond1179 (unregistering): Released all slaves [ 1844.726550][ T1389] bond1178 (unregistering): (slave batadv1052): Releasing backup interface [ 1844.779724][ T1389] batadv1052 (unregistering): left promiscuous mode [ 1844.785658][ T1389] bond1178 (unregistering): Released all slaves [ 1844.792071][ T1389] bond1177 (unregistering): Released all slaves [ 1844.795726][ T1389] bond1176 (unregistering): (slave batadv1051): Releasing backup interface [ 1844.840854][ T1389] bond1176 (unregistering): Released all slaves [ 1844.844644][ T1389] bond1175 (unregistering): (slave batadv1050): Releasing backup interface [ 1844.908131][ T1389] batadv1050 (unregistering): left promiscuous mode [ 1844.912719][ T1389] bond1175 (unregistering): Released all slaves [ 1844.916764][ T1389] bond1174 (unregistering): (slave batadv1049): Releasing backup interface [ 1844.968396][ T1389] batadv1049 (unregistering): left promiscuous mode [ 1844.974508][ T1389] bond1174 (unregistering): Released all slaves [ 1844.979328][ T1389] bond1173 (unregistering): Released all slaves [ 1844.984998][ T1389] bond1172 (unregistering): Released all slaves [ 1844.989118][ T1389] bond1171 (unregistering): (slave batadv1048): Releasing backup interface [ 1845.031040][ T1389] bond1171 (unregistering): Released all slaves [ 1845.035664][ T1389] bond1170 (unregistering): Released all slaves [ 1845.040150][ T1389] bond1169 (unregistering): (slave batadv1047): Releasing backup interface [ 1845.088227][ T1389] batadv1047 (unregistering): left promiscuous mode [ 1845.092767][ T1389] bond1169 (unregistering): Released all slaves [ 1845.096558][ T1389] bond1168 (unregistering): (slave batadv1046): Releasing backup interface [ 1845.148123][ T1389] batadv1046 (unregistering): left promiscuous mode [ 1845.152713][ T1389] bond1168 (unregistering): Released all slaves [ 1845.159408][ T1389] bond1167 (unregistering): Released all slaves [ 1845.163163][ T1389] bond1166 (unregistering): (slave batadv1045): Releasing backup interface [ 1845.210872][ T1389] bond1166 (unregistering): Released all slaves [ 1845.214620][ T1389] bond1165 (unregistering): (slave batadv1044): Releasing backup interface [ 1845.248551][ T1389] batadv1044 (unregistering): left promiscuous mode [ 1845.253345][ T1389] bond1165 (unregistering): Released all slaves [ 1845.258058][ T1389] bond1164 (unregistering): (slave batadv1043): Releasing backup interface [ 1845.340668][ T1389] batadv1043 (unregistering): left promiscuous mode [ 1845.345117][ T1389] bond1164 (unregistering): Released all slaves [ 1845.349918][ T1389] bond1163 (unregistering): Released all slaves [ 1845.353479][ T1389] bond1162 (unregistering): (slave batadv1042): Releasing backup interface [ 1845.408150][ T1389] batadv1042 (unregistering): left promiscuous mode [ 1845.412537][ T1389] bond1162 (unregistering): Released all slaves [ 1845.418875][ T1389] bond1161 (unregistering): (slave batadv1041): Releasing backup interface [ 1845.469237][ T1389] batadv1041 (unregistering): left promiscuous mode [ 1845.474006][ T1389] bond1161 (unregistering): Released all slaves [ 1845.482390][ T1389] bond1160 (unregistering): (slave batadv1040): Releasing backup interface [ 1845.521816][ T1389] bond1160 (unregistering): Released all slaves [ 1845.525819][ T1389] bond1159 (unregistering): (slave batadv1039): Releasing backup interface [ 1845.579045][ T1389] batadv1039 (unregistering): left promiscuous mode [ 1845.583433][ T1389] bond1159 (unregistering): Released all slaves [ 1845.587069][ T1389] bond1158 (unregistering): (slave batadv1038): Releasing backup interface [ 1845.638116][ T1389] batadv1038 (unregistering): left promiscuous mode [ 1845.642709][ T1389] bond1158 (unregistering): Released all slaves [ 1845.646710][ T1389] bond1157 (unregistering): (slave batadv1037): Releasing backup interface [ 1845.677307][ C1] yealink 1-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1845.688044][ T1389] batadv1037 (unregistering): left promiscuous mode [ 1845.692462][ T1389] bond1157 (unregistering): Released all slaves [ 1845.696807][ T1389] bond1156 (unregistering): Released all slaves [ 1845.702317][ T1389] bond1155 (unregistering): Released all slaves [ 1845.706035][ T1389] bond1154 (unregistering): (slave batadv1036): Releasing backup interface [ 1845.758286][ T1389] batadv1036 (unregistering): left promiscuous mode [ 1845.762900][ T1389] bond1154 (unregistering): Released all slaves [ 1845.766767][ T1389] bond1153 (unregistering): (slave batadv1035): Releasing backup interface [ 1845.818676][ T1389] batadv1035 (unregistering): left promiscuous mode [ 1845.823125][ T1389] bond1153 (unregistering): Released all slaves [ 1845.826956][ T1389] bond1152 (unregistering): (slave batadv1034): Releasing backup interface [ 1845.878061][ T1389] batadv1034 (unregistering): left promiscuous mode [ 1845.880413][T21206] usb 1-1: USB disconnect, device number 107 [ 1845.885662][ T1389] bond1152 (unregistering): Released all slaves [ 1845.890346][ T1389] bond1151 (unregistering): (slave batadv1033): Releasing backup interface [ 1845.928208][ T1389] batadv1033 (unregistering): left promiscuous mode [ 1845.932853][ T1389] bond1151 (unregistering): Released all slaves [ 1845.936716][ T1389] bond1150 (unregistering): (slave batadv1032): Releasing backup interface [ 1845.992474][ T1389] bond1150 (unregistering): Released all slaves [ 1845.996225][ T1389] bond1149 (unregistering): (slave batadv1031): Releasing backup interface [ 1846.050971][ T1389] bond1149 (unregistering): Released all slaves [ 1846.054845][ T1389] bond1148 (unregistering): (slave batadv1030): Releasing backup interface [ 1846.128230][ T1389] batadv1030 (unregistering): left promiscuous mode [ 1846.132755][ T1389] bond1148 (unregistering): Released all slaves [ 1846.137645][ T1389] bond1147 (unregistering): (slave batadv1029): Releasing backup interface [ 1846.183053][ T1389] bond1147 (unregistering): Released all slaves [ 1846.187673][ T1389] bond1146 (unregistering): (slave batadv1028): Releasing backup interface [ 1846.241097][ T2251] ieee802154 phy0 wpan0: encryption failed: -22 [ 1846.242729][ T2251] ieee802154 phy1 wpan1: encryption failed: -22 [ 1846.244771][ T2251] ================================================================== [ 1846.246897][ T2251] BUG: KASAN: slab-use-after-free in tty_write_room+0x3c/0x8c [ 1846.248906][ T2251] Read of size 8 at addr ffff0001380e9020 by task aoe_tx0/2251 [ 1846.250910][ T2251] [ 1846.251531][ T2251] CPU: 1 PID: 2251 Comm: aoe_tx0 Tainted: G B 6.8.0-rc4-syzkaller-g905b00721763 #0 [ 1846.254413][ T2251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1846.257129][ T2251] Call trace: [ 1846.257997][ T2251] dump_backtrace+0x1b8/0x1e4 [ 1846.259246][ T2251] show_stack+0x2c/0x3c [ 1846.260323][ T2251] dump_stack_lvl+0xd0/0x124 [ 1846.261632][ T2251] print_report+0x178/0x518 [ 1846.262846][ T2251] kasan_report+0xd8/0x138 [ 1846.264036][ T2251] __asan_report_load8_noabort+0x20/0x2c [ 1846.265548][ T2251] tty_write_room+0x3c/0x8c [ 1846.266761][ T2251] handle_tx+0x120/0x604 [ 1846.267907][ T2251] caif_xmit+0x108/0x150 [ 1846.269042][ T2251] dev_hard_start_xmit+0x240/0x8ac [ 1846.270361][ T2251] __dev_queue_xmit+0x15b0/0x329c [ 1846.271697][ T2251] tx+0x90/0x138 [ 1846.272648][ T2251] kthread+0x1ac/0x374 [ 1846.273734][ T2251] kthread+0x288/0x310 [ 1846.274826][ T2251] ret_from_fork+0x10/0x20 [ 1846.276021][ T2251] [ 1846.276636][ T2251] The buggy address belongs to the object at ffff0001380e9000 [ 1846.276636][ T2251] which belongs to the cache kmalloc-cg-2k of size 2048 [ 1846.280327][ T2251] The buggy address is located 32 bytes inside of [ 1846.280327][ T2251] freed 2048-byte region [ffff0001380e9000, ffff0001380e9800) [ 1846.284013][ T2251] [ 1846.284627][ T2251] The buggy address belongs to the physical page: [ 1846.286337][ T2251] page:000000005b3841b7 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0001380e9000 pfn:0x1780e8 [ 1846.289419][ T2251] head:000000005b3841b7 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1846.291832][ T2251] memcg:ffff0000c9d500c1 [ 1846.292964][ T2251] flags: 0x5ffc00000000a40(workingset|slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 1846.295382][ T2251] page_type: 0xffffffff() [ 1846.296553][ T2251] raw: 05ffc00000000a40 ffff0000c000f3c0 fffffdffc3609810 fffffdffc460b010 [ 1846.298885][ T2251] raw: ffff0001380e9000 0000000000080006 00000001ffffffff ffff0000c9d500c1 [ 1846.301170][ T2251] page dumped because: kasan: bad access detected [ 1846.302874][ T2251] [ 1846.303478][ T2251] Memory state around the buggy address: [ 1846.304992][ T2251] ffff0001380e8f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1846.307150][ T2251] ffff0001380e8f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1846.309300][ T2251] >ffff0001380e9000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1846.311464][ T2251] ^ [ 1846.312826][ T2251] ffff0001380e9080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1846.314980][ T2251] ffff0001380e9100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1846.317137][ T2251] ================================================================== [ 1846.328232][ T1389] batadv1028 (unregistering): left promiscuous mode [ 1846.335399][ T1389] bond1146 (unregistering): Released all slaves [ 1846.339379][ T1389] bond1145 (unregistering): (slave batadv1027): Releasing backup interface [ 1846.402992][ T1389] bond1145 (unregistering): Released all slaves [ 1846.406840][ T1389] bond1144 (unregistering): (slave batadv1026): Releasing backup interface 21:55:02 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090587e3"], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x40, 0xb, 0xa5, {0xa5, 0x1, "0b1b47540bade15b2fcccecce0a7f2b90a6baf4299bad86197bc463031ae29bd4304d16ec358dcee761739e30591b2407abb0aa292f3069162a723baee37b8d7f8f26b41b4b523437dddbdcc1a5bf02de53698878cd092635fba5fb6e8c216a3e92d89882f66d221ab60b36711f72c271cc01627d02be65b47f536b24fc57ba0c2471531f540f6f6b19f9199ab60912b6f65a1428ec35f0c983080a76fede872ac805e"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x480a}}, &(0x7f0000000100)={0x0, 0xf, 0x74, {0x5, 0xf, 0x74, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x5, 0x3f, 0x50db}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x6, 0xb, 0x101}, @ptm_cap={0x3}, @generic={0x5b, 0x10, 0x4, "ca453ced76f2a0107cba1c027e2f35c93211fe42a85071bf554a88cebc64b2d23c7ae61bdf83a3c4ebdd06c42e2997aeb3f1c3acadcbd24b64063dacf8af746fe4b3de324be0e98c60a7dc59956d04304c00ff93a530c0fa"}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x1, 0x5, 0x7, "6ae77ad3", "6d5fe15d"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x8, 0x9, 0x40, 0x4, 0x8}}}, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x20, 0x3, 0xad, "debd15324e5199068140312b312903b797c366751ba23b29f8af30509d4400b4655a66015d50a6ebee107258dd1ce3e69bf2f53cd3349cf98fc2ce4783135d04199e37b92c63b0425761be96cd2cb27630d213877d7d20ab4545fe6562b5c0118b3e19f1c8dfbb95a37c1ca042098a866f8db1636c0c93773a029e5f8c4442aef0a3143b396f604d60bca926b04b0237358835f455bcad3bc71e3e6a0f26ff3d4da12e63dfa10dcce9a81801a0"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xb1}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0x400, 0x10, [0xf00]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x7f}, &(0x7f00000004c0)={0x40, 0xb, 0x2, '!;'}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000540)={0x40, 0x13, 0x6}, &(0x7f0000000580)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "f8b3"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x81}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x40}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x40}}) syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090587e3"], 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x40, 0xb, 0xa5, {0xa5, 0x1, "0b1b47540bade15b2fcccecce0a7f2b90a6baf4299bad86197bc463031ae29bd4304d16ec358dcee761739e30591b2407abb0aa292f3069162a723baee37b8d7f8f26b41b4b523437dddbdcc1a5bf02de53698878cd092635fba5fb6e8c216a3e92d89882f66d221ab60b36711f72c271cc01627d02be65b47f536b24fc57ba0c2471531f540f6f6b19f9199ab60912b6f65a1428ec35f0c983080a76fede872ac805e"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x480a}}, &(0x7f0000000100)={0x0, 0xf, 0x74, {0x5, 0xf, 0x74, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x5, 0x3f, 0x50db}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x6, 0xb, 0x101}, @ptm_cap={0x3}, @generic={0x5b, 0x10, 0x4, "ca453ced76f2a0107cba1c027e2f35c93211fe42a85071bf554a88cebc64b2d23c7ae61bdf83a3c4ebdd06c42e2997aeb3f1c3acadcbd24b64063dacf8af746fe4b3de324be0e98c60a7dc59956d04304c00ff93a530c0fa"}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x1, 0x5, 0x7, "6ae77ad3", "6d5fe15d"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x8, 0x9, 0x40, 0x4, 0x8}}}, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x20, 0x3, 0xad, "debd15324e5199068140312b312903b797c366751ba23b29f8af30509d4400b4655a66015d50a6ebee107258dd1ce3e69bf2f53cd3349cf98fc2ce4783135d04199e37b92c63b0425761be96cd2cb27630d213877d7d20ab4545fe6562b5c0118b3e19f1c8dfbb95a37c1ca042098a866f8db1636c0c93773a029e5f8c4442aef0a3143b396f604d60bca926b04b0237358835f455bcad3bc71e3e6a0f26ff3d4da12e63dfa10dcce9a81801a0"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xb1}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0x400, 0x10, [0xf00]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x7f}, &(0x7f00000004c0)={0x40, 0xb, 0x2, '!;'}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000540)={0x40, 0x13, 0x6}, &(0x7f0000000580)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "f8b3"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x81}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x40}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x40}}) (async) [ 1846.448291][ T1389] batadv1026 (unregistering): left promiscuous mode [ 1846.452830][ T1389] bond1144 (unregistering): Released all slaves [ 1846.456539][ T1389] bond1143 (unregistering): (slave batadv1025): Releasing backup interface [ 1846.501737][ T1389] bond1143 (unregistering): Released all slaves [ 1846.505916][ T1389] bond1142 (unregistering): (slave batadv1024): Releasing backup interface [ 1846.558398][ T1389] batadv1024 (unregistering): left promiscuous mode [ 1846.563134][ T1389] bond1142 (unregistering): Released all slaves [ 1846.566908][ T1389] bond1141 (unregistering): (slave batadv1023): Releasing backup interface [ 1846.628337][ T1389] batadv1023 (unregistering): left promiscuous mode [ 1846.632862][ T1389] bond1141 (unregistering): Released all slaves [ 1846.636665][ T1389] bond1140 (unregistering): (slave batadv1022): Releasing backup interface [ 1846.700602][ T1389] bond1140 (unregistering): Released all slaves [ 1846.704470][ T1389] bond1139 (unregistering): (slave batadv1021): Releasing backup interface [ 1846.707303][T21206] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1846.748189][ T1389] batadv1021 (unregistering): left promiscuous mode [ 1846.753487][ T1389] bond1139 (unregistering): Released all slaves [ 1846.758383][ T1389] bond1138 (unregistering): Released all slaves [ 1846.762447][ T1389] bond1137 (unregistering): (slave batadv1020): Releasing backup interface [ 1846.828143][ T1389] batadv1020 (unregistering): left promiscuous mode [ 1846.832690][ T1389] bond1137 (unregistering): Released all slaves [ 1846.836469][ T1389] bond1136 (unregistering): (slave batadv1019): Releasing backup interface [ 1846.898046][ T1389] batadv1019 (unregistering): left promiscuous mode [ 1846.902880][ T1389] bond1136 (unregistering): Released all slaves [ 1846.907887][ T1389] bond1135 (unregistering): Released all slaves [ 1846.915182][ T1389] bond1134 (unregistering): Released all slaves [ 1846.920850][ T1389] bond1133 (unregistering): (slave batadv1018): Releasing backup interface [ 1846.968179][ T1389] batadv1018 (unregistering): left promiscuous mode [ 1846.972537][ T1389] bond1133 (unregistering): Released all slaves [ 1846.976376][ T1389] bond1132 (unregistering): (slave batadv1017): Releasing backup interface [ 1847.041823][ T1389] bond1132 (unregistering): Released all slaves [ 1847.045795][ T1389] bond1131 (unregistering): (slave batadv1016): Releasing backup interface [ 1847.067360][T21206] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1847.070328][T21206] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1847.090878][ T1389] bond1131 (unregistering): Released all slaves [ 1847.094591][ T1389] bond1130 (unregistering): (slave batadv1015): Releasing backup interface [ 1847.128126][ T1389] batadv1015 (unregistering): left promiscuous mode [ 1847.132629][ T1389] bond1130 (unregistering): Released all slaves [ 1847.137594][ T1389] bond1129 (unregistering): (slave batadv1014): Releasing backup interface [ 1847.187425][T21206] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1847.188094][ T1389] batadv1014 (unregistering): left promiscuous mode [ 1847.189894][T21206] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1847.193817][T21206] usb 1-1: Manufacturer: syz [ 1847.195059][T21206] usb 1-1: SerialNumber: syz [ 1847.202881][ T1389] bond1129 (unregistering): Released all slaves [ 1847.206452][ T1389] bond1128 (unregistering): (slave batadv1013): Releasing backup interface [ 1847.251098][ T1389] bond1128 (unregistering): Released all slaves [ 1847.254828][ T1389] bond1127 (unregistering): (slave batadv1012): Releasing backup interface [ 1847.288264][ T1389] batadv1012 (unregistering): left promiscuous mode [ 1847.295239][ T1389] bond1127 (unregistering): Released all slaves [ 1847.299349][ T1389] bond1126 (unregistering): (slave batadv1011): Releasing backup interface [ 1847.369260][ T1389] bond1126 (unregistering): Released all slaves [ 1847.373684][ T1389] bond1125 (unregistering): Released all slaves [ 1847.379323][ T1389] bond1124 (unregistering): (slave batadv1010): Releasing backup interface [ 1847.428001][ T1389] batadv1010 (unregistering): left promiscuous mode [ 1847.432957][ T1389] bond1124 (unregistering): Released all slaves [ 1847.436699][ T1389] bond1123 (unregistering): (slave batadv1009): Releasing backup interface [ 1847.459827][T21206] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 1847.464054][T21206] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input289 [ 1847.492004][ T1389] bond1123 (unregistering): Released all slaves [ 1847.496736][ T1389] bond1122 (unregistering): Released all slaves [ 1847.501573][ T1389] bond1121 (unregistering): (slave batadv1008): Releasing backup interface [ 1847.591087][ T1389] bond1121 (unregistering): Released all slaves [ 1847.594945][ T1389] bond1120 (unregistering): (slave batadv1007): Releasing backup interface [ 1847.648174][ T1389] batadv1007 (unregistering): left promiscuous mode [ 1847.652892][ T1389] bond1120 (unregistering): Released all slaves [ 1847.656723][ T1389] bond1119 (unregistering): (slave batadv1006): Releasing backup interface [ 1847.732138][ T1389] bond1119 (unregistering): Released all slaves [ 1847.735959][ T1389] bond1118 (unregistering): (slave batadv1005): Releasing backup interface [ 1847.790876][ T1389] bond1118 (unregistering): Released all slaves [ 1847.794577][ T1389] bond1117 (unregistering): (slave batadv1004): Releasing backup interface [ 1847.831184][ T1389] bond1117 (unregistering): Released all slaves [ 1847.834957][ T1389] bond1116 (unregistering): (slave batadv1003): Releasing backup interface [ 1847.890740][ T1389] bond1116 (unregistering): Released all slaves [ 1847.895212][ T1389] bond1115 (unregistering): (slave batadv1002): Releasing backup interface [ 1847.942406][ T1389] bond1115 (unregistering): Released all slaves [ 1847.946256][ T1389] bond1114 (unregistering): (slave batadv1001): Releasing backup interface [ 1847.990787][ T1389] bond1114 (unregistering): Released all slaves [ 1847.996093][ T1389] bond1113 (unregistering): (slave batadv1000): Releasing backup interface [ 1848.050916][ T1389] bond1113 (unregistering): Released all slaves [ 1848.054931][ T1389] bond1112 (unregistering): (slave batadv999): Releasing backup interface [ 1848.111482][ T1389] bond1112 (unregistering): Released all slaves [ 1848.116645][ T1389] bond1111 (unregistering): (slave batadv998): Releasing backup interface [ 1848.180840][ T1389] bond1111 (unregistering): Released all slaves [ 1848.184655][ T1389] bond1110 (unregistering): (slave batadv997): Releasing backup interface [ 1848.221582][ T1389] bond1110 (unregistering): Released all slaves [ 1848.226014][ T1389] bond1109 (unregistering): (slave batadv996): Releasing backup interface [ 1848.312309][ T1389] bond1109 (unregistering): Released all slaves [ 1848.316091][ T1389] bond1108 (unregistering): (slave batadv995): Releasing backup interface [ 1848.381914][ T1389] bond1108 (unregistering): Released all slaves [ 1848.385752][ T1389] bond1107 (unregistering): (slave batadv994): Releasing backup interface [ 1848.452124][ T1389] bond1107 (unregistering): Released all slaves [ 1848.455924][ T1389] bond1106 (unregistering): (slave batadv993): Releasing backup interface [ 1848.510975][ T1389] bond1106 (unregistering): Released all slaves [ 1848.514802][ T1389] bond1105 (unregistering): (slave batadv992): Releasing backup interface [ 1848.553413][ T1389] bond1105 (unregistering): Released all slaves [ 1848.561629][ T1389] bond1104 (unregistering): (slave batadv991): Releasing backup interface [ 1848.598200][ T1389] batadv991 (unregistering): left promiscuous mode [ 1848.602482][ T1389] bond1104 (unregistering): Released all slaves [ 1848.606265][ T1389] bond1103 (unregistering): (slave batadv990): Releasing backup interface [ 1848.658254][ T1389] batadv990 (unregistering): left promiscuous mode [ 1848.662861][ T1389] bond1103 (unregistering): Released all slaves [ 1848.666586][ T1389] bond1102 (unregistering): (slave batadv989): Releasing backup interface [ 1848.718430][ T1389] batadv989 (unregistering): left promiscuous mode [ 1848.722985][ T1389] bond1102 (unregistering): Released all slaves [ 1848.726738][ T1389] bond1101 (unregistering): (slave batadv988): Releasing backup interface [ 1848.778295][ T1389] batadv988 (unregistering): left promiscuous mode [ 1848.783017][ T1389] bond1101 (unregistering): Released all slaves [ 1848.786853][ T1389] bond1100 (unregistering): (slave batadv987): Releasing backup interface [ 1848.837958][ T1389] batadv987 (unregistering): left promiscuous mode [ 1848.843517][ T1389] bond1100 (unregistering): Released all slaves [ 1848.847785][ T1389] bond1099 (unregistering): (slave batadv986): Releasing backup interface [ 1848.898201][ T1389] batadv986 (unregistering): left promiscuous mode [ 1848.902770][ T1389] bond1099 (unregistering): Released all slaves [ 1848.906470][ T1389] bond1098 (unregistering): (slave batadv985): Releasing backup interface [ 1848.960816][ T1389] batadv985 (unregistering): left promiscuous mode [ 1848.965572][ T1389] bond1098 (unregistering): Released all slaves [ 1848.970720][ T1389] bond1097 (unregistering): (slave batadv984): Releasing backup interface [ 1849.041492][ T1389] bond1097 (unregistering): Released all slaves [ 1849.046895][ T1389] bond1096 (unregistering): (slave batadv983): Releasing backup interface [ 1849.091648][ T1389] bond1096 (unregistering): Released all slaves [ 1849.095373][ T1389] bond1095 (unregistering): (slave batadv982): Releasing backup interface [ 1849.148031][ T1389] batadv982 (unregistering): left promiscuous mode [ 1849.152398][ T1389] bond1095 (unregistering): Released all slaves [ 1849.156101][ T1389] bond1094 (unregistering): (slave batadv981): Releasing backup interface [ 1849.208683][ T1389] batadv981 (unregistering): left promiscuous mode [ 1849.213006][ T1389] bond1094 (unregistering): Released all slaves [ 1849.216844][ T1389] bond1093 (unregistering): (slave batadv980): Releasing backup interface [ 1849.288842][ T1389] batadv980 (unregistering): left promiscuous mode [ 1849.293168][ T1389] bond1093 (unregistering): Released all slaves [ 1849.296994][ T1389] bond1092 (unregistering): (slave batadv979): Releasing backup interface [ 1849.378015][ T1389] batadv979 (unregistering): left promiscuous mode [ 1849.382694][ T1389] bond1092 (unregistering): Released all slaves [ 1849.386450][ T1389] bond1091 (unregistering): (slave batadv978): Releasing backup interface [ 1849.429569][ T1389] batadv978 (unregistering): left promiscuous mode [ 1849.434098][ T1389] bond1091 (unregistering): Released all slaves [ 1849.439120][ T1389] bond1090 (unregistering): (slave batadv977): Releasing backup interface [ 1849.498213][ T1389] batadv977 (unregistering): left promiscuous mode [ 1849.502850][ T1389] bond1090 (unregistering): Released all slaves [ 1849.507678][ T1389] bond1089 (unregistering): (slave batadv976): Releasing backup interface [ 1849.598141][ T1389] batadv976 (unregistering): left promiscuous mode [ 1849.602845][ T1389] bond1089 (unregistering): Released all slaves [ 1849.607692][ T1389] bond1088 (unregistering): (slave batadv975): Releasing backup interface [ 1849.648974][ T1389] batadv975 (unregistering): left promiscuous mode [ 1849.653458][ T1389] bond1088 (unregistering): Released all slaves [ 1849.658268][ T1389] bond1087 (unregistering): (slave batadv974): Releasing backup interface [ 1849.708127][ T1389] batadv974 (unregistering): left promiscuous mode [ 1849.712688][ T1389] bond1087 (unregistering): Released all slaves [ 1849.716477][ T1389] bond1086 (unregistering): (slave batadv973): Releasing backup interface [ 1849.768023][ T1389] batadv973 (unregistering): left promiscuous mode [ 1849.772721][ T1389] bond1086 (unregistering): Released all slaves [ 1849.776552][ T1389] bond1085 (unregistering): (slave batadv972): Releasing backup interface [ 1849.839026][ T1389] batadv972 (unregistering): left promiscuous mode [ 1849.843422][ T1389] bond1085 (unregistering): Released all slaves [ 1849.848232][ T1389] bond1084 (unregistering): Released all slaves [ 1849.851917][ T1389] bond1083 (unregistering): (slave batadv971): Releasing backup interface [ 1849.918521][ T1389] batadv971 (unregistering): left promiscuous mode [ 1849.923369][ T1389] bond1083 (unregistering): Released all slaves [ 1849.928219][ T1389] bond1082 (unregistering): Released all slaves [ 1849.933137][ T1389] bond1081 (unregistering): Released all slaves [ 1849.938092][ T1389] bond1080 (unregistering): (slave batadv970): Releasing backup interface [ 1849.978403][ T1389] batadv970 (unregistering): left promiscuous mode [ 1849.983189][ T1389] bond1080 (unregistering): Released all slaves [ 1849.987490][ T1389] bond1079 (unregistering): (slave batadv969): Releasing backup interface [ 1850.037985][ T1389] batadv969 (unregistering): left promiscuous mode [ 1850.042381][ T1389] bond1079 (unregistering): Released all slaves [ 1850.046945][ T1389] bond1078 (unregistering): Released all slaves [ 1850.050899][ T1389] bond1077 (unregistering): (slave batadv968): Releasing backup interface [ 1850.098748][ T1389] batadv968 (unregistering): left promiscuous mode [ 1850.103039][ T1389] bond1077 (unregistering): Released all slaves [ 1850.108275][ T1389] bond1076 (unregistering): (slave batadv967): Releasing backup interface [ 1850.167974][ T1389] batadv967 (unregistering): left promiscuous mode [ 1850.173262][ T1389] bond1076 (unregistering): Released all slaves [ 1850.177963][ T1389] bond1075 (unregistering): Released all slaves [ 1850.181736][ T1389] bond1074 (unregistering): (slave batadv966): Releasing backup interface [ 1850.237313][ C1] yealink 1-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1850.258128][ T1389] batadv966 (unregistering): left promiscuous mode [ 1850.262732][ T1389] bond1074 (unregistering): Released all slaves [ 1850.267527][ T1389] bond1073 (unregistering): Released all slaves [ 1850.271452][ T1389] bond1072 (unregistering): (slave batadv965): Releasing backup interface [ 1850.318390][ T1389] batadv965 (unregistering): left promiscuous mode [ 1850.324226][ T1389] bond1072 (unregistering): Released all slaves [ 1850.329227][ T1389] bond1071 (unregistering): Released all slaves [ 1850.332986][ T1389] bond1070 (unregistering): (slave batadv964): Releasing backup interface [ 1850.388895][ T1389] batadv964 (unregistering): left promiscuous mode [ 1850.393302][ T1389] bond1070 (unregistering): Released all slaves [ 1850.398226][ T1389] bond1069 (unregistering): Released all slaves [ 1850.401884][ T1389] bond1068 (unregistering): (slave batadv963): Releasing backup interface [ 1850.439434][T32409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1850.441729][T32409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1850.448089][ T1389] batadv963 (unregistering): left promiscuous mode [ 1850.454716][ T1389] bond1068 (unregistering): Released all slaves [ 1850.461341][ T1389] bond1067 (unregistering): Released all slaves [ 1850.465714][ T1389] bond1066 (unregistering): (slave batadv962): Releasing backup interface [ 1850.489146][T21206] usb 1-1: USB disconnect, device number 108 21:55:06 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090587e3"], 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00036b0000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x40, 0xb, 0xa5, {0xa5, 0x1, "0b1b47540bade15b2fcccecce0a7f2b90a6baf4299bad86197bc463031ae29bd4304d16ec358dcee761739e30591b2407abb0aa292f3069162a723baee37b8d7f8f26b41b4b523437dddbdcc1a5bf02de53698878cd092635fba5fb6e8c216a3e92d89882f66d221ab60b36711f72c271cc01627d02be65b47f536b24fc57ba0c2471531f540f6f6b19f9199ab60912b6f65a1428ec35f0c983080a76fede872ac805e"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x480a}}, &(0x7f0000000100)={0x0, 0xf, 0x74, {0x5, 0xf, 0x74, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x5, 0x3f, 0x50db}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x6, 0xb, 0x101}, @ptm_cap={0x3}, @generic={0x5b, 0x10, 0x4, "ca453ced76f2a0107cba1c027e2f35c93211fe42a85071bf554a88cebc64b2d23c7ae61bdf83a3c4ebdd06c42e2997aeb3f1c3acadcbd24b64063dacf8af746fe4b3de324be0e98c60a7dc59956d04304c00ff93a530c0fa"}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x1, 0x5, 0x7, "6ae77ad3", "6d5fe15d"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x8, 0x9, 0x40, 0x4, 0x8}}}, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x20, 0x3, 0xad, "debd15324e5199068140312b312903b797c366751ba23b29f8af30509d4400b4655a66015d50a6ebee107258dd1ce3e69bf2f53cd3349cf98fc2ce4783135d04199e37b92c63b0425761be96cd2cb27630d213877d7d20ab4545fe6562b5c0118b3e19f1c8dfbb95a37c1ca042098a866f8db1636c0c93773a029e5f8c4442aef0a3143b396f604d60bca926b04b0237358835f455bcad3bc71e3e6a0f26ff3d4da12e63dfa10dcce9a81801a0"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xb1}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0x400, 0x10, [0xf00]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x7f}, &(0x7f00000004c0)={0x40, 0xb, 0x2, '!;'}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000540)={0x40, 0x13, 0x6}, &(0x7f0000000580)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "f8b3"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x81}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x40}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x40}}) [ 1850.517997][ T1389] batadv962 (unregistering): left promiscuous mode [ 1850.523651][ T1389] bond1066 (unregistering): Released all slaves [ 1850.528649][ T1389] bond1065 (unregistering): Released all slaves [ 1850.532394][ T1389] bond1064 (unregistering): (slave batadv961): Releasing backup interface [ 1850.568356][ T1389] batadv961 (unregistering): left promiscuous mode [ 1850.572711][ T1389] bond1064 (unregistering): Released all slaves [ 1850.577170][ T1389] bond1063 (unregistering): Released all slaves [ 1850.582339][ T1389] bond1062 (unregistering): (slave batadv960): Releasing backup interface [ 1850.628017][ T1389] batadv960 (unregistering): left promiscuous mode [ 1850.632479][ T1389] bond1062 (unregistering): Released all slaves [ 1850.637028][ T1389] bond1061 (unregistering): Released all slaves [ 1850.643298][ T1389] bond1060 (unregistering): (slave batadv959): Releasing backup interface [ 1850.698283][ T1389] batadv959 (unregistering): left promiscuous mode [ 1850.704644][ T1389] bond1060 (unregistering): Released all slaves [ 1850.708641][ T1389] bond1059 (unregistering): (slave batadv958): Releasing backup interface [ 1850.757948][ T1389] batadv958 (unregistering): left promiscuous mode [ 1850.762402][ T1389] bond1059 (unregistering): Released all slaves [ 1850.766280][ T1389] bond1058 (unregistering): (slave batadv957): Releasing backup interface [ 1850.818134][ T1389] batadv957 (unregistering): left promiscuous mode [ 1850.822648][ T1389] bond1058 (unregistering): Released all slaves [ 1850.828655][ T1389] bond1057 (unregistering): (slave batadv956): Releasing backup interface [ 1850.878176][ T1389] batadv956 (unregistering): left promiscuous mode [ 1850.882473][ T1389] bond1057 (unregistering): Released all slaves [ 1850.888035][ T1389] bond1056 (unregistering): (slave batadv955): Releasing backup interface [ 1850.897355][T21206] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1850.940412][ T1389] batadv955 (unregistering): left promiscuous mode [ 1850.944987][ T1389] bond1056 (unregistering): Released all slaves [ 1850.949095][ T1389] bond1055 (unregistering): (slave batadv954): Releasing backup interface [ 1851.007963][ T1389] batadv954 (unregistering): left promiscuous mode [ 1851.012455][ T1389] bond1055 (unregistering): Released all slaves [ 1851.016292][ T1389] bond1054 (unregistering): (slave batadv953): Releasing backup interface [ 1851.069279][ T1389] batadv953 (unregistering): left promiscuous mode [ 1851.073761][ T1389] bond1054 (unregistering): Released all slaves [ 1851.077995][ T1389] bond1053 (unregistering): (slave batadv952): Releasing backup interface [ 1851.127986][ T1389] batadv952 (unregistering): left promiscuous mode [ 1851.132525][ T1389] bond1053 (unregistering): Released all slaves [ 1851.136345][ T1389] bond1052 (unregistering): (slave batadv951): Releasing backup interface [ 1851.198310][ T1389] batadv951 (unregistering): left promiscuous mode [ 1851.203785][ T1389] bond1052 (unregistering): Released all slaves [ 1851.208982][ T1389] bond1051 (unregistering): (slave batadv950): Releasing backup interface [ 1851.258043][ T1389] batadv950 (unregistering): left promiscuous mode [ 1851.262857][ T1389] bond1051 (unregistering): Released all slaves [ 1851.266708][ T1389] bond1050 (unregistering): (slave batadv949): Releasing backup interface [ 1851.277564][T21206] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1851.280346][T21206] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1851.318016][ T1389] batadv949 (unregistering): left promiscuous mode [ 1851.322397][ T1389] bond1050 (unregistering): Released all slaves [ 1851.326235][ T1389] bond1049 (unregistering): (slave batadv948): Releasing backup interface [ 1851.382292][ T1389] batadv948 (unregistering): left promiscuous mode [ 1851.386849][ T1389] bond1049 (unregistering): Released all slaves [ 1851.392874][ T1389] bond1048 (unregistering): (slave batadv947): Releasing backup interface [ 1851.417436][T21206] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1851.419755][T21206] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1851.421836][T21206] usb 1-1: Manufacturer: syz [ 1851.422997][T21206] usb 1-1: SerialNumber: syz [ 1851.438537][ T1389] batadv947 (unregistering): left promiscuous mode [ 1851.443299][ T1389] bond1048 (unregistering): Released all slaves [ 1851.446885][ T1389] bond1047 (unregistering): (slave batadv946): Releasing backup interface [ 1851.498990][ T1389] batadv946 (unregistering): left promiscuous mode [ 1851.505048][ T1389] bond1047 (unregistering): Released all slaves [ 1851.510290][ T1389] bond1046 (unregistering): (slave batadv945): Releasing backup interface [ 1851.558080][ T1389] batadv945 (unregistering): left promiscuous mode [ 1851.562677][ T1389] bond1046 (unregistering): Released all slaves [ 1851.566676][ T1389] bond1045 (unregistering): (slave batadv944): Releasing backup interface [ 1851.618263][ T1389] batadv944 (unregistering): left promiscuous mode [ 1851.624212][ T1389] bond1045 (unregistering): Released all slaves [ 1851.628362][ T1389] bond1044 (unregistering): (slave batadv943): Releasing backup interface [ 1851.668331][T21206] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 1851.670326][T21206] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input290 [ 1851.688161][ T1389] batadv943 (unregistering): left promiscuous mode [ 1851.693590][ T1389] bond1044 (unregistering): Released all slaves [ 1851.698230][ T1389] bond1043 (unregistering): (slave batadv942): Releasing backup interface [ 1851.738130][ T1389] batadv942 (unregistering): left promiscuous mode [ 1851.742633][ T1389] bond1043 (unregistering): Released all slaves [ 1851.750233][ T1389] bond1042 (unregistering): (slave batadv941): Releasing backup interface [ 1851.798269][ T1389] batadv941 (unregistering): left promiscuous mode [ 1851.802638][ T1389] bond1042 (unregistering): Released all slaves [ 1851.806284][ T1389] bond1041 (unregistering): (slave batadv940): Releasing backup interface [ 1851.848128][ T1389] batadv940 (unregistering): left promiscuous mode [ 1851.852452][ T1389] bond1041 (unregistering): Released all slaves [ 1851.857783][ T1389] bond1040 (unregistering): (slave batadv939): Releasing backup interface [ 1851.888005][ T1389] batadv939 (unregistering): left promiscuous mode [ 1851.892406][ T1389] bond1040 (unregistering): Released all slaves [ 1851.896115][ T1389] bond1039 (unregistering): (slave batadv938): Releasing backup interface [ 1851.937980][ T1389] batadv938 (unregistering): left promiscuous mode [ 1851.942326][ T1389] bond1039 (unregistering): Released all slaves [ 1851.948530][ T1389] bond1038 (unregistering): (slave batadv937): Releasing backup interface [ 1852.018061][ T1389] batadv937 (unregistering): left promiscuous mode [ 1852.023263][ T1389] bond1038 (unregistering): Released all slaves [ 1852.027974][ T1389] bond1037 (unregistering): (slave batadv936): Releasing backup interface [ 1852.080947][ T1389] batadv936 (unregistering): left promiscuous mode [ 1852.085588][ T1389] bond1037 (unregistering): Released all slaves [ 1852.089810][ T1389] bond1036 (unregistering): (slave batadv935): Releasing backup interface [ 1852.148168][ T1389] batadv935 (unregistering): left promiscuous mode [ 1852.152900][ T1389] bond1036 (unregistering): Released all slaves [ 1852.157837][ T1389] bond1035 (unregistering): (slave batadv934): Releasing backup interface [ 1852.208059][ T1389] batadv934 (unregistering): left promiscuous mode [ 1852.212833][ T1389] bond1035 (unregistering): Released all slaves [ 1852.216651][ T1389] bond1034 (unregistering): (slave batadv933): Releasing backup interface [ 1852.288640][ T1389] batadv933 (unregistering): left promiscuous mode [ 1852.293123][ T1389] bond1034 (unregistering): Released all slaves [ 1852.296909][ T1389] bond1033 (unregistering): (slave batadv932): Releasing backup interface [ 1852.357892][ T1389] batadv932 (unregistering): left promiscuous mode [ 1852.363677][ T1389] bond1033 (unregistering): Released all slaves [ 1852.367978][ T1389] bond1032 (unregistering): (slave batadv931): Releasing backup interface [ 1852.418092][ T1389] batadv931 (unregistering): left promiscuous mode [ 1852.425352][ T1389] bond1032 (unregistering): Released all slaves [ 1852.429762][ T1389] bond1031 (unregistering): (slave batadv930): Releasing backup interface [ 1852.478397][ T1389] batadv930 (unregistering): left promiscuous mode [ 1852.488846][ T1389] bond1031 (unregistering): Released all slaves [ 1852.495523][ T1389] bond1030 (unregistering): (slave batadv929): Releasing backup interface [ 1852.538176][ T1389] batadv929 (unregistering): left promiscuous mode [ 1852.542635][ T1389] bond1030 (unregistering): Released all slaves [ 1852.546386][ T1389] bond1029 (unregistering): (slave batadv928): Releasing backup interface [ 1852.618011][ T1389] batadv928 (unregistering): left promiscuous mode [ 1852.622819][ T1389] bond1029 (unregistering): Released all slaves [ 1852.626776][ T1389] bond1028 (unregistering): (slave batadv927): Releasing backup interface [ 1852.678058][ T1389] batadv927 (unregistering): left promiscuous mode [ 1852.682602][ T1389] bond1028 (unregistering): Released all slaves [ 1852.686567][ T1389] bond1027 (unregistering): (slave batadv926): Releasing backup interface [ 1852.738845][ T1389] batadv926 (unregistering): left promiscuous mode [ 1852.743530][ T1389] bond1027 (unregistering): Released all slaves [ 1852.748764][ T1389] bond1026 (unregistering): (slave batadv925): Releasing backup interface [ 1852.798382][ T1389] batadv925 (unregistering): left promiscuous mode [ 1852.803280][ T1389] bond1026 (unregistering): Released all slaves [ 1852.807048][ T1389] bond1025 (unregistering): (slave batadv924): Releasing backup interface [ 1852.858092][ T1389] batadv924 (unregistering): left promiscuous mode [ 1852.862790][ T1389] bond1025 (unregistering): Released all slaves [ 1852.866519][ T1389] bond1024 (unregistering): (slave batadv923): Releasing backup interface [ 1852.917927][ T1389] batadv923 (unregistering): left promiscuous mode [ 1852.922769][ T1389] bond1024 (unregistering): Released all slaves [ 1852.926735][ T1389] bond1023 (unregistering): (slave batadv922): Releasing backup interface [ 1852.968016][ T1389] batadv922 (unregistering): left promiscuous mode [ 1852.972455][ T1389] bond1023 (unregistering): Released all slaves [ 1852.978919][ T1389] bond1022 (unregistering): (slave batadv921): Releasing backup interface [ 1853.028328][ T1389] batadv921 (unregistering): left promiscuous mode [ 1853.032985][ T1389] bond1022 (unregistering): Released all slaves [ 1853.036770][ T1389] bond1021 (unregistering): (slave batadv920): Releasing backup interface [ 1853.088098][ T1389] batadv920 (unregistering): left promiscuous mode [ 1853.094590][ T1389] bond1021 (unregistering): Released all slaves [ 1853.098828][ T1389] bond1020 (unregistering): (slave batadv919): Releasing backup interface [ 1853.148022][ T1389] batadv919 (unregistering): left promiscuous mode [ 1853.152685][ T1389] bond1020 (unregistering): Released all slaves [ 1853.158015][ T1389] bond1019 (unregistering): (slave batadv918): Releasing backup interface [ 1853.208281][ T1389] batadv918 (unregistering): left promiscuous mode [ 1853.213008][ T1389] bond1019 (unregistering): Released all slaves [ 1853.216806][ T1389] bond1018 (unregistering): (slave batadv917): Releasing backup interface [ 1853.268135][ T1389] batadv917 (unregistering): left promiscuous mode [ 1853.273881][ T1389] bond1018 (unregistering): Released all slaves [ 1853.280040][ T1389] bond1017 (unregistering): (slave batadv916): Releasing backup interface [ 1853.328105][ T1389] batadv916 (unregistering): left promiscuous mode [ 1853.332732][ T1389] bond1017 (unregistering): Released all slaves [ 1853.336505][ T1389] bond1016 (unregistering): (slave batadv915): Releasing backup interface [ 1853.398038][ T1389] batadv915 (unregistering): left promiscuous mode [ 1853.402479][ T1389] bond1016 (unregistering): Released all slaves [ 1853.406312][ T1389] bond1015 (unregistering): (slave batadv914): Releasing backup interface [ 1853.457980][ T1389] batadv914 (unregistering): left promiscuous mode [ 1853.462374][ T1389] bond1015 (unregistering): Released all slaves [ 1853.466169][ T1389] bond1014 (unregistering): (slave batadv913): Releasing backup interface [ 1853.518402][ T1389] batadv913 (unregistering): left promiscuous mode [ 1853.523588][ T1389] bond1014 (unregistering): Released all slaves [ 1853.529950][ T1389] bond1013 (unregistering): (slave batadv912): Releasing backup interface [ 1853.577998][ T1389] batadv912 (unregistering): left promiscuous mode [ 1853.582549][ T1389] bond1013 (unregistering): Released all slaves [ 1853.586399][ T1389] bond1012 (unregistering): (slave batadv911): Releasing backup interface [ 1853.638083][ T1389] batadv911 (unregistering): left promiscuous mode [ 1853.642819][ T1389] bond1012 (unregistering): Released all slaves [ 1853.646477][ T1389] bond1011 (unregistering): (slave batadv910): Releasing backup interface [ 1853.708033][ T1389] batadv910 (unregistering): left promiscuous mode [ 1853.712573][ T1389] bond1011 (unregistering): Released all slaves [ 1853.716525][ T1389] bond1010 (unregistering): (slave batadv909): Releasing backup interface [ 1853.768930][ T1389] batadv909 (unregistering): left promiscuous mode [ 1853.773429][ T1389] bond1010 (unregistering): Released all slaves [ 1853.777480][ T1389] bond1009 (unregistering): (slave batadv908): Releasing backup interface [ 1853.838256][ T1389] batadv908 (unregistering): left promiscuous mode [ 1853.842711][ T1389] bond1009 (unregistering): Released all slaves [ 1853.846632][ T1389] bond1008 (unregistering): (slave batadv907): Releasing backup interface [ 1853.898098][ T1389] batadv907 (unregistering): left promiscuous mode [ 1853.904926][ T1389] bond1008 (unregistering): Released all slaves [ 1853.907299][ C1] yealink 1-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1853.911281][ T1389] bond1007 (unregistering): (slave batadv906): Releasing backup interface [ 1853.968171][ T1389] batadv906 (unregistering): left promiscuous mode [ 1853.972731][ T1389] bond1007 (unregistering): Released all slaves [ 1853.976515][ T1389] bond1006 (unregistering): (slave batadv905): Releasing backup interface [ 1854.038030][ T1389] batadv905 (unregistering): left promiscuous mode [ 1854.042478][ T1389] bond1006 (unregistering): Released all slaves [ 1854.046293][ T1389] bond1005 (unregistering): (slave batadv904): Releasing backup interface [ 1854.097926][ T1389] batadv904 (unregistering): left promiscuous mode [ 1854.102380][ T1389] bond1005 (unregistering): Released all slaves [ 1854.106899][ T1389] bond1004 (unregistering): (slave batadv903): Releasing backup interface [ 1854.148990][ T1389] batadv903 (unregistering): left promiscuous mode [ 1854.153441][ T1389] bond1004 (unregistering): Released all slaves [ 1854.157204][ T1389] bond1003 (unregistering): (slave batadv902): Releasing backup interface [ 1854.208052][ T1389] batadv902 (unregistering): left promiscuous mode [ 1854.212842][ T1389] bond1003 (unregistering): Released all slaves [ 1854.216632][ T1389] bond1002 (unregistering): (slave batadv901): Releasing backup interface [ 1854.267964][ T1389] batadv901 (unregistering): left promiscuous mode [ 1854.272663][ T1389] bond1002 (unregistering): Released all slaves [ 1854.277960][ T1389] bond1001 (unregistering): (slave batadv900): Releasing backup interface [ 1854.328065][ T1389] batadv900 (unregistering): left promiscuous mode [ 1854.332666][ T1389] bond1001 (unregistering): Released all slaves [ 1854.336416][ T1389] bond1000 (unregistering): (slave batadv899): Releasing backup interface [ 1854.388639][ T1389] batadv899 (unregistering): left promiscuous mode [ 1854.393314][ T1389] bond1000 (unregistering): Released all slaves [ 1854.398153][ T1389] bond999 (unregistering): (slave batadv898): Releasing backup interface [ 1854.459102][ T1389] batadv898 (unregistering): left promiscuous mode [ 1854.470835][ T1389] bond999 (unregistering): Released all slaves [ 1854.477956][ T1389] bond998 (unregistering): (slave batadv897): Releasing backup interface [ 1854.494092][ T6258] usb 1-1: USB disconnect, device number 109 [ 1854.500079][ T1389] batadv897 (unregistering): left promiscuous mode 21:55:10 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090587e3"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0x90, &(0x7f0000000100)={{0x12, 0x1, 0x321, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x2, 0x1, 0x4a, 0xb0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "dde677a8"}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7c24, 0x7, 0x1f}, {0x6, 0x24, 0x1a, 0x1ff, 0xb}, [@country_functional={0xa, 0x24, 0x7, 0x1, 0x5d3, [0x29, 0x5]}, @dmm={0x7, 0x24, 0x14, 0x0, 0x401}, @call_mgmt={0x5, 0x24, 0x1, 0x4, 0xff}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x2, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xf9, 0x9, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0xf6d704f037679104, 0x5, 0x7, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x2}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x2, 0x80, 0x0, 0xff, 0x89}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x2, [{0xc9, &(0x7f0000000280)=@string={0xc9, 0x3, "4904d431f03fe94eff8fc74f280192ecdae4a693fc417b1184cdb16736d1d5aa476b0969ffffdeb0deb9f4d5b0a7849e03151257004c39654659530c9c4ba5b8d8a77b31ab3f742e350e65c418b6331d410572733d2f5709db79ee103973f6ed96a300dc66a7de1d65eb71f32178921bd524be2452cdd6cd98414e13d666c6cae9dea6e802eb84319371ce28fc7f3f09078fd0136c1b4427715e56d47f31d426ff834a2c4995e509c187193eac4474b44b00b2ef00ba0960afb777b4f575bc6057f0c8557917b6"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc09}}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x78}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) syz_usb_control_io(r0, &(0x7f0000001d00)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRESHEX=r0], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1854.519936][ T1389] bond998 (unregistering): Released all slaves [ 1854.525706][ T1389] bond997 (unregistering): (slave batadv896): Releasing backup interface [ 1854.558809][ T1389] batadv896 (unregistering): left promiscuous mode [ 1854.563159][ T1389] bond997 (unregistering): Released all slaves [ 1854.566705][ T1389] bond996 (unregistering): (slave batadv895): Releasing backup interface [ 1854.588681][ T1389] batadv895 (unregistering): left promiscuous mode [ 1854.593124][ T1389] bond996 (unregistering): Released all slaves [ 1854.597019][ T1389] bond995 (unregistering): (slave batadv894): Releasing backup interface [ 1854.648083][ T1389] batadv894 (unregistering): left promiscuous mode [ 1854.652427][ T1389] bond995 (unregistering): Released all slaves [ 1854.656064][ T1389] bond994 (unregistering): (slave batadv893): Releasing backup interface [ 1854.708070][ T1389] batadv893 (unregistering): left promiscuous mode [ 1854.712396][ T1389] bond994 (unregistering): Released all slaves [ 1854.715900][ T1389] bond993 (unregistering): (slave batadv892): Releasing backup interface [ 1854.767878][ T1389] batadv892 (unregistering): left promiscuous mode [ 1854.772804][ T1389] bond993 (unregistering): Released all slaves [ 1854.776554][ T1389] bond992 (unregistering): (slave batadv891): Releasing backup interface [ 1854.827934][ T1389] batadv891 (unregistering): left promiscuous mode [ 1854.832588][ T1389] bond992 (unregistering): Released all slaves [ 1854.836439][ T1389] bond991 (unregistering): (slave batadv890): Releasing backup interface [ 1854.887307][ T6258] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1854.890338][ T1389] batadv890 (unregistering): left promiscuous mode [ 1854.894760][ T1389] bond991 (unregistering): Released all slaves [ 1854.898939][ T1389] bond990 (unregistering): (slave batadv889): Releasing backup interface [ 1854.947985][ T1389] batadv889 (unregistering): left promiscuous mode [ 1854.952484][ T1389] bond990 (unregistering): Released all slaves [ 1854.956284][ T1389] bond989 (unregistering): (slave batadv888): Releasing backup interface [ 1855.009022][ T1389] batadv888 (unregistering): left promiscuous mode [ 1855.013598][ T1389] bond989 (unregistering): Released all slaves [ 1855.017971][ T1389] bond988 (unregistering): (slave batadv887): Releasing backup interface [ 1855.058014][ T1389] batadv887 (unregistering): left promiscuous mode [ 1855.063001][ T1389] bond988 (unregistering): Released all slaves [ 1855.066528][ T1389] bond987 (unregistering): (slave batadv886): Releasing backup interface [ 1855.128120][ T1389] batadv886 (unregistering): left promiscuous mode [ 1855.132583][ T1389] bond987 (unregistering): Released all slaves [ 1855.136328][ T1389] bond986 (unregistering): (slave batadv885): Releasing backup interface [ 1855.188246][ T1389] batadv885 (unregistering): left promiscuous mode [ 1855.192794][ T1389] bond986 (unregistering): Released all slaves [ 1855.196516][ T1389] bond985 (unregistering): (slave batadv884): Releasing backup interface [ 1855.248028][ T1389] batadv884 (unregistering): left promiscuous mode [ 1855.252547][ T1389] bond985 (unregistering): Released all slaves [ 1855.256289][ T1389] bond984 (unregistering): (slave batadv883): Releasing backup interface [ 1855.277418][ T6258] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1855.280163][ T6258] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1855.319639][ T1389] batadv883 (unregistering): left promiscuous mode [ 1855.324431][ T1389] bond984 (unregistering): Released all slaves [ 1855.328726][ T1389] bond983 (unregistering): (slave batadv882): Releasing backup interface [ 1855.378135][ T1389] batadv882 (unregistering): left promiscuous mode [ 1855.382718][ T1389] bond983 (unregistering): Released all slaves [ 1855.386588][ T1389] bond982 (unregistering): (slave batadv881): Releasing backup interface [ 1855.397387][ T6258] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1855.400157][ T6258] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1855.402406][ T6258] usb 1-1: Manufacturer: syz [ 1855.403660][ T6258] usb 1-1: SerialNumber: syz [ 1855.449312][ T1389] batadv881 (unregistering): left promiscuous mode [ 1855.454020][ T1389] bond982 (unregistering): Released all slaves [ 1855.467628][ T1389] bond981 (unregistering): (slave batadv880): Releasing backup interface [ 1855.509007][ T1389] batadv880 (unregistering): left promiscuous mode [ 1855.513631][ T1389] bond981 (unregistering): Released all slaves [ 1855.517629][ T1389] bond980 (unregistering): (slave batadv879): Releasing backup interface [ 1855.577955][ T1389] batadv879 (unregistering): left promiscuous mode [ 1855.582897][ T1389] bond980 (unregistering): Released all slaves [ 1855.586689][ T1389] bond979 (unregistering): (slave batadv878): Releasing backup interface [ 1855.658318][ T1389] batadv878 (unregistering): left promiscuous mode [ 1855.663212][ T1389] bond979 (unregistering): Released all slaves [ 1855.666931][ T1389] bond978 (unregistering): (slave batadv877): Releasing backup interface [ 1855.718106][ T1389] batadv877 (unregistering): left promiscuous mode [ 1855.722803][ T1389] bond978 (unregistering): Released all slaves [ 1855.726666][ T1389] bond977 (unregistering): (slave batadv876): Releasing backup interface [ 1855.808211][ T1389] batadv876 (unregistering): left promiscuous mode [ 1855.812817][ T1389] bond977 (unregistering): Released all slaves [ 1855.816526][ T1389] bond976 (unregistering): (slave batadv875): Releasing backup interface [ 1855.858320][ T6258] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 1855.860444][ T6258] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input291 [ 1855.863630][ T1389] batadv875 (unregistering): left promiscuous mode [ 1855.870542][ T1389] bond976 (unregistering): Released all slaves [ 1855.874355][ T1389] bond975 (unregistering): (slave batadv874): Releasing backup interface [ 1855.918261][ T1389] batadv874 (unregistering): left promiscuous mode [ 1855.923778][ T1389] bond975 (unregistering): Released all slaves [ 1855.927940][ T1389] bond974 (unregistering): (slave batadv873): Releasing backup interface [ 1855.978046][ T1389] batadv873 (unregistering): left promiscuous mode [ 1855.982680][ T1389] bond974 (unregistering): Released all slaves [ 1855.986393][ T1389] bond973 (unregistering): (slave batadv872): Releasing backup interface [ 1856.038515][ T1389] batadv872 (unregistering): left promiscuous mode [ 1856.042884][ T1389] bond973 (unregistering): Released all slaves [ 1856.046592][ T1389] bond972 (unregistering): (slave batadv871): Releasing backup interface [ 1856.107965][ T1389] batadv871 (unregistering): left promiscuous mode [ 1856.114367][ T1389] bond972 (unregistering): Released all slaves [ 1856.118873][ T1389] bond971 (unregistering): (slave batadv870): Releasing backup interface [ 1856.168106][ T1389] batadv870 (unregistering): left promiscuous mode [ 1856.172417][ T1389] bond971 (unregistering): Released all slaves [ 1856.176272][ T1389] bond970 (unregistering): (slave batadv869): Releasing backup interface [ 1856.227901][ T1389] batadv869 (unregistering): left promiscuous mode [ 1856.232157][ T1389] bond970 (unregistering): Released all slaves [ 1856.235977][ T1389] bond969 (unregistering): (slave batadv868): Releasing backup interface