T4173] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 752.114150][ T4173] 8021q: adding VLAN 0 to HW filter on device bond188 [ 752.136338][ T4186] bond188: (slave bridge304): making interface the new active one [ 752.152790][ T4186] bond188: (slave bridge304): Enslaving as an active interface with an up link [ 752.173765][ T3180] IPv6: ADDRCONF(NETDEV_CHANGE): bond188: link becomes ready [ 752.186896][ T4173] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 752.205850][ T4186] bond188: (slave bridge305): Enslaving as an active interface with a down link [ 752.215439][ T3182] usb 1-1: Using ep0 maxpacket: 8 [ 752.358839][ T3182] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 752.366870][ T3182] usb 1-1: config 0 has no interface number 0 [ 752.388658][ T3182] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 752.417257][ T3182] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 752.447550][ T3182] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 752.468692][ T3182] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 752.478381][ T3182] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.493720][ T3182] usb 1-1: config 0 descriptor?? [ 752.519062][ T4098] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 752.526045][ T4098] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 752.751318][ T3182] usb 1-1: USB disconnect, device number 64 03:37:27 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000180)='\xe3$(\x00') 03:37:27 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x3f000000}, 0x0) 03:37:27 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0xfffffffffffff000) 03:37:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x293e8, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:37:27 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x8}, {0xa, 0x0, 0x0, @remote}, r3}}, 0x48) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000280)={0x8, 0x120, 0xfa00, {0x4, {0x3, 0xffffffff, "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", 0x0, 0x3, 0x3, 0x7f, 0x20, 0x7f, 0x3f}, r3}}, 0x128) clock_gettime(0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r4 = fcntl$dupfd(r0, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x77359400}, 0x0) r5 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r5, 0x0) init_module(&(0x7f0000000000)='+$*\x00', 0x4, &(0x7f0000000040)='+-@\'\'$}\x00') r6 = creat(&(0x7f0000000100)='./file0\x00', 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000003c0)={0x0, 0x5f, "d37fde6fca2bebe4c13cd8ab68270928cab0f3ec47d8e4a4047ffe01423b99a7ad4169c4d167b0fb4e453a71d63425a85ff8b269e68526c6d7574bf15dbf42c9bb65b53feb4f28d1cd12dd54f217e135c84125012e45e926c415fc6087344f"}, &(0x7f0000000440)=0x67) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000480)={r7, 0x7}, &(0x7f00000004c0)=0x8) ioctl$BLKROTATIONAL(r6, 0x127e, &(0x7f0000000180)) 03:37:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) 03:37:27 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11, 0x0, 0x0, 0x9, 0x0, 0x0, 0x101}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000105233d607e1bc395b00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) [ 753.320230][ T4260] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 753.366354][ T4260] 8021q: adding VLAN 0 to HW filter on device bond189 03:37:27 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x40000000}, 0x0) [ 753.422925][ T4289] bond189: (slave bridge306): making interface the new active one [ 753.442636][ T4289] bond189: (slave bridge306): Enslaving as an active interface with an up link [ 753.466936][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): bond189: link becomes ready [ 753.481521][ T4260] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:37:27 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x60000000}, 0x0) 03:37:27 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff}, r2, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) [ 753.545514][ T4289] bond189: (slave bridge307): Enslaving as an active interface with a down link 03:37:27 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x65580000}, 0x0) 03:37:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x293e9, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 753.662125][ T4323] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 753.689840][ T3182] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 753.695542][ T4323] 8021q: adding VLAN 0 to HW filter on device bond190 [ 753.775331][ T4359] bond190: (slave bridge308): making interface the new active one [ 753.814662][ T4359] bond190: (slave bridge308): Enslaving as an active interface with an up link [ 753.825460][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): bond190: link becomes ready [ 753.841195][ T4323] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 753.857876][ T4359] bond190: (slave bridge309): Enslaving as an active interface with a down link [ 753.938637][ T3182] usb 1-1: Using ep0 maxpacket: 8 [ 754.080214][ T3182] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 754.088246][ T3182] usb 1-1: config 0 has no interface number 0 [ 754.094463][ T3182] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 754.105515][ T3182] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 754.115534][ T3182] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 754.126149][ T3182] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 754.135291][ T3182] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.168856][ T3182] usb 1-1: config 0 descriptor?? [ 754.188927][ T4305] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 754.195912][ T4305] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 754.446803][ T3178] usb 1-1: USB disconnect, device number 65 03:37:29 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000180)='\xe3$(\x00') 03:37:29 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000100001040000000000000000000000002130ef29e19592a1c49c667ccfdf641114a3d8326c1da259f718dbd2dbc1ca0b6acdf18179", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) 03:37:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x293ea, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:37:29 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x81000000}, 0x0) 03:37:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) 03:37:29 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x5, 0x3, 0x0, 0x0, 0x2, 0x6}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r3 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r3, 0x0) [ 754.996981][ T4404] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 03:37:29 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x88a8ffff}, 0x0) 03:37:29 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'tunl0\x00', r4, 0x7800, 0x8, 0x6, 0x4, {{0x13, 0x4, 0x3, 0xe, 0x4c, 0x65, 0x0, 0x1, 0x0, 0x0, @empty, @multicast1, {[@lsrr={0x83, 0xb, 0x4c, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0xc, 0x21, 0x0, 0xc, [0x401, 0x100000]}, @lsrr={0x83, 0x1f, 0x14, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @rand_addr=0x64010102, @loopback, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x24}, @multicast2]}]}}}}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={r6, 0x6}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={r6, 0x5}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r8, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x6000020}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r8, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfee}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x4008000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000001000000001c0012800b00010069703667726500000c00026e08000100", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) [ 755.098214][ T4413] 8021q: adding VLAN 0 to HW filter on device bond191 03:37:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) [ 755.141734][ T4445] bond191: (slave bridge310): making interface the new active one [ 755.157835][ T4445] bond191: (slave bridge310): Enslaving as an active interface with an up link [ 755.181406][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): bond191: link becomes ready 03:37:29 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x9effffff}, 0x0) [ 755.205886][ T4413] validate_nla: 1 callbacks suppressed [ 755.205895][ T4413] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:37:29 executing program 3: clock_gettime(0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x36, 0x0, 0x0, &(0x7f0000000140)={0x1000000004, 0x100, 0x0, 0x1000000000000000, 0x2000000000000000, 0x200}, &(0x7f0000000200), 0x0) r2 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r2, 0x0) 03:37:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x293eb, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 755.378481][T29962] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 755.502277][ T4476] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 755.569435][ T4476] 8021q: adding VLAN 0 to HW filter on device bond192 [ 755.629446][ T4479] bond192: (slave bridge312): making interface the new active one [ 755.648448][T29962] usb 1-1: Using ep0 maxpacket: 8 [ 755.652596][ T4479] bond192: (slave bridge312): Enslaving as an active interface with an up link [ 755.679369][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): bond192: link becomes ready [ 755.693347][ T4476] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 755.725195][ T4479] bond192: (slave bridge313): Enslaving as an active interface with a down link [ 755.768550][T29962] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 755.792804][T29962] usb 1-1: config 0 has no interface number 0 [ 755.799385][T29962] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 755.810580][T29962] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 755.820712][T29962] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 755.831033][T29962] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 755.850766][T29962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.870633][T29962] usb 1-1: config 0 descriptor?? [ 755.888892][ T4446] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 755.896028][ T4446] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 756.124679][T29962] usb 1-1: USB disconnect, device number 66 03:37:30 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000180)='\xe3$(\x00') 03:37:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) 03:37:30 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=0x0, @ANYBLOB="1c1ff15ca57e0aca7a8e06b1fc3dfda730ac1b5a3d3c306bdac820a2564665bc22138d4a9ea1ec1b04ccac3351f0f424f4288e28550ea0f1daa5878d524d30045a9d45326323ef86aae4208c48779a279d8b86d8"], 0x3c}}, 0x0) 03:37:30 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0xd8010000}, 0x0) 03:37:30 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000000)={0x100, 0x8, 0x1, 0x66, 0x81, 0x8}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xd3c, 0x400000) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r2+30000000}, 0x0) r5 = semget$private(0x0, 0x20000000102, 0x0) semop(r5, &(0x7f0000000100)=[{0x0, 0x0, 0x1800}], 0x5e) semctl$IPC_RMID(r5, 0x0, 0x10) semtimedop(r5, &(0x7f00000000c0)=[{0x4, 0x81, 0x1000}], 0x1, &(0x7f0000000100)={0x0, 0x989680}) r6 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r6, 0x0) 03:37:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x293ec, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:37:30 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FIONCLEX(r0, 0x5450) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) [ 756.709419][ T4564] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:37:30 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0xf0ffffff}, 0x0) 03:37:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x293e5, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:37:31 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0xfeff0000}, 0x0) [ 756.916829][ T4564] 8021q: adding VLAN 0 to HW filter on device bond193 [ 756.980692][ T4572] bond193: (slave bridge314): making interface the new active one [ 756.997217][ T4572] bond193: (slave bridge314): Enslaving as an active interface with an up link [ 757.008438][ T3182] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 757.025855][ T4616] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 757.072827][ T4616] 8021q: adding VLAN 0 to HW filter on device bond4 03:37:31 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0xff0f0000}, 0x0) [ 757.114927][ T4620] bond4: (slave bridge4): making interface the new active one [ 757.147785][ T4620] bond4: (slave bridge4): Enslaving as an active interface with an up link 03:37:31 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0xffffa888}, 0x0) [ 757.162848][T29962] IPv6: ADDRCONF(NETDEV_CHANGE): bond193: link becomes ready [ 757.175781][T29962] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 757.204976][ T4564] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 757.243610][ T4572] bond193: (slave bridge315): Enslaving as an active interface with a down link [ 757.259221][ T3182] usb 1-1: Using ep0 maxpacket: 8 [ 757.389806][ T3182] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 757.397991][ T3182] usb 1-1: config 0 has no interface number 0 [ 757.415130][ T3182] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 757.432707][ T3182] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 757.444066][ T3182] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 757.455460][ T3182] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 757.466713][ T3182] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.477780][ T3182] usb 1-1: config 0 descriptor?? [ 757.538645][ T4568] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 757.545668][ T4568] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 757.786533][ T3182] usb 1-1: USB disconnect, device number 67 03:37:32 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000180)='\xe3$(\x00') 03:37:32 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f00000000c0)) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fb0\x00', 0x1c000, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) poll(&(0x7f00000004c0)=[{r5, 0x4}, {r6, 0x420a}, {r7, 0x208}, {r2, 0x104}, {r8, 0x101}], 0x5, 0xa1df) r9 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r10 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r10, 0x0) 03:37:32 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000180)='\xe3$(\x00') 03:37:32 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000040)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2480c0, 0x0) openat$cgroup_devices(r3, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x480001, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000200)={0x1, 0x70, 0xff, 0x2, 0x20, 0x3c, 0x0, 0x3, 0x84000, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8c, 0x5}, 0x1008, 0x7, 0x800, 0x1, 0x6, 0xff, 0xc3}) 03:37:32 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0xfffff000}, 0x0) 03:37:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x293ed, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 758.364085][ T4713] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:37:32 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0xffffff7f}, 0x0) [ 758.460881][ T4713] 8021q: adding VLAN 0 to HW filter on device bond194 03:37:32 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0xffffff9e}, 0x0) [ 758.514342][ T4738] bond194: (slave bridge316): making interface the new active one [ 758.534693][ T4738] bond194: (slave bridge316): Enslaving as an active interface with an up link [ 758.557472][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): bond194: link becomes ready 03:37:32 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0xfffffff0}, 0x0) 03:37:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x293ee, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 758.607714][ T4738] bond194: (slave bridge317): Enslaving as an active interface with a down link [ 758.618885][ T3182] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 758.626704][ T4713] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:37:32 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006, 0x1}]}, 0x10) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000000c0)={0xa10000, 0x1, 0x6, r2, 0x0, &(0x7f0000000040)={0xdb8cb740b27fa9b0, 0x14b2, [], @string=&(0x7f0000000000)=0x3}}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000100001040000000000000000000000009b439df847a37ac86ffccdadf6ac9e7be8ff43cee470490959713927f6f7e03be60d64060af0b14afd179b937e6019a4ed6a444260130a91ec87c0cbf024ad13d0628f6cd557c60786a4f997134dcccd23f763528bb8560104982bc3d8383d69c702f4dd70440c5c90f06f18b8a821587f88dc6096adf0378b8488e486ac2722d5aae24fc04085b95297d767f6498908b53c7f4d", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) 03:37:32 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x40030000000000}, 0x0) [ 758.668621][T29962] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 758.744954][ T4779] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 758.825467][ T4779] 8021q: adding VLAN 0 to HW filter on device bond195 [ 758.835747][ T4778] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 758.857766][ T4799] bond195: (slave bridge318): making interface the new active one [ 758.865782][ T3182] usb 2-1: Using ep0 maxpacket: 8 [ 758.893417][ T4799] bond195: (slave bridge318): Enslaving as an active interface with an up link [ 758.926205][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): bond195: link becomes ready [ 758.938656][T29962] usb 1-1: Using ep0 maxpacket: 8 [ 758.947780][ T4817] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 758.967290][ T4779] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 758.989953][ T3182] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 758.997992][ T3182] usb 2-1: config 0 has no interface number 0 [ 759.015280][ T4799] bond195: (slave bridge319): Enslaving as an active interface with a down link [ 759.027983][ T3182] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 759.084250][ T3182] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 759.098547][T29962] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 759.106907][ T3182] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 759.121795][T29962] usb 1-1: config 0 has no interface number 0 [ 759.131374][ T3182] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 759.140402][T29962] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 759.147068][ T3182] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.172562][ T3182] usb 2-1: config 0 descriptor?? [ 759.177511][T29962] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 759.198813][ T4711] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 759.205889][ T4711] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 759.210223][T29962] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 759.238492][T29962] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 759.272595][T29962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.306024][T29962] usb 1-1: config 0 descriptor?? [ 759.338552][ T4721] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 759.345694][ T4721] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 759.579808][T29962] usb 1-1: USB disconnect, device number 68 [ 759.663425][ T3178] usb 2-1: USB disconnect, device number 19 03:37:34 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000180)='\xe3$(\x00') 03:37:34 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 03:37:34 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000180)='\xe3$(\x00') 03:37:34 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x4, 0x0, 0x0, 0x0, 0x76, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101800, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f00000000c0)="ab64aa72ac595d6664046332acc82c62c6efcd2d29c2bfb7b4c1ac76f79f23bb15d9c078ff89a4645235d34706a71194491cac603c1612099c0e140a606194b77397e9d3c4ba5ef2c9ec7976aa28b8edb19dd131893e4cdc671a0033d602a50d8bcf642bf78380b98f8aefd209f982b8d8a4a40ec44bcc", &(0x7f00000001c0)=""/241, 0x4}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) 03:37:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x293ef, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:37:34 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x100000000000000}, 0x0) [ 760.358225][ T4898] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:37:34 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x200000000000000}, 0x0) [ 760.438466][T29962] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 760.494028][ T4898] 8021q: adding VLAN 0 to HW filter on device bond196 03:37:34 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f00000001c0)={0xffffffff, 0x3, "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"}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$KDGKBSENT(r6, 0x4b48, &(0x7f0000000480)={0x0, "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"}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="99437566f8e7bcdd8e8934849242814f3d5eee7de8cc88d08c9ca783ee9539490b6cd03495230d4471719fea00615c731357f433ee3bf64664dd4fe191242055ff8289db18c5b920b5928ac2d5b62cf96d6fc48cdeb8ef4e6a3d5be88cab906437f60ba8c209122608f2d1f2081c1ebe8d97040102a53bae55b779219ab25f6c6eb7a4826a6a36dad4b4fb795b", @ANYRESHEX, @ANYRES16=r5, @ANYRES32=0x0, @ANYBLOB="4ad3e8394bf5b6ffdabf4332aaaa0f3233636aaae82fcded5c2a51d05a22c91b4271dcd3f90401aca5c844ca660213c5164d56e68e8f12cc0bea6e9e526995ea1d055f9c633093de5e32ac294d716f018cf2c723"], 0x3c}}, 0x0) [ 760.593111][ T4905] bond196: (slave bridge320): making interface the new active one 03:37:34 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x300000000000000}, 0x0) [ 760.638546][ T3178] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 760.648822][ T4905] bond196: (slave bridge320): Enslaving as an active interface with an up link [ 760.687401][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): bond196: link becomes ready [ 760.708300][T29962] usb 1-1: Using ep0 maxpacket: 8 [ 760.720812][ T4898] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 760.788598][ T4905] bond196: (slave bridge321): Enslaving as an active interface with a down link 03:37:34 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x400000000000000}, 0x0) [ 760.839912][T29962] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 760.847959][T29962] usb 1-1: config 0 has no interface number 0 03:37:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x293f0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 760.885593][T29962] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 760.888134][ T3178] usb 2-1: Using ep0 maxpacket: 8 [ 760.953131][T29962] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 760.991950][T29962] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 03:37:35 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x500000000000000}, 0x0) [ 761.013359][ T4966] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 761.028367][T29962] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 761.048625][ T3178] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 761.056661][ T3178] usb 2-1: config 0 has no interface number 0 [ 761.064052][T29962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.093420][T29962] usb 1-1: config 0 descriptor?? [ 761.106164][ T4966] 8021q: adding VLAN 0 to HW filter on device bond197 [ 761.118736][ T4888] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 761.126521][ T4888] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 761.140938][ T3178] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 761.214202][ T4976] bond197: (slave bridge322): making interface the new active one [ 761.218559][ T3178] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 761.264829][ T4976] bond197: (slave bridge322): Enslaving as an active interface with an up link [ 761.286742][T29962] IPv6: ADDRCONF(NETDEV_CHANGE): bond197: link becomes ready [ 761.298291][ T3178] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 761.301180][ T4966] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 761.345993][ T3178] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 761.369596][ T2593] usb 1-1: USB disconnect, device number 69 [ 761.390300][ T3178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.402615][ T4976] bond197: (slave bridge323): Enslaving as an active interface with a down link [ 761.444196][ T3178] usb 2-1: config 0 descriptor?? [ 761.479323][ T4901] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 761.486382][ T4901] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 761.844691][ T3182] usb 2-1: USB disconnect, device number 20 03:37:35 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000180)='\xe3$(\x00') 03:37:35 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x600000000000000}, 0x0) [ 762.258050][ T3178] usb 1-1: new high-speed USB device number 70 using dummy_hcd 03:37:36 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000180)='\xe3$(\x00') 03:37:36 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x800000000000000}, 0x0) 03:37:36 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x8000, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40405515, &(0x7f0000000040)={0x2, 0x6, 0x6, 0x1, '\x00', 0x19}) setregid(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setregid(0x0, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setregid(0x0, r6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setregid(0x0, r7) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000100020000000000040003000000000008000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=r7, @ANYBLOB="a434f4cdd2e1520ec18f9809e900cff162012282bd783334bd209b854a5c2d6e2f18fb72438550fdf55a2eba603237204dab94000af4f22f7d7402cbecfdeea096218a935147aec4a8e6ccf5e29588c717dd11220b9d90b1ce6e7f3bc75b014e611f5444fe0598c4f1a6bac2c1", @ANYRES16=r0, @ANYBLOB="10000200000000002000050001800000237ee231719123eb922ca048347275177792a0b864cfa3278e8ec6951f08101cd3d1c5dd920b80073c66f51989a7d9ea814cca58d90013879c21a54c59c8572370e3c44db03b8aa113e1e965508df9eb5da1ced4e293bd8529796eb85dd457df0000000000000cd241cc332e9b9f3e1e03d91772657021ff1106b226432cfc4a8c0baa6f09", @ANYBLOB="1f65e99a6e59f10a1933df1bf0d70c86c908c666e485d4da47a583dfe2c6db439addb204529d8ae11b6ab33b2d0309d1c56ba77c287debf1a56c5dd5f43f001da68bb2c6c0c769c9aea17884432a9c0174787d472bd1162ad222eb8f4488ff98914b8edeaadcc086e5526f53fd183984f6b3dd984c93787e52f14febdc168999cbce8cb63cb28d9d1330e313befa7900772fc515b33c2ad430367805c7f8e1568e34951ea51877eab7ef54f4813b9f9b06dba32b28e5557298776f3bac3f90a35d023fe54c4e020525378b1ad704b4afcb998206c11f", @ANYRESOCT=r4, @ANYRES32=r7], 0x4c, 0x1) r9 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r1+30000000}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)={'syz0', "d97cc5fcb70d4e9917190de62ef32b2f64339f6f3bebc2a3f69b70a65911f9a50c3f012944b073fbde9f75b84c0402de52cd31ff33a685cb10449ba157cacf65eabde859d1514503607b7886c5da8e844a1599e7e413f0aef7bf0d50"}, 0x60) r10 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r10, 0x0) 03:37:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x293f1, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:37:36 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000040)={0x2a, 0x2, 0x8000}, 0xc, &(0x7f0000001500)=[{&(0x7f00000001c0)="fba37137da970ed7b3ba70c390d6ffe326896dd785cb60861e1cbfcbadf5bd76a2aaa19f9317b0c3ff15829faec106f7b3b8172ec75c8f19999d03615ebbe7fe28825553e5e717ed3311ae62f538d79491a104e300dbd3a08369733d953482348e6bf7a3e8ee89ecf5f039bda9e7bdf09c486a85769096928641398aed9e6d8e93d902c81ac62e9d7a6f7b92287b7751e1bfbb2cd91bb13d3426361cf569f107061c3e640272403078fdb07c82b3404cfee3845dbf7f985e3c548911220a3e7f05c55a03c5183d9008bd86fc5c272229139fb7e0cb6e2fb3806cad2977c924f6f3d48d0af580e8ee78eb424e57ebe7af3daf", 0xf2}, {&(0x7f00000002c0)="6c42ef447aeb6a8ceb17557a920b5543b1bfee73d676af5bd6d894d812f8aaca75324a584ca774b860820b02c050971f61d79f92a5a2859f4477b1fd6ab80ce540beb1dfe21668e1aef93a4a2f1dc8e00a80f4113d50c519596826868373c7526aa16725f0d1ca5a665dd106bdaa1b8f765a8704e8714adb95b8f264486e0eddd07315534eccca5808d9452b6609c435a6ad682e3b59f539ad7e37f2af8135261267df29", 0xa4}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f00000000c0)="d94d90a637725549147decf9892033795cadb3b09cb36bd6de177e1304f21deb2d07eb6900f7", 0x26}, {&(0x7f0000000100)="4c3d190770fdde8796558403c4000701ae7cf57d5271ec0206486f11fa6a6b0e06b44cb795179c5858598e47", 0x2c}, {&(0x7f0000001380)="e88c40d8508a2d07fb103d8d70cd60f465ce05d0", 0x14}, {&(0x7f00000013c0)="98c636850cf6c020750034bd69712079537fb47e94bbfa8f6a5ffc6755bf522cadc1314da54fc38ecf29e2fb84e0688f36ac246ca899b3babacc1abea2ff9a595759e96152d7a710b972780742d33b703598a0381dc4b0f5dfea5b9b8dd4c4348b8a541558ebae98113de2a2c12cc5e5842b6df3dbe57c92bed8112cf5f6d424c8a52cd37e0a2e696cc1fb0f2bdfa3a59a810ef25d762c7423b781e0de8c826b2d752d70b1955eaf", 0xa8}, {&(0x7f0000001480)="1770ecdc6e50009c7e99fcbba6ee19d760dcc0dc31a47d1828357cfc0bb3fb5436bdae50da2e78106dc544f5f306dab33c423090c54d7ddefc400396d1eaba4940c8cc3333bea65635038a2da73b4279f5b3ce5a7320e1501c340c01eafc55d917ded0a9585d", 0x66}], 0x8, &(0x7f0000001580)=[{0xe0, 0x118, 0xd34, "992f4624833c0272c51917ba78ed8b3e587b89308ad68ac4970e37d76d756364c91c0f73559b5765986a024f0bcf7244c796901089aa4b401e762ac8b86fd79f15bb611b342df41e50e715e6046980aab7dddee9338d90e78a9e14ebee37122a22f59f7dd4eb82494da0b986e41030a65f2177f8c3ef9adf1c61cffb74dfa5fe15a88f3f521d2cecfd58c475a793ce56b53fcbbf0f2d75914d27bc4794e8e96c371a1422edca043b3c3237526e5a5e33a209456c9adec6fb5c8056a4b8629c364d2f1d65cc8d6aa6dc0b04b79e9b0e85"}, {0xa0, 0x102, 0x165, "6c5a07d2b7f6038653c08cf9a5eb45a127cdb91d2c37b3164892f31f4fce88e0f4f7d23230986af870dd5eaf75adf2c03c5a7ce2939ab1338af04e295b30b412d0471a8596ba9d1917176214213c3fd37db2f1d4977c04d824a028e27d129a1642557f3a88b70510bd68b4b13ff07e486cee6c5a0f4bcb7b319449dda214c3a836b625f97b6bad12158915c7f32e4a"}, {0x38, 0x107, 0x18000, "48e7fa10dfce72827e0731316b3bf7dcb358d204941418c3c2c59e6e29aeb9bac0c18d5000"}, {0xd0, 0x1, 0x80000001, "130d417302dcc451b4acd2fafef6f9311057fff89a2edc3ed073b22d95edf2dbff26f025c655f9ac79a4401d4d6e48325f76312dcc0cbf1a93634d2c4c7f162fa6564fad2cebf3038e5de41d5db49d4dd6d690c3b94f02361a37ebae6b7f4fa26f2afc00f162bc1728239f44acad208e403afa709e399b7f7864856b7ccab81b5d8eef5a69054ba5b33ef6e0930dca316f955c20249ae6fed6817859b23b7ff88bd56f3c6471c1179d7f796679ef8aefb7fc2690553d879ca134ce077da3"}], 0x288, 0x4080}, 0x38) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000001b00)={0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x14, r7, 0x309, 0x0, 0x0, {0x34}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f0000001ac0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a80)={&(0x7f00000018c0)={0x18c, r7, 0x8, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x7}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0xa}, {0x5, 0x14, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0xeab}, {0x5, 0x14, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x63e}, {0x8, 0x13, 0xc0}, {0x5, 0x14, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0xa3}, {0x5}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x800}, 0x4000840) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000000)=r4) r8 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) 03:37:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000100)}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x4}]}}]}, 0x38}}, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r8, 0x40044103, &(0x7f0000000040)=0x630) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan1\x00', r6}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_deladdr={0x2c, 0x15, 0x4, 0x70bd29, 0x25dfdbfd, {0xa, 0x18, 0x57, 0xc8, r9}, [@IFA_CACHEINFO={0x14, 0x6, {0x5, 0x10, 0x1, 0x800}}]}, 0x2c}}, 0x204c8c1) [ 762.481202][ T5081] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 762.498210][ T3178] usb 1-1: Using ep0 maxpacket: 8 [ 762.547250][ T5081] 8021q: adding VLAN 0 to HW filter on device bond198 03:37:36 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x900000000000000}, 0x0) [ 762.595170][ T5097] bond198: (slave bridge324): making interface the new active one [ 762.609311][ T5097] bond198: (slave bridge324): Enslaving as an active interface with an up link [ 762.622490][ T3178] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 762.634361][ T3178] usb 1-1: config 0 has no interface number 0 [ 762.644234][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): bond198: link becomes ready [ 762.654367][ T3178] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 762.666930][ T3178] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 762.681877][ T3178] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 762.682256][ T5081] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 762.693557][ T3178] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 762.711883][ T3178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.723875][ T3178] usb 1-1: config 0 descriptor?? [ 762.747138][ T5097] bond198: (slave bridge325): Enslaving as an active interface with a down link [ 762.758719][ T5071] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 762.765700][ T5071] raw-gadget gadget: fail, usb_ep_enable returned -22 03:37:36 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0xa00000000000000}, 0x0) [ 762.788954][ T2593] usb 2-1: new high-speed USB device number 21 using dummy_hcd 03:37:36 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x50100, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=0x0, @ANYBLOB="aa35bbef9aef3994508ae530cc7641b575285427ff7bae676bbe6ff17d7f9b0e3bcb8d660a37b33d4d2f0969733d309ac573b02dcf2da1352a0adfdf273741c81aeb034c7560874ca03b02695216f53c1f9ace5e7c0a27b9d1a47bedef1dd412cfeb0f47c9e82a6fe8192fcff2ec705c7bece36e63302e3141e2159ef3668f81f843a597373410e7d3cb0f0283018566463dad3b8c17d3f56a"], 0x3c}}, 0x0) 03:37:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x293f2, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 762.999161][ T5154] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 763.022889][ T3178] usb 1-1: USB disconnect, device number 70 [ 763.038741][ T2593] usb 2-1: Using ep0 maxpacket: 8 [ 763.115870][ T5154] 8021q: adding VLAN 0 to HW filter on device bond199 [ 763.161762][ T5156] bond199: (slave bridge326): making interface the new active one [ 763.170630][ T2593] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 763.179479][ T2593] usb 2-1: config 0 has no interface number 0 [ 763.186937][ T2593] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 763.206362][ T5156] bond199: (slave bridge326): Enslaving as an active interface with an up link [ 763.230724][ T2593] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 763.241542][ T2630] IPv6: ADDRCONF(NETDEV_CHANGE): bond199: link becomes ready [ 763.283723][ T5154] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 763.300548][ T2593] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 763.335061][ T2593] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 763.361378][ T2593] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 763.370990][ T2593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.372768][ T5156] bond199: (slave bridge327): Enslaving as an active interface with a down link [ 763.408242][ T2593] usb 2-1: config 0 descriptor?? [ 763.468831][ T5088] raw-gadget gadget: fail, usb_ep_enable returned -22 03:37:37 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0xc00000000000000}, 0x0) 03:37:37 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_MAP={0x24, 0xe, {0x9, 0x1, 0x5, 0x0, 0x7, 0x2a}}]}, 0x44}}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000340)={0x32, 0x6, 0x0, {0x4, 0x5, 0x9, 0x0, 'mptcp_pm\x00'}}, 0x32) sendmmsg$sock(r0, &(0x7f0000000b40)=[{{&(0x7f0000000380)=@pppoe={0x18, 0x0, {0x1, @broadcast, 'bond0\x00'}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)="75eeb548848acb31dbf6bf70cf6e72644502137f18a5d30c9816674c4c12f620e46d916f9af01a1bbfa7805ee8404920194186e3940c67d14e528f0bc496f547c5faa4dae1a872384edd16a99fe7e4ff4324fae3f61d628331434d34364c6dc0a4d7c16e20166066d4770955dc78f2645377af141e29ffec63fb4c3d34aeccff9fbd5b71df9479feb681fa6c58e75da9d6751ba52c4237a04224d985e0b068cdc0e993eea7aba5a69502b8459e3bfc894503acac82f64c3126", 0xb9}], 0x1, &(0x7f0000000500)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x3a400000}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x401}}], 0xd8}}, {{&(0x7f0000000600)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x8000}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000680)="7c8d57e972bbe03edfd6e64997fe7e6a053439a88d506459b2eb971d6fb1bf628aca8c75f06a5b8e2f2af84a1f6be9b8671596f53e408c375d158c69fdc17142797f5a451138135454536ed75d46f5545618", 0x52}, {&(0x7f0000000700)="99", 0x1}, {&(0x7f0000000740)="d5bc12330247b07599d32a7445edae81e6efffe2907b8258aa1d9ec0d400f61c18", 0x21}, {&(0x7f0000000780)}, {&(0x7f00000007c0)="6978921b2b1504ef79f9cd3e2ab35e238bd73fde9730e6e1d30bccd5cfea7296b5df1df26cd1c5392c8aaed2685f240fa4ed10c26c408171c8075ac59e050b63340739e154d5793d36d714738917b3c84e69e2dc115f3cae7c5dd9fa6b8fc86d6bce34", 0x63}, {&(0x7f0000000840)="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", 0xfa}, {&(0x7f0000000940)}, {&(0x7f0000000980)="46995853d3f59f97d1000eadf20e3c09aaf9851e2df44dc38aee60284b9bc989ef7964a1c2da8682aa756f732bc0a2eb8827f774e6e3f6d0bc20f61ce0124c792d7ced9c477facad433706a151bb3253d99e9bba95a682a44746f34ef2a4560974781cd378c5ab9b8d1a", 0x6a}], 0x8, &(0x7f0000000a80)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0xec3}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0xff}}], 0x90}}], 0x2, 0x80) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00') ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f00000001c0)=[@acquire_done={0x40106309, 0x2}, @increfs_done, @acquire, @acquire_done={0x40106309, 0x3}, @exit_looper, @exit_looper], 0xac, 0x0, &(0x7f0000000240)="e192fe369ce8859661890b7ed71d9e13f5b2cc8229497c313e5500bcba1920a40489862d4c95434a85e1c7206830d7f5ccd8f0bf859a810682d905927ebf8d3ea99ea16206eb13150501a33d756b2883a01fb33eb6f74b025db9b4e7346831e2a884a69a793b17becf50c5c94bb3ec80e021f1db052015e56e0b38975d583c980ea0b32f40fc3a54e2e6c1f422ed796caf645a4de019fbbd2b175853491b531d6dd3458ea36bbda490d9db65"}) [ 763.534792][ T2593] snd-usb-audio: probe of 2-1:0.2 failed with error -12 [ 763.715967][ T2593] usb 2-1: USB disconnect, device number 21 03:37:38 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000180)='\xe3$(\x00') 03:37:38 executing program 3: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r3 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r3, 0x0) 03:37:38 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000180)='\xe3$(\x00') 03:37:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x293f3, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:37:38 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0xe00000000000000}, 0x0) 03:37:38 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_CAPS(r1, 0x80044dfc, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) [ 764.286763][ T5231] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:37:38 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0xf00000000000000}, 0x0) [ 764.359362][ T5231] 8021q: adding VLAN 0 to HW filter on device bond200 [ 764.390335][ T5246] bond200: (slave bridge328): making interface the new active one [ 764.402440][ T5246] bond200: (slave bridge328): Enslaving as an active interface with an up link [ 764.415591][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): bond200: link becomes ready [ 764.431244][ T5231] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:37:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x293f4, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 764.454409][ T5246] bond200: (slave bridge329): Enslaving as an active interface with a down link 03:37:38 executing program 5: syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 764.539661][ T5288] 8021q: adding VLAN 0 to HW filter on device bond201 [ 764.578762][ T8302] usb 1-1: new high-speed USB device number 71 using dummy_hcd 03:37:38 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x1000000000000000}, 0x0) [ 764.582869][ T5288] bond201: (slave bridge330): making interface the new active one [ 764.594743][ T3178] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 764.673979][ T5288] bond201: (slave bridge330): Enslaving as an active interface with an up link 03:37:38 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000104000000000016000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x4}]}}]}, 0x38}}, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x4}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000800)=@ipmr_delroute={0x98, 0x19, 0x200, 0x70bd2b, 0x25dfdbff, {0x80, 0x80, 0x80, 0x1f, 0xfe, 0x0, 0xfd, 0x0, 0x700}, [@RTA_IIF={0x8, 0x3, r5}, @RTA_METRICS={0x61, 0x8, 0x0, 0x1, "ef1d6fafaff54eb48ce7e63bb89140d5941e95a2ad6d1f3824c8686808a33f1f2ad31d1ca6c32ddb821e7672dc49dc21854a6ad7fa9afccf0a2d28aa9ebac4de9e742c80dff676e754f9238c98e06186e01a269530d95eb7377ffc335f"}, @RTA_IIF={0x8, 0x3, r9}, @RTA_PRIORITY={0x8, 0x6, 0x7}]}, 0x98}, 0x1, 0x0, 0x0, 0x4080}, 0x4000810) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r10, @ANYBLOB="ec6df798446d14dafae3720ad7fe2ec747000000000000000000000000003a93e1c3f7d3cb9bc70b72b31bdb47297ba36c93fc1db42351a4f136884b05e852c240b1cc92dfcb7e11f95b11cad748a6a284e0f93f0f4a83c808dfd608d8aeb470dbb7bec0ab108d29d168a198770956d1f503680ccca88634d15f50bbfdf4d49e8bcaba9a3d3024ddd203446099675c3de27d96fe18cba4b423e7db1dcac4820495"], 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000280)={0x478, r10, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x464, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xbb, 0x5, "7dfbbf0cffd4f306045ef5bdf46e838bc11280753a4f61ed0e3da6dbc19b0a4c273eb7f5d82a97d4eb9539fed0a8086e3f85894315f470e459ec190a894bdd02ebd019fb0e4b13791afa8a4768cfdf234c34f8352e368bcdfae336a9f8d5bc62489af0ee923e72cff14e82b7d0d97811c7e156f9d35bc9ca569317e3d1d427aedb6980de2b245564744d2bc35611fc4dd1445fa00ca3990b94b33830d5eea541cb1cc25ddb97e88b637f65b7c5048a887459331cce0ba2"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'fq\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'fq\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'fq\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xf1, 0x5, "95541009eedb2692700109109487c6e4a777f908f7e3c0dbfebd1bc5650e5b6e8b740693bb30154d4d35083fc0f7419f9b42adc7ca06778753a03373d90b9b25ee4ad1b425cbd98276df6a2054b55b38078806fe3b89f15d1e702b7878c397abe30136ad6206f59c50dcef49b787a0c94785cf83e2d6ed3b76bf8d0cc4397ff8dcb88a7c9a840469828c805ac27006bcc093876dea5948ebdd991453d72a2019b8739bc8b18967ff1dc10927ed18f638bc28faabdb7d66665e854635b1844b620a2d708f5b758b627a9417fbafcce3f95b542cd78facbcb7260eca1d6e41fd4b7445a588c55c2898f13ede9d3e"}, @ETHTOOL_A_BITSET_BITS={0x164, 0x3, 0x0, 0x1, [{0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, '(%%@\\:,%(/,$&&$&\xc5\xd6{/%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, 'lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r'}, @ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, 'lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '(:}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, 'lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'fq\x00'}]}, {0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, 'lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x67}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '\\*.,#-[(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, 'lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r'}, @ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, 'lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$u\xa4\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '#.#+\xf2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x69}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'fq\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'fq\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '{{-,]8-,+\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1e200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '$*\xa9+%#]-:\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x101}, @ETHTOOL_A_BITSET_BITS={0x114, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xaf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb0}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'fq\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'fq\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ')]#@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'fq\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffe1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2fa}]}]}]}]}, 0x478}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) [ 764.752552][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): bond201: link becomes ready 03:37:38 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000100)={'veth1_vlan', 0x32, 0x32}, 0xd) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000000)={0x20, 0x1, 0x1, 0x7, 0x1, 0x2}) r5 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r3, 0xc1004111, &(0x7f0000000280)={0xfff, [0x70510177, 0x4], [{0x0, 0x400, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x10001000, 0x0, 0x1, 0x1}, {0xfffffffb, 0x1000, 0x0, 0x1, 0x1}, {0x41, 0x7fffffff, 0x0, 0x0, 0x1, 0x1}, {0x727, 0x3, 0x0, 0x1}, {0x9, 0x101, 0x1, 0x0, 0x1, 0x1}, {0x48391f31, 0x4d66954b, 0x0, 0x1, 0x1}, {0x1, 0xd0c, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x1, 0x1}, {0x108, 0xfff, 0x1, 0x1}, {0x4, 0x401, 0x1}, {0xfff, 0x0, 0x1, 0x0, 0x1}], 0x2d}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r5, 0x0) [ 764.836125][ T8302] usb 1-1: Using ep0 maxpacket: 8 [ 764.838065][ T3178] usb 2-1: Using ep0 maxpacket: 8 [ 764.871545][ T5337] bond201: (slave bridge331): Enslaving as an active interface with a down link [ 764.966838][ T8302] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 764.968353][ T3178] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 764.978970][ T8302] usb 1-1: config 0 has no interface number 0 [ 764.993693][ T8302] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 765.014230][ T8302] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 765.025369][ T3178] usb 2-1: config 0 has no interface number 0 [ 765.025413][ T3178] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 765.025431][ T3178] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 765.025449][ T3178] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 765.066922][ T8302] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 765.084539][ T8302] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 765.096025][ T8302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.114208][ T8302] usb 1-1: config 0 descriptor?? [ 765.138172][ T3178] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 765.154396][ T3178] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 765.162135][ T5236] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 765.164859][ T3178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.182680][ T5236] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 765.183640][ T3178] usb 2-1: config 0 descriptor?? [ 765.248281][ T5240] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 765.318877][ T3178] snd-usb-audio: probe of 2-1:0.2 failed with error -12 [ 765.431143][ T8302] usb 1-1: USB disconnect, device number 71 [ 765.542840][ T3178] usb 2-1: USB disconnect, device number 22 03:37:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x293f1, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:37:40 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x3703000000000000}, 0x0) 03:37:40 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100001040000000000000000080000005337df839324c826ede60eadd48a8bba735bfac5e3dd15a5d95bd6e417f49e6e8ec27f65d258ba96caf9b75aa6dbe833bed0f795ebaa0f9a4e33bd1e7a5520dc921ff90087d43d9dc16201df0e5df2bcecdb30672120d8728e36ee6af36fe6d5a20bdae1d094a36d1c98130aefa8e3106fad2868995c0357ad6bd287caf22c2d", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) 03:37:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x293f5, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:37:40 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000340)={{0x2, 0x0, @reserved="267c3464fe59af27357209f439b72623b26f55880cd6afb1f63ebb7cd8fc2e6c"}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r4}, 0xfffffffffffffdb2) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={r4, 0x6}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={r4, 0x313}, &(0x7f0000000180)=0x8) mmap(&(0x7f000012b000/0x3000)=nil, 0x3000, 0x2000001, 0x11, r1, 0x0) r5 = gettid() tkill(r5, 0x1000000000016) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000000c0)={@empty, @private}, &(0x7f0000000280)=0xc) r6 = syz_open_procfs(r5, &(0x7f00000002c0)='smaps\x00') ioctl$TIOCGWINSZ(r6, 0x5413, &(0x7f0000000040)) 03:37:40 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000180)='\xe3$(\x00') [ 766.122953][ T5396] validate_nla: 2 callbacks suppressed [ 766.122964][ T5396] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:37:40 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x3f00000000000000}, 0x0) [ 766.227843][ T5396] 8021q: adding VLAN 0 to HW filter on device bond202 [ 766.264189][ T5398] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 766.281288][ T5401] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 03:37:40 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x2, 0x6, 0x1, 0x60d, 0x4, 0x6, 0x6}, 0x1c) [ 766.335142][ T5401] 8021q: adding VLAN 0 to HW filter on device bond5 03:37:40 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x4000000000000000}, 0x0) [ 766.391868][ T5419] bond202: (slave bridge332): making interface the new active one [ 766.400122][ T8302] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 766.421134][ T5419] bond202: (slave bridge332): Enslaving as an active interface with an up link [ 766.456076][ T5429] bond5: (slave bridge5): making interface the new active one [ 766.485052][ T5429] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 766.496440][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): bond202: link becomes ready 03:37:40 executing program 1: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x1000000000000000) 03:37:40 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x6000000000000000}, 0x0) [ 766.513476][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 766.547337][ T5419] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:37:40 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) 03:37:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x293f6, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 766.647871][ T8302] usb 1-1: Using ep0 maxpacket: 8 03:37:40 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x6558000000000000}, 0x0) 03:37:40 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6db6e559) [ 766.695755][ T5501] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 766.768234][ T8302] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 766.777060][ T5501] 8021q: adding VLAN 0 to HW filter on device bond203 [ 766.784493][ T8302] usb 1-1: config 0 has no interface number 0 [ 766.793282][ T8302] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 766.805589][ T8302] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 766.819086][ T8302] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 766.829746][ T8302] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 766.839779][ T8302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.850514][ T8302] usb 1-1: config 0 descriptor?? 03:37:40 executing program 5: r0 = syz_open_procfs(0x0, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)={0xa, {0xe0000000, 0xdb9c, 0x7, 0x5}, {0x2, 0xca9, 0x7, 0x7}, {0xff, 0x5a3}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x2201, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffe}, r2, 0x100800000000000, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f00000001c0)=0xc) r4 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') sendmsg$AUDIT_SET_FEATURE(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x3fa, 0x10, 0x70bd2b, 0x25dfdbfe, {0x1, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xdeb0b9432e643593}, 0x48000) ioctl(r4, 0x100, &(0x7f0000000580)="4f3f9e966550f7a4c0e1841ac95629d74c505e8d11dca50d5e0bcfe47bf070") r6 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@x25, &(0x7f0000000540)=0xfffffffffffffe94) r7 = geteuid() fsetxattr$system_posix_acl(r6, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB='\b\x00'/12, @ANYRES16, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="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"/436, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES64=r4, @ANYRESDEC, @ANYRES32], 0x7, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000200)={0x5, 0x0, {r3}, {r7}, 0x152, 0x6}) r8 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x4) fcntl$setsig(r8, 0xa, 0x27) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=0x0, @ANYBLOB="72525c808afe493c164d8fb0a2d7fc5df253f9b02acdd6909ccad6d8f50492490988f3a68f227279dc52e856951814d08a9a367d263320e18bc53d63727dcebc3d72b19378d5e234c239bc71c672049bd0590273b852467a0e08e05d067731029f90a576d63c8d2792dcc5525b0f08ac181a3614e794e82f8c"], 0x3c}}, 0x0) [ 766.876237][ T5395] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 766.884284][ T5395] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 766.896202][ T5513] bond203: (slave bridge334): making interface the new active one [ 766.982039][ T5513] bond203: (slave bridge334): Enslaving as an active interface with an up link [ 767.038724][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): bond203: link becomes ready [ 767.061537][ T5501] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 767.087073][ T5513] bond203: (slave bridge335): Enslaving as an active interface with a down link [ 767.138306][ T8302] usb 1-1: USB disconnect, device number 72 03:37:43 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x143241, 0x52) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000040)=0x100000) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSCTTY(r7, 0x540e, 0x0) r8 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r8, 0x0) 03:37:43 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6db6e559) fcntl$getflags(r0, 0x1) 03:37:43 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x8100000000000000}, 0x0) 03:37:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x293f7, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:37:43 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000180)='\xe3$(\x00') [ 769.136006][ T5589] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 769.197345][ T5589] 8021q: adding VLAN 0 to HW filter on device bond204 03:37:43 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x88a8ffff00000000}, 0x0) 03:37:43 executing program 1 (fault-call:1 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 769.341652][ T5616] bond204: (slave bridge336): making interface the new active one 03:37:43 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x9effffff00000000}, 0x0) [ 769.401267][ T5616] bond204: (slave bridge336): Enslaving as an active interface with an up link [ 769.408430][ T3178] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 769.432636][ T5644] FAULT_INJECTION: forcing a failure. [ 769.432636][ T5644] name failslab, interval 1, probability 0, space 0, times 0 [ 769.445674][ T5644] CPU: 0 PID: 5644 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 769.454270][ T5644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 769.464333][ T5644] Call Trace: [ 769.467637][ T5644] dump_stack+0x18f/0x20d [ 769.471984][ T5644] should_fail.cold+0x5/0x14 [ 769.476580][ T5644] ? rwlock_bug.part.0+0x90/0x90 [ 769.481534][ T5644] should_failslab+0x5/0xf [ 769.485958][ T5644] kmem_cache_alloc+0x40/0x3b0 [ 769.490729][ T5644] __inet_hash_connect+0x7f9/0xfb0 [ 769.495855][ T5644] ? __inet6_lookup_established+0xa20/0xa20 [ 769.501759][ T5644] ? inet_hash+0xa0/0xa0 [ 769.506096][ T5644] tcp_v6_connect+0x1176/0x1dd0 [ 769.510964][ T5644] ? inet6_sk_rx_dst_set+0x2e0/0x2e0 [ 769.516266][ T5644] ? __lockdep_free_key_range+0x110/0x110 [ 769.522003][ T5644] __inet_stream_connect+0x817/0xe30 [ 769.527284][ T5644] ? mark_lock+0xbc/0x1710 [ 769.531695][ T5644] ? lock_downgrade+0x820/0x820 [ 769.536547][ T5644] ? inet_init_net+0x520/0x520 [ 769.541310][ T5644] ? mark_held_locks+0x9f/0xe0 [ 769.546066][ T5644] ? __local_bh_enable_ip+0x159/0x250 [ 769.551427][ T5644] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 769.557389][ T5644] ? lock_sock_nested+0x94/0x110 [ 769.562316][ T5644] ? trace_hardirqs_on+0x5f/0x220 [ 769.567353][ T5644] inet_stream_connect+0x53/0xa0 [ 769.572291][ T5644] ? __inet_stream_connect+0xe30/0xe30 [ 769.577740][ T5644] __sys_connect_file+0x155/0x1a0 [ 769.582774][ T5644] __sys_connect+0x160/0x190 [ 769.587369][ T5644] ? __sys_connect_file+0x1a0/0x1a0 [ 769.592573][ T5644] ? vfs_write+0x1b0/0x6b0 [ 769.597001][ T5644] ? fput_many+0x2f/0x1a0 03:37:43 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0xd801000000000000}, 0x0) [ 769.601335][ T5644] ? ksys_write+0x1a5/0x250 [ 769.605842][ T5644] ? lock_is_held_type+0xb0/0xe0 [ 769.610786][ T5644] ? do_syscall_64+0x1c/0xe0 [ 769.615379][ T5644] __x64_sys_connect+0x6f/0xb0 [ 769.620162][ T5644] ? lockdep_hardirqs_on+0x6a/0xe0 [ 769.625282][ T5644] do_syscall_64+0x60/0xe0 [ 769.629794][ T5644] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 769.635692][ T5644] RIP: 0033:0x45cba9 [ 769.639580][ T5644] Code: Bad RIP value. [ 769.643653][ T5644] RSP: 002b:00007f904884bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a 03:37:43 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) [ 769.652060][ T5644] RAX: ffffffffffffffda RBX: 00000000004dbfc0 RCX: 000000000045cba9 [ 769.657604][ T3178] usb 1-1: Using ep0 maxpacket: 8 [ 769.660015][ T5644] RDX: 000000000000001c RSI: 0000000020000180 RDI: 0000000000000003 [ 769.660068][ T5644] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 769.660077][ T5644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 769.660087][ T5644] R13: 000000000000008b R14: 00000000004c35ea R15: 00007f904884c6d4 [ 769.663976][ T8302] IPv6: ADDRCONF(NETDEV_CHANGE): bond204: link becomes ready [ 769.718649][ T5589] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:37:43 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0xfeff000000000000}, 0x0) [ 769.777877][ T5616] bond204: (slave bridge337): Enslaving as an active interface with a down link [ 769.787877][ T3178] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 769.809355][ T3178] usb 1-1: config 0 has no interface number 0 [ 769.822351][ T3178] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 769.845769][ T3178] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 769.872961][ T3178] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 769.917989][ T3178] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 769.931657][ T3178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 03:37:44 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20400, 0x400}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x8}]}, 0x28}}, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x2100, 0x0) ioctl$SNDCTL_DSP_POST(r3, 0x5008, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000001240)={{0x3, 0x0, @reserved="f581a1e1c114b2b50ae759d5c6bee8952fbdbd7c0eebd205000000006152df40"}, 0x1030, 0x0, [], "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"}) 03:37:44 executing program 1 (fault-call:1 fault-nth:1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:37:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x293f8, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:37:44 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0xff0f000000000000}, 0x0) [ 769.973540][ T3178] usb 1-1: config 0 descriptor?? 03:37:44 executing program 3: clock_gettime(0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r2 = accept$packet(r1, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000880)=0x14) fcntl$setsig(r2, 0xa, 0x35) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4fc, 0x4, 0x4, 0x800}, {0x7ff, 0x0, 0xff, 0xfff}]}, 0x10) shutdown(r3, 0x5ccdf49f44473844) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') recvmsg$can_raw(r7, &(0x7f0000000800)={&(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000300)=""/129, 0x81}, {&(0x7f0000000100)=""/45, 0x2d}, {&(0x7f00000003c0)=""/78, 0x4e}, {&(0x7f0000000180)=""/13, 0xd}, {&(0x7f0000000440)=""/184, 0xb8}, {&(0x7f0000000500)=""/163, 0xa3}, {&(0x7f00000005c0)=""/142, 0x8e}], 0x7, &(0x7f0000000700)=""/240, 0xf0}, 0x40004040) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0xfffffffffffffffa, 0xfffffffffffffffb, 0x0, 0x4000000000000000}, &(0x7f0000000200)={r5, r6+10000000}, 0x0) r8 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r8, 0x0) [ 770.006753][ T5668] FAULT_INJECTION: forcing a failure. [ 770.006753][ T5668] name failslab, interval 1, probability 0, space 0, times 0 [ 770.020707][ T5590] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 770.041138][ T5590] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 770.053650][ T5672] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 770.097858][ T5668] CPU: 1 PID: 5668 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 770.106478][ T5668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 770.116532][ T5668] Call Trace: [ 770.119808][ T5668] dump_stack+0x18f/0x20d [ 770.124122][ T5668] should_fail.cold+0x5/0x14 [ 770.128696][ T5668] should_failslab+0x5/0xf [ 770.133108][ T5668] kmem_cache_alloc_node+0x257/0x3c0 [ 770.138377][ T5668] __alloc_skb+0x71/0x550 [ 770.142691][ T5668] sk_stream_alloc_skb+0x109/0xc30 [ 770.147781][ T5668] ? lock_is_held_type+0xb0/0xe0 [ 770.152703][ T5668] tcp_connect+0xf17/0x48f0 [ 770.157208][ T5668] ? __tcp_transmit_skb+0x3690/0x3690 [ 770.162565][ T5668] ? prandom_u32_state+0x10/0x180 [ 770.167571][ T5668] tcp_v6_connect+0x1338/0x1dd0 [ 770.172416][ T5668] ? inet6_sk_rx_dst_set+0x2e0/0x2e0 [ 770.177693][ T5668] ? __lockdep_free_key_range+0x110/0x110 [ 770.183399][ T5668] __inet_stream_connect+0x817/0xe30 [ 770.189187][ T5668] ? mark_lock+0xbc/0x1710 [ 770.193584][ T5668] ? lock_downgrade+0x820/0x820 [ 770.198676][ T5668] ? inet_init_net+0x520/0x520 [ 770.203441][ T5668] ? mark_held_locks+0x9f/0xe0 [ 770.208277][ T5668] ? __local_bh_enable_ip+0x159/0x250 [ 770.213630][ T5668] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 770.219607][ T5668] ? lock_sock_nested+0x94/0x110 [ 770.224711][ T5668] ? trace_hardirqs_on+0x5f/0x220 [ 770.229921][ T5668] inet_stream_connect+0x53/0xa0 [ 770.235114][ T5668] ? __inet_stream_connect+0xe30/0xe30 [ 770.241793][ T5668] __sys_connect_file+0x155/0x1a0 [ 770.246892][ T5668] __sys_connect+0x160/0x190 [ 770.251723][ T5668] ? __sys_connect_file+0x1a0/0x1a0 [ 770.256934][ T5668] ? vfs_write+0x1b0/0x6b0 [ 770.261349][ T5668] ? fput_many+0x2f/0x1a0 [ 770.265772][ T5668] ? ksys_write+0x1a5/0x250 [ 770.270780][ T5668] ? lock_is_held_type+0xb0/0xe0 [ 770.275785][ T5668] ? do_syscall_64+0x1c/0xe0 [ 770.280449][ T5668] __x64_sys_connect+0x6f/0xb0 [ 770.286859][ T5668] ? lockdep_hardirqs_on+0x6a/0xe0 [ 770.292041][ T5668] do_syscall_64+0x60/0xe0 [ 770.296453][ T5668] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 770.302433][ T5668] RIP: 0033:0x45cba9 [ 770.306316][ T5668] Code: Bad RIP value. [ 770.310365][ T5668] RSP: 002b:00007f904884bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 770.318779][ T5668] RAX: ffffffffffffffda RBX: 00000000004dbfc0 RCX: 000000000045cba9 [ 770.326728][ T5668] RDX: 000000000000001c RSI: 0000000020000180 RDI: 0000000000000003 [ 770.334854][ T5668] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 770.342806][ T5668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 770.350757][ T5668] R13: 000000000000008b R14: 00000000004c35ea R15: 00007f904884c6d4 [ 770.408619][ T3178] usb 1-1: USB disconnect, device number 73 [ 770.463320][ T5672] 8021q: adding VLAN 0 to HW filter on device bond205 [ 770.531594][ T5681] bond205: (slave bridge338): making interface the new active one [ 770.551025][ T5681] bond205: (slave bridge338): Enslaving as an active interface with an up link [ 770.577733][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): bond205: link becomes ready [ 770.607931][ T5672] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 770.641930][ T5681] bond205: (slave bridge339): Enslaving as an active interface with a down link 03:37:45 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000180)='\xe3$(\x00') 03:37:45 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xfffffffffffffd6a, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f00000001c0)={0x289d, 0x1}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) r4 = socket$packet(0x11, 0x3, 0x300) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xe) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000000)={0x2, 'vlan1\x00', {0x9}, 0x94cf}) 03:37:45 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 03:37:45 executing program 1 (fault-call:1 fault-nth:2): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:37:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x293f9, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 770.984451][ T5757] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 770.994565][ T5760] FAULT_INJECTION: forcing a failure. [ 770.994565][ T5760] name failslab, interval 1, probability 0, space 0, times 0 [ 771.007658][ T5760] CPU: 0 PID: 5760 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 771.016351][ T5760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 771.026757][ T5760] Call Trace: [ 771.030063][ T5760] dump_stack+0x18f/0x20d 03:37:45 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r3 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r3, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x4, 0x8, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8848}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x18}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x8}]}]}, 0x3c}}, 0x4008080) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SOUND_OLD_MIXER_INFO(r5, 0x80304d65, &(0x7f0000000000)) [ 771.034425][ T5760] should_fail.cold+0x5/0x14 [ 771.039029][ T5760] should_failslab+0x5/0xf [ 771.043447][ T5760] kmem_cache_alloc_node_trace+0x27d/0x400 [ 771.049264][ T5760] __kmalloc_node_track_caller+0x38/0x60 [ 771.054908][ T5760] __alloc_skb+0xae/0x550 [ 771.059253][ T5760] sk_stream_alloc_skb+0x109/0xc30 [ 771.064372][ T5760] ? lock_is_held_type+0xb0/0xe0 [ 771.069326][ T5760] tcp_connect+0xf17/0x48f0 [ 771.073862][ T5760] ? __tcp_transmit_skb+0x3690/0x3690 [ 771.079248][ T5760] ? prandom_u32_state+0x10/0x180 [ 771.084371][ T5760] tcp_v6_connect+0x1338/0x1dd0 [ 771.089322][ T5760] ? inet6_sk_rx_dst_set+0x2e0/0x2e0 [ 771.094630][ T5760] ? __lockdep_free_key_range+0x110/0x110 [ 771.100369][ T5760] __inet_stream_connect+0x817/0xe30 [ 771.105751][ T5760] ? mark_lock+0xbc/0x1710 [ 771.110173][ T5760] ? lock_downgrade+0x820/0x820 [ 771.115029][ T5760] ? inet_init_net+0x520/0x520 [ 771.119889][ T5760] ? mark_held_locks+0x9f/0xe0 [ 771.124699][ T5760] ? __local_bh_enable_ip+0x159/0x250 [ 771.130079][ T5760] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 771.136153][ T5760] ? lock_sock_nested+0x94/0x110 [ 771.141097][ T5760] ? trace_hardirqs_on+0x5f/0x220 [ 771.146132][ T5760] inet_stream_connect+0x53/0xa0 [ 771.151077][ T5760] ? __inet_stream_connect+0xe30/0xe30 [ 771.156554][ T5760] __sys_connect_file+0x155/0x1a0 [ 771.162035][ T5760] __sys_connect+0x160/0x190 [ 771.166659][ T5760] ? __sys_connect_file+0x1a0/0x1a0 [ 771.172041][ T5760] ? vfs_write+0x1b0/0x6b0 [ 771.176506][ T5760] ? fput_many+0x2f/0x1a0 [ 771.178914][ T5757] 8021q: adding VLAN 0 to HW filter on device bond206 [ 771.180955][ T5760] ? ksys_write+0x1a5/0x250 [ 771.181000][ T5760] ? lock_is_held_type+0xb0/0xe0 [ 771.181019][ T5760] ? do_syscall_64+0x1c/0xe0 [ 771.204408][ T5760] __x64_sys_connect+0x6f/0xb0 [ 771.210579][ T5760] ? lockdep_hardirqs_on+0x6a/0xe0 [ 771.215694][ T5760] do_syscall_64+0x60/0xe0 [ 771.220117][ T5760] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 771.226446][ T5760] RIP: 0033:0x45cba9 [ 771.230420][ T5760] Code: Bad RIP value. [ 771.234484][ T5760] RSP: 002b:00007f904884bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 771.240388][ T5763] bond206: (slave bridge340): making interface the new active one [ 771.242904][ T5760] RAX: ffffffffffffffda RBX: 00000000004dbfc0 RCX: 000000000045cba9 [ 771.242914][ T5760] RDX: 000000000000001c RSI: 0000000020000180 RDI: 0000000000000003 [ 771.242923][ T5760] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 03:37:45 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0xffffffff00000000}, 0x0) [ 771.242932][ T5760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 771.242941][ T5760] R13: 000000000000008b R14: 00000000004c35ea R15: 00007f904884c6d4 [ 771.315583][ T5763] bond206: (slave bridge340): Enslaving as an active interface with an up link [ 771.336096][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): bond206: link becomes ready [ 771.354015][ T5757] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 771.371481][ T3178] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 771.392539][ T5763] bond206: (slave bridge341): Enslaving as an active interface with a down link 03:37:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x293fa, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:37:45 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) 03:37:45 executing program 1 (fault-call:1 fault-nth:3): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 771.541106][ T5814] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:37:45 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x100, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x4}]}}]}, 0x38}}, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x4}]}}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)={0x4a0, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0xac, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, '/dev/btrfs-control\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_VALUE={0x36, 0x4, "94ac281ff770bdde3a6bee8a086ed4426cd72cefe17ef48592c199ddfca734d9af2d6b7e54b18cac709a29b845c0377fa951"}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x320, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xb1, 0x4, "c5430a3c873a18bcaa253e8b6d41f686d243fb0a8d27db548bbe8319dbd2794f8addb6eb6ffb61806248ba25694b8eeac7099431974c809962e687212366aeca93629210269ec1ed1e7737a266b30d84c5df2f4a0a7e6f7380cacf9827aca6a225728d87d3dd1e714a6255a147c9a3f6616563bbef7d5c9f3eb4b853605e7e31ba544162d2ed2f8989bb14c62f48d47c1481ce4ecff51c811898966347756ed7ba32037ae8a93066dcdb7c10cb"}, @ETHTOOL_A_BITSET_BITS={0xf0, 0x3, 0x0, 0x1, [{0xec, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, '/dev/btrfs-control\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb0, 0x2, '$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\vQ'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xa0, 0x4, "c6c038ae2123aecb1f4ef3a15193bfccc3718d5effc0b194d283c50b967a57bf92e65e0fe9d415643865e1f74e89c5961403f54e2078cd55525270e2c2ae5344de086439e6a59c528b93e9ca46851a8e3130f506251ba97a0cd10c8b7e61b0e98bae8549caf9fc9fb08c43f195d9f6d10ce81e43f16a7780afa627008d424b5d17766bf869970fe0577b73a260ca20ad9bc9e82d7f8ce74353fbd036"}, @ETHTOOL_A_BITSET_MASK={0xd7, 0x5, "6a7d9904e784d4db2897cbedadd20c267ba7072a0b5d9ea265c1f53c4f488f2ee79235909f4aed09e7bc4c48656262c95e12c993d63df99b004a3c6fea74425f9b5731c09679129850e72f535e499d11dc45490d99e4d43130366681b4b1d01218ec5b318b228323f07070f31355899b2c98c61df1411e0111e84adc8399b0eca746187ba0266f918ae2a687a4b97e981013610aa432550ec7b364088e318d65ba2dc1c6232540267d6fd5614bbe75cfb3507b42219d70f231a90b104d1229fbb188fd29c96ebe170e93c5971d5b0ec939f28a"}]}]}, 0x4a0}, 0x1, 0x0, 0x0, 0x8c0}, 0x40040) ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f0000000040)) r11 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r12 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r12, 0x0) [ 771.614127][ T5820] FAULT_INJECTION: forcing a failure. [ 771.614127][ T5820] name failslab, interval 1, probability 0, space 0, times 0 [ 771.617692][ T3178] usb 1-1: Using ep0 maxpacket: 8 [ 771.694739][ T5814] 8021q: adding VLAN 0 to HW filter on device bond207 [ 771.729233][ T5820] CPU: 0 PID: 5820 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 771.737862][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 771.747982][ T5820] Call Trace: [ 771.751293][ T5820] dump_stack+0x18f/0x20d [ 771.755649][ T5820] should_fail.cold+0x5/0x14 [ 771.760325][ T5820] ? __nf_conntrack_find_get+0x805/0xf30 [ 771.765974][ T5820] should_failslab+0x5/0xf [ 771.767655][ T3178] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 771.770768][ T5820] kmem_cache_alloc+0x40/0x3b0 [ 771.770791][ T5820] __nf_conntrack_alloc+0xda/0x5f0 [ 771.770812][ T5820] init_conntrack.constprop.0+0xdd3/0x1060 [ 771.790137][ T3178] usb 1-1: config 0 has no interface number 0 [ 771.795073][ T5820] ? __nf_conntrack_find_get+0x827/0xf30 [ 771.795090][ T5820] ? nf_conntrack_alloc+0x40/0x40 [ 771.795109][ T5820] ? hash_conntrack_raw+0x2dc/0x470 [ 771.817065][ T5820] ? ip6t_do_table+0xbb5/0x1920 [ 771.821953][ T5820] nf_conntrack_in+0x9b9/0x12a0 [ 771.826826][ T5820] ? nf_conntrack_find_get+0x40/0x40 [ 771.832119][ T5820] ? lock_acquire+0x1f1/0xad0 [ 771.834562][ T3178] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 771.836796][ T5820] ? __do_replace+0x886/0x8a0 [ 771.836821][ T5820] ? ipv6_defrag+0x79/0x4c0 [ 771.836840][ T5820] nf_hook_slow+0xc5/0x1e0 [ 771.861808][ T5820] nf_hook+0x38f/0x620 [ 771.865904][ T5820] ? ip6_flush_pending_frames+0xc0/0xc0 [ 771.871462][ T5820] ? ip6_fraglist_init+0x890/0x890 [ 771.871581][ T3178] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 771.876686][ T5820] ? lock_downgrade+0x820/0x820 [ 771.876699][ T5820] ? lock_downgrade+0x820/0x820 [ 771.876719][ T5820] ? ip6_flush_pending_frames+0xc0/0xc0 [ 771.876742][ T5820] ip6_xmit+0xdd2/0x1e80 [ 771.906085][ T5820] ? ip6_flush_pending_frames+0xc0/0xc0 [ 771.906729][ T3178] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 771.911663][ T5820] ? ip6_append_data+0x330/0x330 [ 771.911682][ T5820] ? lock_release+0x8d0/0x8d0 [ 771.911698][ T5820] ? inet6_csk_route_socket+0x70e/0xee0 [ 771.911714][ T5820] ? inet6_csk_route_req+0x7d0/0x7d0 [ 771.911730][ T5820] ? lock_acquire+0x1f1/0xad0 [ 771.911757][ T5820] inet6_csk_xmit+0x339/0x610 [ 771.911776][ T5820] ? inet6_csk_update_pmtu+0x180/0x180 [ 771.911801][ T5820] ? csum_ipv6_magic+0x1b/0x70 [ 771.911825][ T5820] __tcp_transmit_skb+0x1884/0x3690 [ 771.911850][ T5820] ? __tcp_select_window+0xa00/0xa00 [ 771.911869][ T5820] ? ktime_get+0x3e/0x120 [ 771.941711][ T5819] bond207: (slave bridge342): making interface the new active one [ 771.942027][ T5820] ? find_held_lock+0x2d/0x110 [ 771.942047][ T5820] ? mark_lock+0xbc/0x1710 [ 771.942075][ T5820] ? trace_hardirqs_on+0x5f/0x220 [ 771.952447][ T5819] bond207: (slave bridge342): Enslaving as an active interface with an up link [ 771.957671][ T5820] ? lockdep_hardirqs_on+0x6a/0xe0 [ 771.957690][ T5820] ? read_seqcount_begin.constprop.0+0x139/0x1f0 [ 771.957704][ T5820] ? lock_is_held_type+0xb0/0xe0 [ 771.957724][ T5820] tcp_connect+0x3200/0x48f0 [ 771.957760][ T5820] ? __tcp_transmit_skb+0x3690/0x3690 [ 771.957784][ T5820] ? prandom_u32_state+0x10/0x180 [ 771.957802][ T5820] tcp_v6_connect+0x1338/0x1dd0 [ 771.957824][ T5820] ? inet6_sk_rx_dst_set+0x2e0/0x2e0 [ 771.957855][ T5820] ? __lockdep_free_key_range+0x110/0x110 [ 771.957882][ T5820] __inet_stream_connect+0x817/0xe30 [ 771.957899][ T5820] ? mark_lock+0xbc/0x1710 [ 771.957913][ T5820] ? lock_downgrade+0x820/0x820 [ 771.957925][ T5820] ? inet_init_net+0x520/0x520 [ 771.957939][ T5820] ? mark_held_locks+0x9f/0xe0 [ 771.957955][ T5820] ? __local_bh_enable_ip+0x159/0x250 [ 771.957971][ T5820] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 771.957987][ T5820] ? lock_sock_nested+0x94/0x110 [ 771.958000][ T5820] ? trace_hardirqs_on+0x5f/0x220 [ 771.958020][ T5820] inet_stream_connect+0x53/0xa0 [ 771.958036][ T5820] ? __inet_stream_connect+0xe30/0xe30 [ 771.958050][ T5820] __sys_connect_file+0x155/0x1a0 [ 771.958067][ T5820] __sys_connect+0x160/0x190 [ 771.958082][ T5820] ? __sys_connect_file+0x1a0/0x1a0 [ 771.958100][ T5820] ? vfs_write+0x1b0/0x6b0 [ 771.958116][ T5820] ? fput_many+0x2f/0x1a0 [ 771.958133][ T5820] ? ksys_write+0x1a5/0x250 [ 771.991055][ T3178] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 771.994759][ T5820] ? lock_is_held_type+0xb0/0xe0 [ 771.994778][ T5820] ? do_syscall_64+0x1c/0xe0 [ 771.994797][ T5820] __x64_sys_connect+0x6f/0xb0 [ 772.011463][ T3178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.013813][ T5820] ? lockdep_hardirqs_on+0x6a/0xe0 [ 772.013831][ T5820] do_syscall_64+0x60/0xe0 [ 772.013850][ T5820] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 772.043920][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): bond207: link becomes ready [ 772.044843][ T5820] RIP: 0033:0x45cba9 [ 772.067995][ T3178] usb 1-1: config 0 descriptor?? [ 772.070296][ T5820] Code: Bad RIP value. [ 772.070306][ T5820] RSP: 002b:00007f904884bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 772.070321][ T5820] RAX: ffffffffffffffda RBX: 00000000004dbfc0 RCX: 000000000045cba9 [ 772.070330][ T5820] RDX: 000000000000001c RSI: 0000000020000180 RDI: 0000000000000003 [ 772.070337][ T5820] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 03:37:46 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0x0) [ 772.070351][ T5820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 772.097726][ T5764] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 772.101080][ T5820] R13: 000000000000008b R14: 00000000004c35ea R15: 00007f904884c6d4 [ 772.113271][ T5764] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 772.276413][ T5819] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 772.369577][ T5867] bond207: (slave bridge343): Enslaving as an active interface with a down link [ 772.515731][ T2593] usb 1-1: USB disconnect, device number 74 03:37:47 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000180)='\xe3$(\x00') 03:37:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:37:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x293fb, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:37:47 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 03:37:47 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r3 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) r4 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000011000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_UNLOCK(r4, 0xc) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x30, r3, 0x0) 03:37:47 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x3}, 0x0) 03:37:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0x2, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 773.142987][ T5919] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:37:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0x3, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 773.294336][ T5919] 8021q: adding VLAN 0 to HW filter on device bond208 03:37:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0x7, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 773.407508][ T3178] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 773.416668][ T5929] bond208: (slave bridge344): making interface the new active one [ 773.474306][ T5929] bond208: (slave bridge344): Enslaving as an active interface with an up link [ 773.507437][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): bond208: link becomes ready [ 773.531208][ T5919] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:37:47 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:37:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xd, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 773.608755][ T5929] bond208: (slave bridge345): Enslaving as an active interface with a down link 03:37:47 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x40000, 0x0, 0xffffffffffffffd5}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r3 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1pM\xdbN\xc9\x86WUdb\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10', 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x1, 0x4) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9, 0x20010, r3, 0xdb1ce000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000000)=0x2) [ 773.668055][ T3178] usb 1-1: Using ep0 maxpacket: 8 [ 773.787572][ T3178] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 773.795609][ T3178] usb 1-1: config 0 has no interface number 0 [ 773.838020][ T3178] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 773.873726][ T3178] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 773.906354][ T3178] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 773.950828][ T3178] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 773.982491][ T3178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.011952][ T3178] usb 1-1: config 0 descriptor?? [ 774.047685][ T5923] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 774.059361][ T5923] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 774.296254][ T2593] usb 1-1: USB disconnect, device number 75 03:37:48 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000180)='\xe3$(\x00') 03:37:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x293fc, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:37:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xe, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:37:48 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 03:37:48 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FBIOGET_VSCREENINFO(r4, 0x4600, &(0x7f0000000280)) r5 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r5, 0x0) [ 774.916043][ T6031] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:37:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0x10, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 775.005436][ T6031] 8021q: adding VLAN 0 to HW filter on device bond209 03:37:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0x25, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 775.088763][ T6040] bond209: (slave bridge346): making interface the new active one [ 775.109663][ T6040] bond209: (slave bridge346): Enslaving as an active interface with an up link [ 775.161546][ T2630] IPv6: ADDRCONF(NETDEV_CHANGE): bond209: link becomes ready [ 775.169818][ T2593] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 775.189744][ T6040] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:37:49 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x6}, 0x0) 03:37:49 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000000)={'rose0\x00', {0x2, 0x4e22, @private=0xa010102}}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x6}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r4 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r4, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0xa30000, 0xd1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa20001, 0x2, [], @value=0x8}}) ioctl$DRM_IOCTL_GET_UNIQUE(r5, 0xc0106401, &(0x7f0000000180)={0x1a, &(0x7f0000000100)=""/26}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x5}, 0x7, 0x80, &(0x7f0000000280)={0x3, 0x12, 0x3, 0x1, 0x3}, 0x8, 0x2, 0xd3e, 0x0, 0x10000, 0x8001, &(0x7f00000002c0)="ba6721207d0cbd5fcfd52804c931d187efa5b4f9148af8201eb04ae6855522144a5db72a5aa481903b48a65716e2fef4da5fe86def72c35744917daf6d3bea983a24145371a5c34834774343cf2634c680dc7fb31aae015d485041df69b1e7ab13eb5b44c1afd6ba4d137e363b24473a7be80cd6b5380d1d1f"}) 03:37:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0x4001, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 775.270005][ T6077] bond209: (slave bridge347): Enslaving as an active interface with a down link 03:37:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x293fd, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:37:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0xa, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 775.427725][ T2593] usb 1-1: Using ep0 maxpacket: 8 [ 775.473442][ T6093] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 775.548013][ T2593] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 775.556049][ T2593] usb 1-1: config 0 has no interface number 0 [ 775.570451][ T6093] 8021q: adding VLAN 0 to HW filter on device bond210 [ 775.605311][ T6108] bond210: (slave bridge348): making interface the new active one [ 775.628417][ T2593] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 775.650146][ T6108] bond210: (slave bridge348): Enslaving as an active interface with an up link [ 775.675218][ T2593] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 775.740332][ T6093] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 775.751016][ T2593] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 775.806299][ T6108] bond210: (slave bridge349): Enslaving as an active interface with a down link [ 775.823439][ T2593] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 775.883878][ T2593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.932388][ T2630] IPv6: ADDRCONF(NETDEV_CHANGE): bond210: link becomes ready [ 775.944888][ T2593] usb 1-1: config 0 descriptor?? [ 775.967661][ T6030] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 775.974619][ T6030] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 776.221533][ T2593] usb 1-1: USB disconnect, device number 76 03:37:50 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000180)='\xe3$(\x00') 03:37:50 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8}, 0x0) 03:37:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x63, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:37:50 executing program 3: clock_gettime(0x1, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r3 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r3, 0x0) 03:37:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x293fe, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:37:50 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x7ff, 0x800000) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4}}, 0x0, 0x2, r1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f00000002c0)={0x14, 0x3c, &(0x7f0000000280)="67bbf0e5828441c8700739fe233caf6027478642781ee5fc1468a0f1eee7f5f419cbae1f9239e6f1d9fcc910772f83de009c7bd5486735c80d9ce58f"}) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000001c0)="eb3054cc81c67d628ad3844ce4dd55fbe5b86179471928294952f189175fca758ef2ee5fa1bddbc4d6766c23ceb1d5926ee611543e7377f8405ae684671a2e8977f4407efdb9face5a1dc0e6bb186c5dea0a1fce9b450cdbafbcd987083fa530c6cfbfe7fa8d2d8fc0fff627a893a623e31830cd3d1f8fbc13c304c914ff4fd944650d9e51a6062ca260b2fa8b9181ea723a4fcea4e4a536735d2510735d0d783ff3a9a9500407b25141", 0xaa, 0x2}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000040)={r6, 0x6a, &(0x7f00000000c0)=""/106}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000005a", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) [ 776.794151][ T6175] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:37:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4002, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:37:50 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000300)=""/105, 0x69}, {&(0x7f0000000380)=""/139, 0x8b}, {&(0x7f0000000440)=""/117, 0x75}, {&(0x7f00000004c0)=""/170, 0xaa}, {&(0x7f0000000580)=""/226, 0xe2}, {&(0x7f0000000680)=""/210, 0xd2}], 0x6, 0x4) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000001c0)={0x4, {{0x2, 0x4e22, @private=0xa010100}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x3c}}, 0x0) [ 776.954113][ T6175] 8021q: adding VLAN 0 to HW filter on device bond211 03:37:51 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r2 = geteuid() socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x4}]}}]}, 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000100)={'tunl0\x00', &(0x7f00000001c0)={'syztnl0\x00', r8, 0x40, 0x7, 0x40, 0x0, {{0xb, 0x4, 0x1, 0x2f, 0x2c, 0x67, 0x0, 0x53, 0x2f, 0x0, @multicast1, @rand_addr=0x64010100, {[@cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "941f2839"}]}, @timestamp={0x44, 0xc, 0xd4, 0x0, 0x3, [0xffffff61, 0x0]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)=@ipv4_newroute={0x1bc, 0x18, 0x800, 0x70bd2d, 0x25dfdbfe, {0x2, 0x0, 0x20, 0x20, 0xfc, 0x1, 0xff, 0x1, 0x2300}, [@RTA_GATEWAY={0x8, 0x5, @loopback}, @RTA_METRICS={0x7f, 0x8, 0x0, 0x1, "5cb0820077f18a006969d41998415330a7c9205b357f52e08eb390ecce89c2377c69474fd3035f853c2b77171387db69dff1185ea84f877b064e65e2facda99c4bcfe68a0a3adc463053ece6370bb7a92511137c6417c07ba86e4a2b9c8e752cf98a5d08d750904a14a3ee47af4177ac870cfba7780b827fec44a3"}, @RTA_UID={0x8, 0x19, r2}, @RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x34}}, @RTA_IIF={0x8, 0x3, r9}, @RTA_MARK={0x8, 0x10, 0x5}, @RTA_ENCAP={0xf5, 0x16, 0x0, 0x1, @generic="b8b872321b36fedff5784d1157e2aa301ae97986a22032c4a481dc819eb0fb0bd9b857e161c003fd61741f60798e6d2ee788aa9ccedf10db804d1382c2a0c167a782fa7baa9d8c40ea19a9e990bc0fdbaa5e738eb54bff4b6f580c8920abbdf226a4265d7aab443d68752b40cd70814248abc20b219d868d89fb4a043dfd584416f01f2418aab7e031c83287c3bc0057e29af7a202013b53f3be21853ea3fda152235f926082811b4268367f2706e844fc3553ec36c1a9dfc54118c67ef5e0327385a99d0b4e833b58339d4456e0069ce09b55aebd2341f2b2347555ab3fc8c9ff28547c166cd7d5948055ece3252dd41e"}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x40180}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000100001040000000000000000000000002f422b2c6d79880d2aa1fd2222037c7d70d5477d7e465a48ba0e6cee7816a2499a90b1127d23dec79e5ac67334d381c4bae01da25f25785b452b94a684914a00bdefb6030ba635e8e0f6d4bfbbc18785c7dc86dd0c7c59d89fef91b366f62825c31d4af77167d6724e2338452bff6bbb6e5e6638b19a36dfa0c243c4167ed3c53b768825859bd190a2e7568396c3bc57f4b2df474f8baeed9ed3d79de7afbde7741de040f3a8a7b4dcad5380e1b16ae3f233b0e33704107e402c9ac32c67cc6a393a737441f18ec0fa955db01943ff872f19d04eac3d3b167703b5345e2290", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100697036670f6fba449d9f81ce056225bbb38b4b4b8b9902c008000100", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) 03:37:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4003, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 777.051374][ T6187] bond211: (slave bridge350): making interface the new active one [ 777.069439][ T6187] bond211: (slave bridge350): Enslaving as an active interface with an up link [ 777.079455][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): bond211: link becomes ready 03:37:51 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x9}, 0x0) [ 777.097194][ T3182] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 777.117240][ T6175] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:37:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4004, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 777.180726][ T6187] bond211: (slave bridge351): Enslaving as an active interface with a down link [ 777.215050][ T6236] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 777.299464][ T6244] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 777.358509][ T3182] usb 1-1: Using ep0 maxpacket: 8 [ 777.483451][ T3182] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 777.492424][ T3182] usb 1-1: config 0 has no interface number 0 [ 777.513106][ T3182] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 777.524759][ T3182] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 777.535934][ T3182] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 777.546155][ T3182] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 777.555382][ T3182] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.564978][ T3182] usb 1-1: config 0 descriptor?? [ 777.587422][ T6181] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 777.594367][ T6181] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 777.838253][ T3182] usb 1-1: USB disconnect, device number 77 03:37:52 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000180)='\xe3$(\x00') 03:37:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x293ff, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:37:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4005, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:37:52 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xa}, 0x0) 03:37:52 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400000000000000000068cebda92f5c0000cd87034bfcf3d7272df39a4b8f456696e91dff4ebb29e20f7c4aeed74a55a68166798d76e837192233df16d6f526aed11d41b6e5d71eb1cdb88e3f118ff89f9b84dd5e25838d6484efc1590e5a1897aa767c29739cfdde5c57a09ae71df51fbb", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000000300)) 03:37:52 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) fcntl$setlease(r4, 0x400, 0x1) recvfrom$l2tp6(r2, &(0x7f0000000400)=""/208, 0xd0, 0x12021, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x20) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000380)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r6 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x4}]}}]}, 0x38}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x19, r7, 0x1, 0x40, 0x6, @broadcast}, 0x14) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000040)={0x7, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r6, 0x0) 03:37:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4006, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 778.406780][ T6289] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:37:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4007, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 778.504623][ T6289] 8021q: adding VLAN 0 to HW filter on device bond212 [ 778.513893][ T6290] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 778.540680][ T6307] bond212: (slave bridge352): making interface the new active one [ 778.552565][ T6307] bond212: (slave bridge352): Enslaving as an active interface with an up link [ 778.563741][T29962] IPv6: ADDRCONF(NETDEV_CHANGE): bond212: link becomes ready [ 778.578547][ T6289] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:37:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29400, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:37:52 executing program 5: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000001380)={0x3, 0x3, 0x3, 0x5, 0x7, 0x68d0}) syz_open_procfs(r1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0xbe4511325e03273f, 0x70, 0xe9, 0x7, 0x0, 0x0, 0x0, 0x755, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5353a935}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0069703667010000000000000000000000000000000000000011000000000000", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205649, &(0x7f00000001c0)={0x990000, 0x0, 0x3, r7, 0x0, &(0x7f0000000100)={0xa00905, 0xff, [], @value64=0x8000}}) openat$ppp(0xffffffffffffff9c, &(0x7f0000001340)='/dev/ppp\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001300)={r8, &(0x7f0000000200)="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", &(0x7f0000001200)=""/234}, 0x20) 03:37:52 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc}, 0x0) [ 778.606246][ T6307] bond212: (slave bridge353): Enslaving as an active interface with a down link [ 778.685181][ T6343] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 03:37:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4008, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 778.743608][ T6347] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 778.766987][ T3182] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 778.803572][ T6347] 8021q: adding VLAN 0 to HW filter on device bond213 [ 778.902049][ T6369] bond213: (slave bridge354): making interface the new active one [ 778.958126][ T6369] bond213: (slave bridge354): Enslaving as an active interface with an up link [ 778.968257][ T6343] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 778.987420][ T6347] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 778.997086][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): bond213: link becomes ready [ 779.007001][ T3182] usb 1-1: Using ep0 maxpacket: 8 [ 779.045030][ T6369] bond213: (slave bridge355): Enslaving as an active interface with a down link [ 779.138396][ T3182] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 779.167062][ T3182] usb 1-1: config 0 has no interface number 0 [ 779.173754][ T3182] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 779.197790][ T3182] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 779.224926][ T3182] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 779.247308][ T3182] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 779.276811][ T3182] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.305384][ T3182] usb 1-1: config 0 descriptor?? [ 779.338293][ T6319] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 779.347978][ T6319] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 779.593264][ T3182] usb 1-1: USB disconnect, device number 78 03:37:54 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000180)='\xe3$(\x00') 03:37:54 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x100000000, 0x140000) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') sendto$unix(r2, &(0x7f00000001c0)="275315b39bff33c40437891d9cfa8470faa521b42578a65bc33361e6d90d4ebe678f40c147202a82abf24c4d27950d4b634756d9f32f57d13e7964f50e350efb8d8c4af408851a8c589b4244e48ef6dd13b4e305779b20bcaf064e557cc9a8f979b0f87a374fc53e9cce7a3a733456fdb549e3652ead232bf9fee5ef41a24f71c23e1131501a0428e41f260f0818470272d6bd14e8f0d8eddafcc1b64a820216d171997b507bb77bd8909bc9453056", 0xaf, 0x1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r1, 0x4112, 0x0) 03:37:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4009, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:37:54 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xe}, 0x0) 03:37:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29401, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 780.194430][ T6437] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:37:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x400a, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 780.263034][ T6437] 8021q: adding VLAN 0 to HW filter on device bond214 03:37:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x400b, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 780.375586][ T6464] bond214: (slave bridge356): making interface the new active one [ 780.438653][ T6464] bond214: (slave bridge356): Enslaving as an active interface with an up link 03:37:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x400c, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 780.487664][ T6140] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 780.495632][T29962] IPv6: ADDRCONF(NETDEV_CHANGE): bond214: link becomes ready [ 780.524513][ T6437] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:37:54 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xf}, 0x0) [ 780.561144][ T6464] bond214: (slave bridge357): Enslaving as an active interface with a down link 03:37:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29402, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:37:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4010, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 780.747096][ T6140] usb 1-1: Using ep0 maxpacket: 8 03:37:54 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 780.827736][ T6502] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 780.878182][ T6140] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 780.886309][ T6140] usb 1-1: config 0 has no interface number 0 [ 780.955999][ T6140] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 780.976646][ T6502] 8021q: adding VLAN 0 to HW filter on device bond215 [ 781.008403][ T6140] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 781.027418][ T6140] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 781.056449][ T6508] bond215: (slave bridge358): making interface the new active one [ 781.067774][ T6140] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 781.084240][ T6140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.096039][ T6508] bond215: (slave bridge358): Enslaving as an active interface with an up link [ 781.129898][ T6140] usb 1-1: config 0 descriptor?? [ 781.148091][ T6441] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 781.155067][ T6441] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 781.164548][T29962] IPv6: ADDRCONF(NETDEV_CHANGE): bond215: link becomes ready [ 781.178429][ T6502] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 781.254865][ T6508] bond215: (slave bridge359): Enslaving as an active interface with a down link [ 781.508470][ T6140] usb 1-1: USB disconnect, device number 79 03:37:56 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000180)='\xe3$(\x00') 03:37:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4063, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:37:56 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x24, r4, 0x205, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x24}}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f00000011c0)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x4, 0x1f, 0x5, 0x6, 0x0, @private1={0xfc, 0x1, [], 0x1}, @private0, 0x700, 0x10, 0x6, 0x3}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000012c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xb7574600d0203a66}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00042abd7000fddbdf2503000000080039000800000008000300", @ANYRES32=r8, @ANYBLOB="050037000000000008000300", @ANYRES32=0x0, @ANYBLOB="08003c000002000008000b00a0010000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socket$nl_audit(0x10, 0x3, 0x9) read$FUSE(0xffffffffffffffff, &(0x7f0000001300), 0x101a) 03:37:56 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x60}, 0x0) 03:37:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29403, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 782.097921][ T6593] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:37:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4078, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 782.248709][ T6593] 8021q: adding VLAN 0 to HW filter on device bond216 [ 782.353025][ T6614] bond216: (slave bridge360): making interface the new active one 03:37:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:37:56 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xf0}, 0x0) [ 782.394216][ T6614] bond216: (slave bridge360): Enslaving as an active interface with an up link [ 782.396777][ T3180] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 782.418183][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): bond216: link becomes ready [ 782.441068][ T6593] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 782.493062][ T6614] bond216: (slave bridge361): Enslaving as an active interface with a down link 03:37:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:37:56 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1d8}, 0x0) 03:37:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29404, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:37:56 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000000000)={0x3, 0x200, 0x401, 0x5ca, 0x743, 0x10000}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') getsockopt$inet_int(r2, 0x0, 0x21, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 782.696065][ T3180] usb 1-1: Using ep0 maxpacket: 8 [ 782.720564][ T6657] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 782.794226][ T6657] 8021q: adding VLAN 0 to HW filter on device bond217 [ 782.827362][ T3180] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 782.840817][ T3180] usb 1-1: config 0 has no interface number 0 [ 782.848510][ T6684] bond217: (slave bridge362): making interface the new active one [ 782.859281][ T6684] bond217: (slave bridge362): Enslaving as an active interface with an up link [ 782.869674][ T2593] IPv6: ADDRCONF(NETDEV_CHANGE): bond217: link becomes ready [ 782.882306][ T6657] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 782.906280][ T6684] bond217: (slave bridge363): Enslaving as an active interface with a down link [ 782.929695][ T3180] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 782.996651][ T3180] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 783.027421][ T3180] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 783.049598][ T3180] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 783.076770][ T3180] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.100061][ T3180] usb 1-1: config 0 descriptor?? [ 783.117160][ T6596] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 783.124438][ T6596] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 783.366039][ T3180] usb 1-1: USB disconnect, device number 80 03:37:57 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000180)='\xe3$(\x00') 03:37:57 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x300}, 0x0) 03:37:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:37:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29405, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:37:57 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getflags(r0, 0x40a) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x20000000, {0x0, 0x0, 0x0, 0x0, 0x8401}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x18, r3, 0x301, 0x0, 0x0, {0x13}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x98, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) 03:37:57 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"/294, @ANYRES32=r5, @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x40880}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$sock_ipv6_tunnel_SIOCADDPRL(r6, 0x89f5, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x81, 0x0, 0x70, @ipv4={[], [], @broadcast}, @mcast1, 0x40, 0x8, 0x1}}) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=ANY=[@ANYBLOB="3800000024000b0f00"/20, @ANYRES32=r11, @ANYBLOB="00000000ffffffff0000000007000100667000000c00020008000400000000004b09aec874e5de13b1c7a040ac53caf023d86b56d8b8dac1edf86c6f932b52c6b65b19f30a91f4b1fc488efbf3cc82663f4d23f6deb524dddd698b88ce31e60b4189976839ec2316cca2afbb5d118948af8343623e064fd76412a7ddb032b00128a545117a7b105b3348860f99c7736110194a3bdfcd8434c8c9d6c5"], 0x38}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000003c0)={0x264, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0x4}}, {{0x8}, {0x4}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r11}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x84}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r5}}}]}}, {{0x8, 0x1, r7}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}]}, 0x264}, 0x1, 0x0, 0x0, 0x24000091}, 0x4000011) r12 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r13 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r13, 0x0) 03:37:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x2, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 783.946026][ T6746] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 784.024554][ T6746] 8021q: adding VLAN 0 to HW filter on device bond218 [ 784.051885][ T6768] bond218: (slave bridge364): making interface the new active one [ 784.062941][ T6768] bond218: (slave bridge364): Enslaving as an active interface with an up link 03:37:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x3, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:37:58 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x337}, 0x0) 03:37:58 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x22000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x2, 0x4, 0x2, 0x10001, 'syz0\x00', 0x6}, 0x0, [0xffffffff7fffffff, 0x7f, 0x6, 0x1ff, 0x6, 0x5, 0x3, 0xffff, 0x6, 0x7f, 0x1, 0x6, 0x5, 0x6, 0x80, 0x4, 0x0, 0x9, 0x3, 0x3, 0x10000, 0x0, 0x7, 0x4, 0x842, 0x3, 0x4, 0x4, 0x56, 0xd40e, 0xdb9, 0x3, 0xe7b8, 0x159, 0x80000001, 0x2, 0x8000000000000000, 0x0, 0x2, 0xd7, 0x7, 0x7, 0x68, 0xfffffffffffffffa, 0x7, 0x80, 0x8001, 0x6, 0x100000000, 0x8, 0x4, 0x100, 0x1f, 0x5, 0x3, 0x3, 0xfffffffffffffffb, 0x6, 0x33b1, 0x1f, 0x401, 0x80, 0x8719, 0x0, 0x4, 0xffffffff, 0x6, 0x6, 0x0, 0x9, 0x7, 0x7, 0xe6, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x3, 0xf252, 0x8001, 0x401, 0x1, 0x5, 0x7, 0x9, 0x600, 0x100, 0xff, 0x1, 0x8, 0xde, 0x10001, 0x28, 0x8, 0x0, 0x387, 0x1, 0x4, 0x1800000000, 0x0, 0x9, 0x2, 0x5ec, 0x100, 0x9, 0x1, 0x100000001, 0x100, 0x129, 0x4, 0x8, 0x4, 0x9, 0x1f, 0x2, 0x5, 0x5c, 0x0, 0x5, 0x9be, 0x4, 0xff, 0x62c, 0x3, 0x3, 0xff9, 0xba, 0x100]}) syz_open_procfs(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) [ 784.077237][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): bond218: link becomes ready [ 784.095926][ T6746] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 784.183184][ T6768] bond218: (slave bridge365): Enslaving as an active interface with a down link 03:37:58 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x4, 0x100010, r2, 0xffffc000) 03:37:58 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10, 0x800) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in6, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x200, 0x114) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f00000002c0)={0x401, 0x3ff}) [ 784.296714][ T6140] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 784.581466][ T6140] usb 1-1: Using ep0 maxpacket: 8 [ 784.706797][ T6140] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 784.715525][ T6140] usb 1-1: config 0 has no interface number 0 [ 784.724484][ T6140] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 784.737226][ T6140] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 784.748198][ T6140] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 784.759023][ T6140] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 784.768942][ T6140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.779868][ T6140] usb 1-1: config 0 descriptor?? [ 784.808816][ T6763] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 784.815811][ T6763] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 785.114732][ T6140] usb 1-1: USB disconnect, device number 81 03:37:59 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='\xe3$(\x00') 03:37:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29406, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:37:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x4, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:37:59 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x500}, 0x0) 03:37:59 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) 03:37:59 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_audit(0x10, 0x3, 0x9) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$nl_audit(0x10, 0x3, 0x9) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000340)={0x1, 0x4, [{r7, 0x0, 0xfffff000, 0x100000000}, {r2, 0x0, 0x8000, 0xfffffffff0000000}, {r9, 0x0, 0x0, 0x100000000}, {r2, 0x0, 0x1000000, 0x1000000}]}) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x90, 0x4, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x81}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x44f}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xff}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r10 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r10, 0x0) 03:37:59 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0) [ 785.682579][ T6885] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:37:59 executing program 5: r0 = syz_open_procfs(0x0, 0x0) write$midi(r0, &(0x7f0000000000)="e5d2bf72f3331336595165fb56735ef55d9bb53be0edf2a8555ac026ffcf1615a227263e31c780c7cd4ed6c6482411dc953e4893c035923da411138dfc98d1dada1dafcb7541a456623d53c784db422db2776aac8eb2d1022c4c2896818a1f34802d390f7939c575eff4286aa24c222a0409022dc5344c0019", 0x79) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x2c) [ 785.733457][ T6885] 8021q: adding VLAN 0 to HW filter on device bond219 03:37:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x5, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 785.803110][ T6922] bond219: (slave bridge366): making interface the new active one [ 785.833835][ T6922] bond219: (slave bridge366): Enslaving as an active interface with an up link [ 785.847754][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): bond219: link becomes ready [ 785.865562][ T6885] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:00 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x900}, 0x0) [ 785.912543][ T6922] bond219: (slave bridge367): Enslaving as an active interface with a down link 03:38:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x6, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:00 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4494}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) [ 786.066928][ T6140] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 786.326669][ T6140] usb 1-1: Using ep0 maxpacket: 8 [ 786.456948][ T6140] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 786.465546][ T6140] usb 1-1: config 0 has no interface number 0 [ 786.472445][ T6140] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 786.485247][ T6140] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 786.501720][ T6140] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 786.514380][ T6140] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 786.524201][ T6140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.537457][ T6140] usb 1-1: config 0 descriptor?? [ 786.557678][ T6924] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 786.564643][ T6924] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 786.856049][ T3180] usb 1-1: USB disconnect, device number 82 03:38:01 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:38:01 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xa00}, 0x0) 03:38:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29407, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:01 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c010000100001048ae994bf0877a437ee000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) 03:38:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x7, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:01 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000040)) pselect6(0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x1000100000000, 0x0, 0x0, 0x400000000000000, 0x2}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r3 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r3, 0x0) [ 787.422752][ T7002] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x8, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:01 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="620904c6dc229be488574a114d3aee3ae1e3c136e7e99b8fd3d6f0d6b37cf14efdb9fd410475ff763b36a2bfabc086f5d7b3825b1a3a97da42acc24a157eaf8228db396f434e4bf7319e108acdfd2585bbcfa90ed74dbd30f9b52394e7d443bb73c586a67ec57e7e45b92d450cc94354848cd45481a6d85cace4b1dc113cad77a69b3459dd76d99badf0fd48729aa008778d34d724c257dd79c58d59b5e4f8b2bc59ce41a4247e4f54c642f630b7ed4c0acc1ad889977ae8a3aa7dc93501dc616892d9d1c5387ede883d23a6648203cc45", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r3}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={r3, 0x6}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={r4, 0xd1b9, 0x1d, "4a67a95056b3b9c85bcaed15ff6cb31bfa5ef5197a3ad3a7ccf0da168a"}, 0x25) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) dup2(r1, r5) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6f, 0xff, 0x5, 0x80000001}]}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) [ 787.516766][ T7002] 8021q: adding VLAN 0 to HW filter on device bond220 [ 787.573214][ T7012] bond220: (slave bridge368): making interface the new active one [ 787.584656][ T7012] bond220: (slave bridge368): Enslaving as an active interface with an up link [ 787.599534][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): bond220: link becomes ready [ 787.619867][ T7002] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:01 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc00}, 0x0) 03:38:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29408, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 787.644835][ T7012] bond220: (slave bridge369): Enslaving as an active interface with a down link 03:38:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x9, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 787.727265][ T3182] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 787.754718][ T7063] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xa, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 787.867464][ T7063] 8021q: adding VLAN 0 to HW filter on device bond221 [ 787.925928][ T7076] bond221: (slave bridge370): making interface the new active one [ 787.969508][ T7076] bond221: (slave bridge370): Enslaving as an active interface with an up link [ 787.979545][ T3182] usb 1-1: Using ep0 maxpacket: 8 [ 788.010972][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): bond221: link becomes ready [ 788.050422][ T7063] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 788.113262][ T7076] bond221: (slave bridge371): Enslaving as an active interface with a down link [ 788.122856][ T3182] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 788.138341][ T3182] usb 1-1: config 0 has no interface number 0 [ 788.144633][ T3182] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 788.196425][ T3182] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 788.216583][ T3182] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 788.236640][ T3182] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 788.245709][ T3182] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.277520][ T3182] usb 1-1: config 0 descriptor?? [ 788.306853][ T7008] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 788.313916][ T7008] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 788.557927][ T3182] usb 1-1: USB disconnect, device number 83 03:38:03 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:38:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xe, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:03 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0044d1b, &(0x7f0000000000)=0x28) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x5, 0x400840) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r6 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r6, 0x0) 03:38:03 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 03:38:03 executing program 5: syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x300, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 03:38:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29409, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x10, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 789.171245][ T7161] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 789.335153][ T7161] 8021q: adding VLAN 0 to HW filter on device bond222 03:38:03 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 03:38:03 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x2000, 0x38) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f00000004c0)={{&(0x7f0000000400)=""/105, 0x69}, &(0x7f0000000480)}, 0x20) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="00fe05000000000000000000", @ANYRES16=r6, @ANYBLOB="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"], 0x500}}, 0x40080) r7 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r7, 0x0) 03:38:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x48, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:03 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x14, r4, 0x309, 0x0, 0x0, {0x34}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x10c, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xbd}}, {0x8, 0xb, 0xffff0000}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x3}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x40}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x41b}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x6}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000040) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r5 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0xae, 0x4040) openat$cgroup_ro(r5, &(0x7f0000000200)='memory.swap.current\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="185b92ff1f0f9d36202fd9079750f1208eda4b2b1bbc9390115f042ab85ed0b9ab9d32216d6bf9441ab893ff9672d225a5f127bf5ce705616809cbc548533983760d186c80dede0bb6cf28aec9e29502d2efa85c2873023d980dcd682781f99e7dff84242c899fd4cc38ea28e8fae494c6650d2d951d57cf16332c7e665fa9488e4589e5da20cf0684bda3fe54b9823c41a748a59ce6ff9af03db454c01ec23fecdc426379557e25990814317c187e760291d2", @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000"], 0xb}}, 0x8800) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r6, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}}, 0xc800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) [ 789.420835][ T7170] bond222: (slave bridge372): making interface the new active one [ 789.446496][T29962] usb 1-1: new high-speed USB device number 84 using dummy_hcd 03:38:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x4c, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 789.484311][ T7170] bond222: (slave bridge372): Enslaving as an active interface with an up link [ 789.524034][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): bond222: link becomes ready [ 789.561898][ T7161] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 789.601176][ T7170] bond222: (slave bridge373): Enslaving as an active interface with a down link [ 789.696414][T29962] usb 1-1: Using ep0 maxpacket: 8 [ 789.816356][T29962] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 789.829584][T29962] usb 1-1: config 0 has no interface number 0 [ 789.835867][T29962] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 789.849674][T29962] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 789.867932][T29962] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 789.880553][T29962] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 789.892330][T29962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.907570][T29962] usb 1-1: config 0 descriptor?? [ 789.926597][ T7164] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 789.934897][ T7164] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 790.156885][ T3182] usb 1-1: USB disconnect, device number 84 03:38:04 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) pwrite64(r2, &(0x7f00000001c0)="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", 0x1000, 0x5) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001240)={'batadv_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=ANY=[@ANYBLOB="0107000040ff000004000800000800170000020000000000000000000000000000000000f6e1ef0ed1a3307f35a93cb864bced54720d4d1df00589f66aa298b5cf8e77ff1e5d94c401ca22228ee01f83e3a09daeca7ef7eeba0336b5778b99f665cb1cb12a0e692bc147b991c29a215a5a3e83c89b58d8768392d65675e834bbb8497692510355aeefce4f529d90695f0283c3987c767a2caef1c37cc00a49a1bf6d8ae2fcca5b8ee5664889e580b1f587c9b9b6eb1084e4d9b6fe61ec4e12549b8c81c145b030d0e799f356dfb3ba531308251f00000000000000000000000000178d8e941307fe72201ab4b7af05acb3470c1d4c923a6242"], 0x24}, 0x1, 0x0, 0x0, 0x200440c0}, 0x40448d0) 03:38:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x50, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:04 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x3703}, 0x0) 03:38:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2940a, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:04 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r3 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r3, 0x0) ioctl$BLKGETSIZE(r4, 0x1260, &(0x7f00000000c0)) 03:38:04 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) [ 790.726828][ T7275] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x64, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 790.783582][ T7275] 8021q: adding VLAN 0 to HW filter on device bond223 03:38:04 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) [ 790.862816][ T7300] bond223: (slave bridge374): making interface the new active one [ 790.873750][ T7300] bond223: (slave bridge374): Enslaving as an active interface with an up link [ 790.884974][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): bond223: link becomes ready [ 790.902756][ T7275] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x68, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:05 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x3f00}, 0x0) [ 790.992900][ T7300] bond223: (slave bridge375): Enslaving as an active interface with a down link 03:38:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x6c, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2940b, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:05 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1}, 0x0, 0xffffffffffffffff, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) [ 791.067139][T29962] usb 1-1: new high-speed USB device number 85 using dummy_hcd 03:38:05 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 03:38:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x74, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 791.175491][ T7342] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x7a, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 791.260570][ T7342] 8021q: adding VLAN 0 to HW filter on device bond224 [ 791.306312][T29962] usb 1-1: Using ep0 maxpacket: 8 [ 791.310815][ T7355] bond224: (slave bridge376): making interface the new active one [ 791.321913][ T7355] bond224: (slave bridge376): Enslaving as an active interface with an up link [ 791.332241][ T3180] IPv6: ADDRCONF(NETDEV_CHANGE): bond224: link becomes ready [ 791.345055][ T7342] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 791.374260][ T7355] bond224: (slave bridge377): Enslaving as an active interface with a down link [ 791.427051][T29962] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 791.468137][T29962] usb 1-1: config 0 has no interface number 0 [ 791.492756][T29962] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 791.517157][T29962] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 791.544268][T29962] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 03:38:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2940c, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 791.566193][T29962] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 791.575246][T29962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.599717][T29962] usb 1-1: config 0 descriptor?? [ 791.640283][ T7317] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 791.656263][ T7317] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 791.673079][ T7395] 8021q: adding VLAN 0 to HW filter on device bond225 [ 791.736882][ T7431] bond225: (slave bridge378): making interface the new active one [ 791.752986][ T7431] bond225: (slave bridge378): Enslaving as an active interface with an up link [ 791.782758][ T3180] IPv6: ADDRCONF(NETDEV_CHANGE): bond225: link becomes ready [ 791.863356][ T7431] bond225: (slave bridge379): Enslaving as an active interface with a down link [ 791.965268][ T12] usb 1-1: USB disconnect, device number 85 03:38:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2940d, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:06 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5865}, 0x0) 03:38:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1f4, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:06 executing program 5: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000000100)=0x9, 0x4) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x8800, 0x0) r4 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="1a614beab760000036c64b2f76922aa4741ca6dd052100000000ffff2e41bac8d1e83ecf8c0d0879d30a8efc06850000ffffffe9"]}) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000100)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xd490010}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRESOCT=r5, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4c051}, 0x1) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="030367", @ANYRES16=r5, @ANYBLOB="00022abd7000fddbdf253fcc642f020000002b3cf7b0d044f14d88000500030000004400035f31000000000600040007000000060007004e080001000000140006050000000000000000000000000000000020000381080005007f000001140002006d61637365633000000000000000000008ba7200a80a00000000000000"], 0x90}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="a16e02b3", @ANYRES16=r5, @ANYBLOB="00032abd7000fcdbdf25040000000800050000000100080006000000000008000400ff0000000800060007000000080005009c000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004001}, 0x24000000) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010023bd7000fcdbdf2504000000080004007f000000080004000800000008000400070000000800050004000000080004000900000008000500930300001400028006000f000000000008000500ffffffff"], 0x58}, 0x1, 0x0, 0x0, 0x40844}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xc0, r5, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x100}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfd91}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2}}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x42}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x18}]}, 0xc0}, 0x1, 0x0, 0x0, 0x800}, 0x40841) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x88, r5, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x240040c4}, 0x20040840) syz_open_procfs(0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) 03:38:06 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40001, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0xf8, 0x0) signalfd4(r4, &(0x7f0000000100)={[0x3]}, 0x8, 0x800) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000003c0)={0x0, 0x5}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snapshot\x00', 0x2a249c3604a7f04b, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000440)={0x1, &(0x7f0000000380)=[{0x7, 0x7f, 0xf7, 0xffffffff}]}, 0x10) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000340)={0x800, &(0x7f0000000300)=[r7]}, 0x1) getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) io_uring_setup(0xfea, &(0x7f0000000280)={0x0, 0x0, 0x9f729a6f2f55d777, 0x2, 0x3b3}) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 03:38:06 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='\xe3$(\x00') 03:38:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x218, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 792.539677][ T7486] validate_nla: 2 callbacks suppressed [ 792.539687][ T7486] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:06 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002000000407d1e5a2d40000000000109022400010000200009040000010301020009210000000122010009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0x22a, 0x506}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x1, 0x69, 0x2, 'snmp_trap\x00', 'syz1\x00', {0x1b9686bd}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x4, 0x2, 0x0, 0x2, 0x4], 0x0, 0x5}, {0x1, [0xa, 0x3, 0x1, 0x4, 0x4, 0x5], 0x3, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r5 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x40010, r5, 0x0) [ 792.714556][ T7486] 8021q: adding VLAN 0 to HW filter on device bond226 03:38:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x240, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 792.828872][ T7492] bond226: (slave bridge380): making interface the new active one 03:38:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x300, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 792.871148][ T3182] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 792.889017][ T7492] bond226: (slave bridge380): Enslaving as an active interface with an up link [ 792.912816][ T3180] IPv6: ADDRCONF(NETDEV_CHANGE): bond226: link becomes ready 03:38:07 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x6000}, 0x0) [ 792.940092][ T7486] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:07 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xffffffffffffff9b) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES16=r4], 0x28}, 0x1, 0x0, 0x0, 0x454}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_AID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x804) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20048810) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=0x0, @ANYBLOB="ca73b4780e4e910d280ebacc50951cb860c3e41d6ab7ff182fc4249b2130dfb557ab5ef589de4551547631c841e23f914eaf232c0be74b2b556a5bbc09699a"], 0x3c}}, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = dup(r5) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) splice(r1, &(0x7f00000001c0)=0xffffffffffffffff, r7, &(0x7f0000000200)=0x18000, 0x18, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f0000000040)={0x6, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 793.002204][ T7492] bond226: (slave bridge381): Enslaving as an active interface with a down link [ 793.016608][T29962] usb 4-1: new high-speed USB device number 2 using dummy_hcd 03:38:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2940e, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x3e8, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 793.136136][ T3182] usb 1-1: Using ep0 maxpacket: 8 03:38:07 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x6558}, 0x0) 03:38:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x4fb, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 793.225504][ T7565] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 793.276459][ T3182] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 793.297625][ T3182] usb 1-1: config 0 has no interface number 0 [ 793.335627][ T7565] 8021q: adding VLAN 0 to HW filter on device bond227 [ 793.339123][ T3182] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 793.387080][T29962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.401710][ T7571] bond227: (slave bridge382): making interface the new active one [ 793.405131][T29962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.438763][T29962] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.40 [ 793.458523][T29962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.464708][ T3182] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 03:38:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x500, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 793.486607][T29962] usb 4-1: config 0 descriptor?? [ 793.491376][ T7571] bond227: (slave bridge382): Enslaving as an active interface with an up link [ 793.533374][ T3182] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 793.533987][ T7565] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 793.584178][ T3182] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 793.598247][ T7571] bond227: (slave bridge383): Enslaving as an active interface with a down link [ 793.634373][ T3182] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.664737][ T3182] usb 1-1: config 0 descriptor?? [ 793.687909][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): bond227: link becomes ready [ 793.697085][ T7491] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 793.704038][ T7491] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 794.016436][ T3182] usb 1-1: USB disconnect, device number 86 03:38:08 executing program 0: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xffffffffffffff9b) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') r4 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES16=r4], 0x28}, 0x1, 0x0, 0x0, 0x454}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_AID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x804) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20048810) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=0x0, @ANYBLOB="ca73b4780e4e910d280ebacc50951cb860c3e41d6ab7ff182fc4249b2130dfb557ab5ef589de4551547631c841e23f914eaf232c0be74b2b556a5bbc09699a"], 0x3c}}, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = dup(r5) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) splice(r1, &(0x7f00000001c0)=0xffffffffffffffff, r7, &(0x7f0000000200)=0x18000, 0x18, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f0000000040)={0x6, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 03:38:08 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8100}, 0x0) [ 795.066129][T29962] usbhid 4-1:0.0: can't add hid device: -71 [ 795.072149][T29962] usbhid: probe of 4-1:0.0 failed with error -71 [ 795.084694][T29962] usb 4-1: USB disconnect, device number 2 03:38:09 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r1, 0x80184151, &(0x7f0000000040)={0x0, &(0x7f0000000280)="e8bb3d31a07d725ef9b3d4324649f67fe43558607f682f1b7886b1e7377c034445be8238965bfaa997eba679e188a809392c3b111a6e2706be5928cfe3f733a51e050e4f2cb2c27eb72915cca6c74ac566b9150646970d7ba1056982f7d94c994b2906bfdda1c0fe9bf714b4cdc4820987d378bd928b0774c8e13471a432a2a77029f3783badea9012c377e8ed7078d48aa5cb138efb8cdc564ad35f12dcec69712430", 0xa3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') getsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r6 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r6, 0x0) 03:38:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2940f, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x600, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:09 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x8}, {0xa, 0x0, 0x0, @remote}, r3}}, 0x48) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f00000000c0)={0xb, 0x10, 0xfa00, {&(0x7f00000001c0), r3, 0x7}}, 0x18) r4 = syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) get_thread_area(&(0x7f00000002c0)={0x6, 0x20001000, 0x4000, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x9, 0x0, 0x2, 0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, &(0x7f0000000000)={0x6, 0xdf}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400100000001086d48f229d000000ab6a62d059049747e20700feff0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163767461700004000280"], 0x34}}, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 03:38:09 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xd801}, 0x0) 03:38:09 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000180)='\xe3$(\x00') [ 795.672363][ T7682] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x700, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x900, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 795.806977][ T7682] 8021q: adding VLAN 0 to HW filter on device bond228 03:38:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xa00, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:09 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7ffffff6}]}) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) 03:38:09 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xf000}, 0x0) [ 795.895482][ T7691] bond228: (slave bridge384): making interface the new active one 03:38:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xe00, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 795.945927][ T3180] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 795.955344][ T7691] bond228: (slave bridge384): Enslaving as an active interface with an up link [ 796.010927][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): bond228: link becomes ready [ 796.028976][ T7682] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 796.086167][ T7691] bond228: (slave bridge385): Enslaving as an active interface with a down link [ 796.195887][ T3180] usb 1-1: Using ep0 maxpacket: 8 [ 796.318082][ T3180] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 796.326301][ T3180] usb 1-1: config 0 has no interface number 0 [ 796.332574][ T3180] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 796.364043][ T3180] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 796.377347][ T3180] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 796.393381][ T3180] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 796.403090][ T3180] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.413339][ T3180] usb 1-1: config 0 descriptor?? [ 796.436326][ T7683] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 796.444418][ T7683] raw-gadget gadget: fail, usb_ep_enable returned -22 03:38:10 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r3 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r3, 0x0) times(&(0x7f0000000000)) 03:38:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29410, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:10 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xfeff}, 0x0) 03:38:10 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=0x0, @ANYBLOB="280fc072dabe61af78f86ed73c655a5411ec17b49b41fe9c7773ac0ef9281acf9c64324bc66d47de0454652a53ded041c227f75a45e7c4acc50dee82900b9b5e0540055d724eeb6af28355da81d8fc012999ae96697a4dbe715367d36e7e5c2b6725d98ab371654cd51d9bfdde284f85d853276d8e0d148972b4fea6f05d7c1eac87b98de2e53592d35d10a459d72ee0bcfa23850bdfff601f3c0aebb1a7dec586fedf986dd80d31f9719ba94e7d256c655fd4e69f896d91118d8c88a5f99b7957fd3668b56bb5e3c49ef90000000000"], 0x3c}}, 0x0) 03:38:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1027, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 796.692374][ T7784] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 796.828733][ T7784] 8021q: adding VLAN 0 to HW filter on device bond229 [ 796.858496][ T3180] usb 1-1: USB disconnect, device number 87 [ 796.920135][ T7802] bond229: (slave bridge386): making interface the new active one [ 796.953904][ T7802] bond229: (slave bridge386): Enslaving as an active interface with an up link [ 796.992951][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): bond229: link becomes ready [ 797.005428][ T7784] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 797.053197][ T7802] bond229: (slave bridge387): Enslaving as an active interface with a down link 03:38:11 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000180)='\xe3$(\x00') 03:38:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29411, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1802, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:11 executing program 5: r0 = socket(0x1f, 0xa, 0x3) r1 = dup(r0) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000600)={0x231, "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"}) syz_open_procfs(0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="c8010000030101010000000000000000020000022400188008000140000000050800034000000007080003400000002d080001400000053268000180060003400002002014000180080001006401010108000200640101011400018008000100ac14142808000200ac1414bb0c00e57f05000100010000000c00028005000100060000000c000280050001008800000006000340000100000600034000010000080016400000002024000e801400018008000100e0000002080002000900000000000000050001008800000006001240000300005c000d8014000400fe8000000000000000000000000000aa08000100ac1414aa08000100e00000020c000380060001004e21000014000400fc01000000000000000000000000000014000500ff0100000000000000000000000000012c001700000000080000cfad000000060000000500000005000005e70000003f0000000400000001fffffff95c000e2577e0ab802c000180140003fc01000000000000c24c527db564cd8b63bdc57617000016f94e8ba8b5096d0400fe80000000000000000bf7b43e3986f335a16e0000000000000c2c00018014000300fc02000000000000000000000000000014000400fe8000000000000000"], 0x1c8}}, 0x4014) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x5, 0xa4) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000040)={r6, 0x6}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r6, 0x10001}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000240)={r7, 0x35, 0x1}, 0x8) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0086ead3d66566f6070069703667726500000c9e7f04678d7cb56f0702674eb573ef135c8dab28", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) 03:38:11 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xff0f}, 0x0) 03:38:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x2000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 797.444318][ T7861] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:11 executing program 3: clock_gettime(0x4, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40000000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) accept4$inet(r2, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10, 0x80800) r3 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r3, 0x0) [ 797.587836][ T7861] 8021q: adding VLAN 0 to HW filter on device bond230 [ 797.650468][ T7869] bond230: (slave bridge388): making interface the new active one 03:38:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x2710, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 797.701317][ T7869] bond230: (slave bridge388): Enslaving as an active interface with an up link [ 797.740550][ T7871] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 797.756007][ T6140] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 797.776066][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): bond230: link becomes ready [ 797.784800][ T7861] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:11 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xfffe}, 0x0) [ 797.848753][ T7869] bond230: (slave bridge389): Enslaving as an active interface with a down link 03:38:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x2ee0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 797.909913][ T7918] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 03:38:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29412, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 798.007777][ T6140] usb 1-1: Using ep0 maxpacket: 8 03:38:12 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x34000}, 0x0) [ 798.056511][ T7931] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 798.127270][ T6140] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 798.141172][ T6140] usb 1-1: config 0 has no interface number 0 [ 798.150593][ T7931] 8021q: adding VLAN 0 to HW filter on device bond231 [ 798.168294][ T6140] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 798.194521][ T6140] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 798.219094][ T7940] bond231: (slave bridge390): making interface the new active one [ 798.219562][ T6140] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 798.256289][ T6140] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 798.276574][ T6140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.276596][ T7940] bond231: (slave bridge390): Enslaving as an active interface with an up link [ 798.295260][ T6140] usb 1-1: config 0 descriptor?? [ 798.318652][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): bond231: link becomes ready [ 798.337011][ T7865] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 798.343976][ T7865] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 798.354608][ T7940] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 798.453549][ T7940] 8021q: adding VLAN 0 to HW filter on device bond232 [ 798.743273][ T12] usb 1-1: USB disconnect, device number 88 03:38:13 executing program 5: syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100, &(0x7f0000000580)="4f3f9e966550f7a4c0e1841ac95629d74c505e8d11dca50d5e0bcfe47bf070") r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000200)) r3 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@x25, &(0x7f0000000540)=0xfffffffffffffe94) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000001c0)=0x4, 0x4) r4 = geteuid() fsetxattr$system_posix_acl(r3, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB='\b\x00'/12, @ANYRES16, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"/436, @ANYRES32=0x0, @ANYBLOB="10000200000000080800000000000000bf6ba308525fb82df4d1ae00a29f40e06b000000000000000000000000000000cb967802a35d8cf51cd8a6b0caae714e399af327ec1696845023e409260e28831b12a12c7599101fc161142ffa1be75d3d9fa4e4fe36e2648cd3bcc59a1b37cd350944aa459f1d304fa8b17722736a44510363745431f26bc2e31a60a275bc6211731f0361878aa0c2930a0e00920006e9fdb4eae261d4c02c1fe9c5659f5d672bf342eacd48f6806b463b3a9408364452a4fa9bd178b4e2f2b734cb2a8c266cfb90130bc6afd43aeee4e5410c904bfaeebd4782454044c095cad8923b86826207dfecad1c2530c84da1c9dc457ed82cbc622bbe9273159cef38d50001000097d7b4f6b463bf6a0eadd053bd82a4cf6c8ba5536c23c99bd67a59f429027cdaaf18bf97760080f7241c3040b51458ad41420fd447aaa4fe8bf8045f0eb47b2c786d3fe8d48315d1207901800000ecb69b0dfd394f9e8a71905f5dfb08b69f24225ee88b59e1e48fdd8c4439c3f5f6c270d31100feb71a9767c3de68861b96b58a608d21719f1b789f0f1fba20b4f9240779306ed9310459ffd4c371b7527c0b8b7ed9adaffd1f957a6ed65564e58cc382d03569cfd7488164ce09ce5dc8f442290e8ef6151dfa7d367e3688d020a8b64658a1599d203795be8979ec", @ANYRES64=r0, @ANYRESDEC, @ANYRES32], 0x7, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000240)) quotactl(0x2, &(0x7f0000000040)='./file0\x00', r4, &(0x7f00000000c0)="9b3da34cde120c14942c213bf942155411eaaed646c350fa812c79910396a14f3114b79191ca643abd5e54eb8d95a289490511f95ac79f36e6249b2a10e2676ede81046d5942cbb3dde5daf5aa5f0325c7d4302e8d") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101900, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) 03:38:13 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000180)='\xe3$(\x00') 03:38:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x3f00, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29413, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:13 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 03:38:13 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) r5 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r6 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r6, 0x0) 03:38:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x4000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 799.334201][ T8053] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x4002, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x4800, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 799.489956][ T8053] 8021q: adding VLAN 0 to HW filter on device bond233 [ 799.570168][ T8060] bond233: (slave bridge392): making interface the new active one 03:38:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x4c00, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 799.622093][ T8060] bond233: (slave bridge392): Enslaving as an active interface with an up link [ 799.635729][ T3182] usb 1-1: new high-speed USB device number 89 using dummy_hcd 03:38:13 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) [ 799.665799][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): bond233: link becomes ready [ 799.674584][ T8053] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 799.741153][ T8060] bond233: (slave bridge393): Enslaving as an active interface with a down link 03:38:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29414, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:13 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000080)='`', 0x1, r2) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000300)={r1, r4, r3}, &(0x7f0000000540)=""/243, 0xf3, &(0x7f0000000140)={&(0x7f0000000240)={'crc32-generic\x00'}}) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x4}]}}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)={0x1f4, 0x0, 0x600, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x10000}, @ETHTOOL_A_EEE_MODES_OURS={0x188, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x78}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x44e7a9ba}, @ETHTOOL_A_BITSET_VALUE={0x1a, 0x4, "8d45119aad08f3156bb6105237b1cf2f81e3aace2b5b"}, @ETHTOOL_A_BITSET_BITS={0x154, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'user\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'keyring\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '\')(-^\xd6]**,l\\^:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '!-!@:@\',#/}\'\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'keyring\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'syz'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb7b}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xed%$^]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'crc32-generic\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!(]\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'user\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8ad}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+[:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x8}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x6}, @ETHTOOL_A_EEE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x80024}, 0x40010) r10 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$VT_RESIZEX(r10, 0x560a, &(0x7f0000000100)={0xd5, 0x81e, 0x7, 0x800, 0x5, 0x6}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=0x0, @ANYBLOB="1433882d44da70cb564e7999b822259c68bdb20fb54bb32a6e85ad7373efdcf448cd688bc8de639f592d53ca20e4ad836b73a89d0e808ca17070c3c810af149ffe8d2ab9437f3dc45c252dfd216cfc540b"], 0x3c}}, 0x0) [ 799.883091][ T8122] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 799.891720][ T3182] usb 1-1: Using ep0 maxpacket: 8 [ 799.994096][ T8122] 8021q: adding VLAN 0 to HW filter on device bond234 [ 800.025948][ T3182] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 800.056627][ T3182] usb 1-1: config 0 has no interface number 0 [ 800.072022][ T8125] bond234: (slave bridge394): making interface the new active one [ 800.073254][ T3182] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 800.094315][ T8125] bond234: (slave bridge394): Enslaving as an active interface with an up link [ 800.112873][ T3182] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 800.136050][ T3182] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 800.159453][ T3182] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 800.177013][ T3182] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.203133][ T3182] usb 1-1: config 0 descriptor?? [ 800.210586][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond234: link becomes ready [ 800.224084][ T8122] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 800.236658][ T8058] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 800.243610][ T8058] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 800.285438][ T8125] bond234: (slave bridge395): Enslaving as an active interface with a down link [ 800.583715][ T3181] usb 1-1: USB disconnect, device number 89 03:38:15 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000180)='\xe3$(\x00') 03:38:15 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 03:38:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x5000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:15 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r3 = socket(0x10, 0x80000, 0x8000000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="151ec16c9d809040a9", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={r4, 0x6}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000000)={r4, 0x1, 0x2fa}, 0x8) r5 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r6 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r6, 0x0) 03:38:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29415, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:15 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000440)=0x3) syz_open_procfs(0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$vhost_msg_v2(r4, &(0x7f00000000c0)={0x2, 0x0, {&(0x7f0000000000)=""/82, 0x52, &(0x7f00000001c0)=""/186, 0x1, 0x4}}, 0x48) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf25150000001c0007800c002f0402000000000000000c000300000400000000000010000680080001000700000004000200740001802c0004001400010002004e22e000000200000000000000001400020002004e210a0101010000000000000000440002800800010008000000080001000200000008000200ff0f000008000200010000000800010006000000080001001d000000080002000700000008000300050000001c0003800800030002000000080003000300000008000100080000002000078008000200010000800c00040007000000000000000800010000800000"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$TIOCSTI(r4, 0x5412, 0x6) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) [ 801.160718][ T8206] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 801.209354][ T8206] 8021q: adding VLAN 0 to HW filter on device bond235 [ 801.244223][ T8243] bond235: (slave bridge396): making interface the new active one 03:38:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x6400, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 801.258441][ T8243] bond235: (slave bridge396): Enslaving as an active interface with an up link [ 801.296255][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond235: link becomes ready [ 801.304944][ T8206] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:15 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) [ 801.330736][ T8243] bond235: (slave bridge397): Enslaving as an active interface with a down link 03:38:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29416, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:15 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 03:38:15 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000040)=0x9) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x2c}}, 0x0) 03:38:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x6800, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 801.444472][ T8261] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 801.466011][ T6140] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 801.512789][ T8261] 8021q: adding VLAN 0 to HW filter on device bond236 [ 801.543001][ T8266] bond236: (slave bridge398): making interface the new active one [ 801.567918][ T8266] bond236: (slave bridge398): Enslaving as an active interface with an up link [ 801.583042][ T2593] IPv6: ADDRCONF(NETDEV_CHANGE): bond236: link becomes ready [ 801.641807][ T8266] bond236: (slave bridge399): Enslaving as an active interface with a down link [ 801.725674][ T6140] usb 1-1: Using ep0 maxpacket: 8 [ 801.856076][ T6140] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 801.864112][ T6140] usb 1-1: config 0 has no interface number 0 [ 801.873931][ T6140] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 801.890707][ T6140] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 801.901835][ T6140] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 801.912544][ T6140] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 801.922866][ T6140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.934042][ T6140] usb 1-1: config 0 descriptor?? [ 801.956880][ T8208] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 801.963812][ T8208] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 802.243905][ T6140] usb 1-1: USB disconnect, device number 90 03:38:16 executing program 0: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000080)='`', 0x1, r2) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000300)={r1, r4, r3}, &(0x7f0000000540)=""/243, 0xf3, &(0x7f0000000140)={&(0x7f0000000240)={'crc32-generic\x00'}}) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x4}]}}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)={0x1f4, 0x0, 0x600, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x10000}, @ETHTOOL_A_EEE_MODES_OURS={0x188, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x78}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x44e7a9ba}, @ETHTOOL_A_BITSET_VALUE={0x1a, 0x4, "8d45119aad08f3156bb6105237b1cf2f81e3aace2b5b"}, @ETHTOOL_A_BITSET_BITS={0x154, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'user\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'keyring\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '\')(-^\xd6]**,l\\^:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '!-!@:@\',#/}\'\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'keyring\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'syz'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb7b}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xed%$^]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'crc32-generic\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!(]\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'user\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8ad}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+[:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x8}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x6}, @ETHTOOL_A_EEE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x80024}, 0x40010) r10 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$VT_RESIZEX(r10, 0x560a, &(0x7f0000000100)={0xd5, 0x81e, 0x7, 0x800, 0x5, 0x6}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=0x0, @ANYBLOB="1433882d44da70cb564e7999b822259c68bdb20fb54bb32a6e85ad7373efdcf448cd688bc8de639f592d53ca20e4ad836b73a89d0e808ca17070c3c810af149ffe8d2ab9437f3dc45c252dfd216cfc540b"], 0x3c}}, 0x0) 03:38:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x6c00, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:16 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RSTAT(r2, &(0x7f0000000280)={0x19a, 0x7d, 0x2, {0x0, 0x193, 0x7f, 0x80, {0x0, 0x1}, 0x10000, 0xfffff98d, 0x1000, 0x9, 0x8, '(^*{:/#.', 0xac, '$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0, '', 0xac, '$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n'}}, 0x19a) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCXONC(r4, 0x540a, 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r5 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r5, 0x0) 03:38:16 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video36\x00', 0x2, 0x0) fsetxattr(r0, &(0x7f0000000440)=@random={'security.', 'ip6gre\x00'}, &(0x7f0000000480)='/dev/mISDNtimer\x00', 0x10, 0x0) syz_open_procfs(0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mISDNtimer\x00', 0x60400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000001c0)=[{0x4, 0x0, [0x8, 0x3b, 0x7, 0xf09, 0x43d9987, 0x3, 0x810, 0xe5a9, 0x3d15, 0xf96, 0x8000, 0x2, 0x6, 0x2, 0x1f, 0x3]}, {0x10, 0x0, [0x1, 0x5, 0x3, 0x8, 0x100, 0x1, 0xe8, 0xffffff62, 0x4, 0x6, 0x100, 0xffff, 0x6, 0x2362bb97, 0xfffffc00, 0x200]}, {0xfc62377c62e096bc, 0x0, [0x100, 0x3, 0x546363ac, 0x100, 0x3ff, 0x8000, 0x101, 0x100, 0x4, 0x1ff, 0x1000, 0x26c, 0x3f, 0xfffffff7, 0xc0000000, 0x1]}, {0x28, 0x0, [0x5, 0x2d, 0x25, 0x4c5, 0x7fff, 0x2, 0x239, 0x9, 0x72b6, 0x4, 0x2, 0x10000, 0x8, 0xff, 0x7fffffff, 0x1]}, {0x34, 0x0, [0x2, 0x101, 0x9, 0x24, 0xfd, 0x8, 0x80, 0xfff, 0xfffffffe, 0x10000, 0x5, 0x7ff, 0xffffff51, 0x7fff, 0xffffffc0, 0xe36]}, {0xf, 0x0, [0x100, 0x40, 0x200, 0x200, 0x0, 0xfffffff8, 0x7fff, 0x10001, 0x0, 0x65a0, 0xffffffff, 0xa72, 0x81, 0xb44, 0x5, 0x65]}, {0x10, 0x0, [0xffffffff, 0x1, 0x3, 0x0, 0x6, 0x4dd6, 0x4fd8, 0xffffffff, 0x6, 0x9, 0x80000000, 0x2, 0x20c17aad, 0x101, 0xfffffffc, 0x5]}, {0x20, 0x0, [0x92000000, 0x888, 0x1, 0xf0, 0x81, 0x10001, 0x6, 0xffffff00, 0xffff, 0x6, 0x6, 0x20, 0x9, 0x9, 0xffe00000, 0x400]}], r3, 0x1, 0x1, 0x240}}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) 03:38:16 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 03:38:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29417, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 802.823852][ T8365] validate_nla: 1 callbacks suppressed [ 802.823862][ T8365] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x7400, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 802.912078][ T8365] 8021q: adding VLAN 0 to HW filter on device bond237 [ 802.992950][ T8375] bond237: (slave bridge400): making interface the new active one [ 803.027242][ T8375] bond237: (slave bridge400): Enslaving as an active interface with an up link 03:38:17 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 03:38:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x7a00, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 803.041092][ T8365] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 803.057143][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): bond237: link becomes ready 03:38:17 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000180)='\xe3$(\x00') 03:38:17 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x3, 0xffffffff, 0x10, @empty, @mcast2, 0x7, 0x8000, 0x3ff, 0x3ff}}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x4}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@mpls_delroute={0x48, 0x19, 0x200, 0x70bd2c, 0x25dfdbfc, {0x1c, 0x10, 0xb4, 0x64, 0xfd, 0xe93df0e647e14798, 0xc8, 0x4, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x7ff, 0x3, 0x7, r1}}, @RTA_VIA={0x14, 0x12, {0x11, "b538403166e88438913ae06c60d4"}}, @RTA_MULTIPATH={0xc, 0x9, {0x8de, 0x7, 0x4, r5}}]}, 0x48}}, 0x0) [ 803.126502][ T8375] bond237: (slave bridge401): Enslaving as an active interface with a down link 03:38:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29418, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:17 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) 03:38:17 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) [ 803.274757][ T8429] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 803.376091][ T8429] 8021q: adding VLAN 0 to HW filter on device bond238 [ 803.423962][ T8433] bond238: (slave bridge402): making interface the new active one [ 803.444806][ T8433] bond238: (slave bridge402): Enslaving as an active interface with an up link [ 803.459513][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): bond238: link becomes ready [ 803.470166][ T8429] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 803.478616][ T3181] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 803.508047][ T8433] bond238: (slave bridge403): Enslaving as an active interface with a down link 03:38:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29419, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x80fe, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:17 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 03:38:17 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000003c0)={'\x00', {0x2, 0x4e22, @remote}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) 03:38:17 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r4 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000002, 0x11, r4, 0x0) 03:38:17 executing program 5: r0 = syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001790069703667726100000c0002804ae1e8350ddfa8d59a935d2c12ff579c3469b3230d846fe7a8d73160535e1366be8108c50896c4a7c25ff3649820d154ade9bd2f3ab73223a6bc774015ba2ad2c224ff9aa501b4352a", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) [ 803.712685][ T8488] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 803.756660][ T3181] usb 1-1: Using ep0 maxpacket: 8 03:38:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xe02e, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 803.877075][ T3181] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 803.887464][ T3181] usb 1-1: config 0 has no interface number 0 [ 803.904952][ T3181] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 803.924185][ T8488] 8021q: adding VLAN 0 to HW filter on device bond239 [ 803.930208][ T3181] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 803.960065][ T3181] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 804.032323][ T8492] bond239: (slave bridge404): making interface the new active one [ 804.045873][ T3181] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 804.054985][ T3181] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.075138][ T8492] bond239: (slave bridge404): Enslaving as an active interface with an up link [ 804.093696][ T3181] usb 1-1: config 0 descriptor?? [ 804.117763][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): bond239: link becomes ready [ 804.132129][ T8421] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 804.139881][ T8421] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 804.150924][ T8488] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 804.186774][ T8492] bond239: (slave bridge405): Enslaving as an active interface with a down link [ 804.428590][ T3181] usb 1-1: USB disconnect, device number 91 03:38:19 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000180)='\xe3$(\x00') 03:38:19 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r1, 0x4122, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) 03:38:19 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 03:38:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xe803, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2941a, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:19 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000040)=0xffffffffffffffff, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f0000000000)) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r4 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r4, 0x0) 03:38:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xf401, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 805.039095][ T8587] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:19 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) 03:38:19 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) [ 805.106669][ T8587] 8021q: adding VLAN 0 to HW filter on device bond240 03:38:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfb04, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 805.233680][ T8610] bond240: (slave bridge406): making interface the new active one 03:38:19 executing program 3: clock_gettime(0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000000)={0x8, 0xff, 0x9, {0x1, 0x7fffffff}, 0x0, 0x3}) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x2, 0x1, 0x20000000ba10, 0x400}, &(0x7f0000000200)={0x0, 0x989680}, 0x0) r4 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4X\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x3) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r4, 0x0) [ 805.281488][ T8610] bond240: (slave bridge406): Enslaving as an active interface with an up link [ 805.302295][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond240: link becomes ready [ 805.310851][ T6140] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 805.330583][ T8587] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 805.354721][ T8610] bond240: (slave bridge407): Enslaving as an active interface with a down link 03:38:19 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9a}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048004}, 0x40c888c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) [ 805.605590][ T6140] usb 1-1: Using ep0 maxpacket: 8 [ 805.746526][ T6140] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 805.754542][ T6140] usb 1-1: config 0 has no interface number 0 [ 805.761135][ T6140] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 805.773135][ T6140] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 805.783396][ T6140] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 805.793335][ T6140] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 805.802692][ T6140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.812258][ T6140] usb 1-1: config 0 descriptor?? [ 805.836011][ T8590] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 805.842909][ T8590] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 806.113889][ T3181] usb 1-1: USB disconnect, device number 92 03:38:20 executing program 0 (fault-call:2 fault-nth:0): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:38:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2941b, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:20 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc000000}, 0x0) 03:38:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfe80, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:20 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) fcntl$dupfd(r1, 0x406, r2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000000c0)=0x40, 0x4) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r4 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r4, 0x0) 03:38:20 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f00000001c0)={0x5, 0xffff, 0xfffa}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x28, r3, 0x5, 0x0, 0x0, {{}, {}, {0xc, 0x18, {0x0, @bearer=@l2={'eth'}}}}}, 0x28}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000240)={0x3, r7, 0x1}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xd120}, {r8, 0x1010}], 0x2, &(0x7f0000000380)={r9, r10+60000000}, &(0x7f00000003c0)={[0x6]}, 0x8) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r3, 0x400, 0x1f, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'hsr0\x00'}}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004004}, 0x40840) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0xfffffffffffffffb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x4}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) 03:38:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xff00, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 806.702018][ T8700] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 806.808542][ T8700] 8021q: adding VLAN 0 to HW filter on device bond241 [ 806.873027][ T8708] bond241: (slave bridge408): making interface the new active one [ 806.911538][ T8708] bond241: (slave bridge408): Enslaving as an active interface with an up link 03:38:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xff0f, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 806.921651][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): bond241: link becomes ready [ 806.945904][ T8700] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:21 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) [ 807.003134][ T8708] bond241: (slave bridge409): Enslaving as an active interface with a down link [ 807.025577][ T2593] usb 1-1: new high-speed USB device number 93 using dummy_hcd 03:38:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2941c, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x20000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:21 executing program 5: r0 = syz_open_procfs(0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000000)={0x1, 0x0, 0x4, 0x800, 0x108, {0x0, 0x2710}, {0x4, 0x0, 0x9, 0x2, 0x20, 0x7, "011687c4"}, 0x200, 0x3, @planes=&(0x7f0000000500)={0x92fa, 0x3f, @userptr=0x5, 0x8}, 0xcaf, 0x0, r0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) fstat(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x4c702, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x5, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c400000010000104449400"/20, @ANYRES64=r3, @ANYBLOB="0000000000000000a400128009000100766c616e0000000094000280060005008100000006000100030000000c0082000e3fff4073000000040000000c00020008000000020000000c00020015000000230000000600050088a800000600050088a8000006000500810000001c0003800c00010000000000050000000c00010008000000f3080000280003800c0001000900000062ab00000c00010001800000050000000c000100ba00000009000000"], 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x40000, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_S_FBUF(r6, 0x4030560b, &(0x7f0000000100)={0x86, 0x62, &(0x7f0000000400)="b87992fc3f78504bfee05df7a02e70cb273853b701562db452cfcfb87896bf0410a10f1761f531d9f5dad2bbfbf0f2e0ff4d4bc63b8df1a5e734b46fefde252ed8fa8e3ffd3d169dc7e908146d1d0212a69229dd6729db1f58455907ab204556100276a05e60c7c8b0179c60965de92166e9e5ba72a571d6442ea71b18ef78fda7", {0xffff0000, 0x3, 0x47425247, 0x8, 0x1, 0x58c, 0x6}}) r7 = socket$nl_audit(0x10, 0x3, 0x9) r8 = dup(r7) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000540)) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r8, 0xc040564a, &(0x7f00000004c0)={0x8, 0x0, 0x3006, 0xfe, 0x7fffffff, 0x2, 0x3, 0x1}) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000580)=0x3) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f00000002c0)) [ 807.239980][ T8773] 8021q: adding VLAN 0 to HW filter on device bond242 [ 807.254354][ T8774] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.5'. [ 807.267458][ T2593] usb 1-1: Using ep0 maxpacket: 8 [ 807.306257][ T8798] bond242: (slave bridge410): making interface the new active one [ 807.318449][ T8798] bond242: (slave bridge410): Enslaving as an active interface with an up link [ 807.329940][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): bond242: link becomes ready [ 807.371181][ T8798] bond242: (slave bridge411): Enslaving as an active interface with a down link [ 807.397557][ T2593] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 807.406541][ T8774] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.5'. [ 807.416423][ T2593] usb 1-1: config 0 has no interface number 0 [ 807.423217][ T2593] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 807.452587][ T2593] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 807.472664][ T2593] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 807.483764][ T2593] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 807.500622][ T2593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.524148][ T2593] usb 1-1: config 0 descriptor?? [ 807.546483][ T8706] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 807.563860][ T8706] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 807.811172][ T8706] FAULT_INJECTION: forcing a failure. [ 807.811172][ T8706] name failslab, interval 1, probability 0, space 0, times 0 [ 807.845263][ T8706] CPU: 1 PID: 8706 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 807.853885][ T8706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 807.863938][ T8706] Call Trace: [ 807.867501][ T8706] dump_stack+0x18f/0x20d [ 807.871845][ T8706] should_fail.cold+0x5/0x14 [ 807.876441][ T8706] should_failslab+0x5/0xf [ 807.880864][ T8706] kmem_cache_alloc+0x2a9/0x3b0 [ 807.885725][ T8706] getname_flags.part.0+0x50/0x4f0 [ 807.890932][ T8706] getname+0x8e/0xd0 [ 807.894831][ T8706] do_sys_openat2+0xf7/0x3b0 [ 807.899426][ T8706] ? build_open_flags+0x650/0x650 [ 807.904454][ T8706] ? __mutex_unlock_slowpath+0xe2/0x610 [ 807.910004][ T8706] ? wait_for_completion+0x260/0x260 [ 807.915467][ T8706] __x64_sys_openat+0x13f/0x1f0 [ 807.920322][ T8706] ? __ia32_sys_open+0x1c0/0x1c0 [ 807.925267][ T8706] ? ksys_write+0x1a5/0x250 [ 807.929779][ T8706] ? lock_is_held_type+0xb0/0xe0 [ 807.934722][ T8706] ? do_syscall_64+0x1c/0xe0 [ 807.939319][ T8706] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 807.945309][ T8706] do_syscall_64+0x60/0xe0 [ 807.949734][ T8706] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 807.955629][ T8706] RIP: 0033:0x45cba9 [ 807.959517][ T8706] Code: Bad RIP value. [ 807.963579][ T8706] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 807.971992][ T8706] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 807.979957][ T8706] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 807.987905][ T8706] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 807.995853][ T8706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 808.003800][ T8706] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 [ 808.036447][ T12] usb 1-1: USB disconnect, device number 93 03:38:22 executing program 0 (fault-call:2 fault-nth:1): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:38:22 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 03:38:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x50000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2941d, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:22 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xd, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) 03:38:22 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x4700, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)=ANY=[@ANYBLOB="ff", @ANYRES16=r1, @ANYBLOB="000127bd7000fedbdf25020000001400020000000000000000000000ffff0a010101080005007f00000114000300fc000000000000000000000000000001"], 0x44}}, 0x44001) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r2+30000000}, 0x0) r5 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) recvmsg(r3, &(0x7f0000001640)={&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000280)=""/159, 0x9f}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f00000000c0)}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000100)=""/49, 0x31}, {&(0x7f0000001440)=""/76, 0x4c}, {&(0x7f00000014c0)=""/217, 0xd9}], 0x7, &(0x7f0000000180)=""/23, 0x17}, 0x12021) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r5, 0x0) 03:38:22 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) [ 808.618554][ T8875] validate_nla: 2 callbacks suppressed [ 808.618564][ T8875] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 808.670582][ T8875] 8021q: adding VLAN 0 to HW filter on device bond243 [ 808.701371][ T8907] bond243: (slave bridge412): making interface the new active one 03:38:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x100000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 808.718276][ T8907] bond243: (slave bridge412): Enslaving as an active interface with an up link [ 808.728890][ T2593] IPv6: ADDRCONF(NETDEV_CHANGE): bond243: link becomes ready [ 808.744231][ T8875] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 808.766339][ T8907] bond243: (slave bridge413): Enslaving as an active interface with a down link 03:38:22 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000000)=""/24, &(0x7f00000000c0)=0x18) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@initdev, @in6=@remote}}, {{@in6=@empty}, 0x0, @in6=@private1}}, &(0x7f0000000040)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c1100001800000427bd7000fbdbdf250214001fff02c8040000000008000700e00000012811168021113680edff0ee7434fc8ce0b754617cac0b778128c8e6cf8de55042570f72eed734be251c670c43639f622adfebdb777b4ec6334c75ee1f49648b363e48f0fa84a1b05da8a105ea5b3f23cc0bfbc8f62dc8b6b8cbdf672837ff6963c2c70abb6529212683229e29bc711679f2f5e8dbe233943e6fdd67ef582262c50256e28c4aabb5a2d4a3cc9d4ccad619f5e7b61a1c46fedb4fd4438d1f9042ed42f38eda2a1a9c96da5fc8d2e4b3af730d0368469b48aded46513b04deb06e5df083465853d50c2c12bac6a51a3d13bc53b60417a8b465296ba1935bb3147c642722f801e6bea20708f8fb54956893762b9a67f901b55981a6c11ab32acf2ad708307f4dbf968fea636b0a9330206fd8b54fe2b58586fa07e8ba3c48a0244796974e40cb2b4e8ee81d314d185fa012faf6ccf8a81f99c6260dd9a0f6995689e8df88b7302d11e44309ed7047fae41cdcc1c238a279ab741172690d5908bad34b6f21d2f37fdc7feb0702e1225d2a1171a30d116d78f55bd035a01d8db1e228f4dcb400204b43f71e93495b66bdf07983550b3833a101178fcf84d0b29e4173f49de495bf0e123ad08d4c888f09694bda79b8e67400565d586014840179fc74de6769ef09b666e9120b68ea15eb3d0b3c39fa3ca67b75f27fcacfcc87bc8d7ed5da62f951a1c845de97e57ba425ee05aee7e090042d5e59985fd355e056beadcd69e36895ee1d2521b3015a22a7fbe9d578bc8188958ec21732d54746da1fe676a9e34b7b260063fef45f2be86b0a74bff3133fdde2eb5496a1134701e35cd57f7b73c170c7276ae623033d8a77ea26054c8a2e613ad5477d5edbf9272807dcb82615a1f7d2c02a441260ed3255959b9a9fd09e7f0ef76d98a3edc27f07ad7c687115fbe8a2271a684731f3812d240d08e0a82b8b7f01773384815894db4936a7cc4605cce5616ec030c56f3bf1b21d8fe056eab377b4daf6afe474c07e72cd1e9174644b9d318cd07b0e4e3082807667c45045d14d5aa548ef634842385e021d932c7677422118c713976d095292a764cd808d15a8a09395b2eb728b3478db58a276baca2eb9e523e818a63aa3f631bad0c23a03ee8c0a6b82fe0638e30649ea58bf04d56d91aae4c2097a5183eddc3a2cadfaf43f8b39cf9087badefce77e9bd2eb15269c94f26d9f9c67dc6a86c2f119e36cc33620a911b73dc66859a2c12e35bbd7de07babfbae8697f295797e081f808cb378eccd812fe4ea98d66ad2c32e8d0abc9bd9def8ad9e106122f2a98633569ce1b72684d2831e8388ce7b70cec81a7e8589d63448120f4d95388e815f879f4f87f686982d1293e2e77e6c4fd7ca1b35a5a9ff79fd2099116d1ea8fe4702bb2e1ed30e901b280988c0022ab85532bd4808115446938824ac9f642a1d15718db60278869b0d85bf44a0b5ad6873559534f8b27d37110e24b6a7be48043450188facb108c1245387c1a103728c4a914bfdbe07ac7ae05c47d03f165ee4283d48565805b501175b49e9136eef2b3a6ad260f9cbc8569d1a50c2be0bd0286668c72ef4274e63d4230f58cce9b18443ce482794ae06b426c1301606e54337839eab7346d6cd9c1f2803fa049493e0e8a654383e137e2bbcc622a371497db5d1f5618be9ea50234809e10f2f97ef49a13d6f6ea8532ed5e702b7f72a0770dbc4976b019232dd4e0a36d1a2c016b55904c0e1bfccb3f82ad95320660740d826f9d5d40326951fd9033cfdc002e8f56f86586179b84145b5148f47419b9242fb4660b57500f828c87fdc9eadf954f79499dad2e984598f729e1adcb203bbd6856779c3406c73002da2105570bd8eeb19ee4b975d497fc9d6c8d4386acaca0ad9098f95a81294b10008d691cbf3c4f77fbd5a05b0ca7b16427350d1197e3d9866781272a3ba83d401b1cbd27976059886b28ed373d1dfc6a0a156ae72030b4ccc3250f1e9657d6ead6d55a294a5364ae2dc0f8ff9ca20f17be93fc0a81343715783b286037c37c71a25c542cf933fc1667200a6b3f4b33977fd42d05fd6d7041f5b3f743ba20b5dc0f05bde1d7cc43383be1f54e8e10dded9fc90cdc4373994be79854d9537b980795abd3eb93c71139c5487df909fff731786a24c5ee2f4927ca2ddf44231dfc517383212d010160211c460df3affd62c71da8e2933e687d5561c392959df0bf1bc8432fcc431700bae5083ae69e96bedfd4d3b21c38f658d321ba97ab631580fe5fed25df86cf482600bc7d89dba67db44892c8331301ee20df14b110829501624c7329471cf2ba50cbb0d466a5638bae60fd5817938be0acdd7ca1d8024d9a0eaf4281850757598975d7d4eb0f011f74f09b426e2ab031b721f2565e8fe7f2108d63229d416026fabc155137fce448d6435768800db636727ce392f9ada42160e9a0c9b9c49875c47eea36709eaa9c083812172e503c0fbb7216a939abeafaafe01ff8bd258cb197d65cdbe8ba8b5e53d407d61af03b926e591b512c87bf022bc2068b27cf6d23e33b9114c9d9560b4ad1aef2a3cd781f2c7a82f61716ddd2437a7ac31ea4a9ce1da17fef8f60dd836ca10a5980304099604832486d4fe0945f0394afb23ab84d5138b7d2332f7770d24744614f98aaff0c8c0c13cd896e32f5a2027da7d8527b37be7c3349661b8c2b53fa4e5982da5b00c867e4eb2de56665df665463f0824d8f8186e2866ffeeb069bf2c93e21a804ea127f3266044a11200269b7f19a7a283d9cd25d52f6315c29458a84ca711af68e7bd34f8cd03a3463f2f07effe0574ea19b6a2ac007aa0e3b864497e9ea796538e97df8dcd8758562dd924b5171c4da2d8c6b1635dbbaf2b933dc2a89e15c9239d2fecd13ac370d00a03824cf4eec42098e53768067bb46720fef0c78853faf299732d4defa9f320a409f90da6010b04b0e7fc18437e4bb621c775706923df5a5a5f649330b08e5191884f5fd47418a5eb8c62b525d47220cc9386a9de183d0077f180bf5511bd8e4557861724108dc0b429a0fb3caec3540ae94a5bc0055b7ecfb4111d13a1527547e73b6816083854018f34e8381ecb54b4981828d5a59556f4a2922459be0fd3ae3b1d2500d79de05a68ff91e0c71fe69b2ca9ccaf3889af7424de2dfe807a3a89c7ec1a1bd3b7bc23f4049f4e06be895515b08028bd0f41c1e4d322d1da1b8bd8e07d99f314402db10ce58f7dde7ea75fe1ff07601b37bfc2fd2c9962dddcb702c66797bfa08474e5f2426c9f7f50d405818b83285856ecefd214d2434892c3022c9a8c110faf41e03ddb3637986977a2c57bde1166fdc2261b7b97d6f22949b8215347c9343d5cc0281ef03ce595cc920ee9fe628e9afd36a09e2b3015f72e41344502a0b15671ba893d1e55b6c56aa93581c3eea5025569e38a116919d3fafcb61a34a55ce73695cdad072aebd71d85ed803f6d209f3dd7251609e74163bb8eff943cd35a7aa9e271c6c51cd0cc3448f54f17afafc765a11ba5d727c3f77907c2072752d7eb05963858748fb64230792ead8447c183c442a243b77da56d1b80bb5bef894c95085a300c3a22c08a854b05745fb47463e254a43246d41ff17fcefb6119af029e108de7d35bfc779f7110aa130ea96e096b3219eb106f43c68f030c708a889d426fa2927f154de32c4a274baa3834a7633ed8bfcaa8bd90ee9651c77a92fa5e09d589d77ed952861dbc877bc9f15d9358da8cacf958b3acb6a0cf155adeed26af33e36e09a4a7e57c172d32fccd569aa3efe5e8d62cc749d66a73a24328c5faa9b33c65fbce90b4cff4c17127835884b74295fa60ddb8b93d68a6d54c55b385c68ac93adb3bde5962304f14a97254115bf19a62311cd7d95f128bce0c74273d707b8f4117e186ea180162511ec72dae56bbb9a8556c15e22c8a17b496c38d80158554768b7bd548f921b399e331951fa289abed5565f9329439c1692a74365155bd4a5435130df3058cac77c8115138b213346b15d1db77b12938fdc42fe1602a2d6037b839172ecd1ba5b48d984798de035476b551ef686f042ba4e59e4c75d4144abe4f47863c384e7850cedaad321ecbd3b570e1b62f3e1f83ee128992e1083dcdcf1999d80480bb215a98833643129e06f7414ced39a97e43c7bf0ddd06dc832dc01e0ec430c17830ef81548fc2bdcfceb7fdd2c0b9fe881614b9f1b895e1776ab4ea9dc34d85d0768fd3aee34e83fc2b68650c51d587a46494174924aa82157bd88087d29d4408480d92fb192a92d95f195380fb59e414b87d86c42314e4eb8867b08058edffb17797f403e42cbeedaa6a8072bd3904872148d6b78b0fc984fb71b27136c666dc2f1180da24feb7f6d9f02b5dd7056d0c4fb39f1ae83c3d494b8ce0a5881ea72a57e5820cf165246dd0a3ee35df85494ed700a416e5dca0393461b0d7117aedba099f049a13b05729b97d04236678bc0649d9697ddd4c42abb3a6116d5856a04fca96fdbbf89b4d3a56b8e088dd9e9484c792e4212078b3b430850c8e301983d0caee00f4b44044b543f768dc9eb2c7123faa817cb3989846a74d905059de768603e006168410706d24640d9e4979ee54e5d16dc0d59382666b340c0df2ceedb4d660626de4c79a68fd520447d0a907b7ab8b3557f6c3ddce3f5be8e335cb4ea686e001de49db567ae6e945683a9555a586c3eda789aab7882786a65ecb2069539ccabb2ac8e60163e72c8e8a4a95d8f2ab3c85a817947a4638f1d2b247ef07d05e6d7accc93ef7f7f1a1f8f687b4a8bfdfeea90f8d06ea78e45b1fc47ed8a6fde7ba32393688654c2689c7aa0aa5b4ae2334143beb686da17def9112176c04687e12ebbbb68f5f7617c978ede40a80d84c8fc6de1c22dca9d09239d45bd3ba3939552b2cbaff7c072ae5d6fcf79f1dae75b08d4d6989558f73933fef19d6013f620e852faed1646cfb172e477f98fef975156998f88d4d3d3c3dfee5a2ca340faf7e54a404e832885eac81f9469b4d307c956e4073c04bc7281c60c978912237a62ce0c41ab393ac863d2ea89c345365bb3fd2ba742a52c12ed18608b5bf65cb355a72d0f60da7e2f08d92f73453c4cee8b313dfd54bfc7c3b67b360278e9d20ff3d379ed2a96ed9608c72cd0c2c04bf4ee5319ee0ad2a805fa12251e387662057d3f28d3c4bf495e364cdddfd8260c745bd72be48ff0d61bdd9fafd707081e3bfa30e3839a35f4792a94c68178579531c1d2cd4f8f3d8ab03f86e010b8c34d8bece9cb744409099516045d17c00f8913ade6b10085b38b168dbbde877e459274e7a4aa0fdc0b20f0c77b7a567d5dc4a19cc8b637cf07d18130c85869d1fe7c89072d1613445c8a4f51cc6db84364efca1949f751cb79c630d6b3bb113c96c171f7c892281b8758fbe90f9ff7c40a362e228a9935db3f93af9178d888713ba5645c15657cae49777253b6fd082a3144b9da31b486479741217fd9a84c621089b2f4b21f7a670b3facf40af840a2e4648ab34952d62b078ad35486fa7995bd28aa04fc37a793727116aa4095ce7392dede4447b7b38f3d41b1b89c399fe67d6fd9201e83aa44a63f48d4c63459248622d20454c25cdb3e99838655b93581e55d7c197eaf613f0ebca4dfceef6b6b44b14c667dd29be2fb974f47124c3aa23fde04c6c17a2986ea75f3a3085c78d2c937c5b62b536096a622ffe9d89cf126b3e5a5c048741f3dc6795e18cf96a911df833585751ed84fdf33ab4e7147d853e6f8851ccc05a7499bfc749e46832503178e1c8adc9f2abd747e822fe8012d67d80067068c11ff452285e0c20850d306cae5a4ee41821d3b52320119ab7b3c4c9f1471f309601d2bf98f7e01f135284309d8b95b8f237db162f0928162c66ed758bf9b0e0f55dfeea63f10cdcecc08eca720937a5ccf856e2f1acbf1c4c04634857157289dfd6c4a90b00050069703667726500008bd43069616b57e31ece3b8d4a24aa3267bf5cdea4bdf236caa33d714a6b6f4dd17e1dd4a2e8b9f51a74b2c49dd9c24f22460aeb439dbe2a60a1a5cf6539352df6380f105320699befd968b2f4d84a06a1548bbf5a7889d88035cb876b8d508e05f6c5f6b602f40e962e1497449af9b8917d7ed0aa66bddcc9b5ad4a28a306ccdf17a958c65c124ec6b35ee65460daa4e7e8b3c799d2fccbd548e2d93201d7affc2c084e9da23e0f8e93acbd17000000"], 0x114c}}, 0x0) 03:38:22 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x37030000}, 0x0) 03:38:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1000000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2941e, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 808.945179][ T12] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 808.974728][ T8933] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 809.039391][ T8933] 8021q: adding VLAN 0 to HW filter on device bond244 [ 809.104021][ T8958] bond244: (slave bridge414): making interface the new active one [ 809.117972][ T8958] bond244: (slave bridge414): Enslaving as an active interface with an up link [ 809.135192][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): bond244: link becomes ready [ 809.157403][ T8933] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 809.189579][ T8958] bond244: (slave bridge415): Enslaving as an active interface with a down link [ 809.195157][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 809.330633][ T12] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 809.338882][ T12] usb 1-1: config 0 has no interface number 0 [ 809.353816][ T12] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 809.375299][ T12] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 809.398057][ T12] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 809.416439][ T12] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 809.426509][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.439947][ T12] usb 1-1: config 0 descriptor?? [ 809.465339][ T8915] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 809.472208][ T8915] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 809.711049][ T8915] FAULT_INJECTION: forcing a failure. [ 809.711049][ T8915] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 809.724309][ T8915] CPU: 0 PID: 8915 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 809.732896][ T8915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 809.742951][ T8915] Call Trace: [ 809.746228][ T8915] dump_stack+0x18f/0x20d [ 809.750542][ T8915] should_fail.cold+0x5/0x14 [ 809.755117][ T8915] __alloc_pages_nodemask+0x1a3/0x930 [ 809.760473][ T8915] ? trace_hardirqs_on+0x5f/0x220 [ 809.765479][ T8915] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 809.772216][ T8915] ? fs_reclaim_release+0xa/0x20 [ 809.777148][ T8915] cache_grow_begin+0x8c/0xb20 [ 809.781894][ T8915] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 809.787343][ T8915] cache_alloc_refill+0x27b/0x340 [ 809.792367][ T8915] ? lockdep_hardirqs_off+0x66/0xa0 [ 809.797547][ T8915] kmem_cache_alloc+0x38e/0x3b0 [ 809.802380][ T8915] getname_flags.part.0+0x50/0x4f0 [ 809.807474][ T8915] getname+0x8e/0xd0 [ 809.811351][ T8915] do_sys_openat2+0xf7/0x3b0 [ 809.815922][ T8915] ? build_open_flags+0x650/0x650 [ 809.820925][ T8915] ? clockevents_program_event+0x12b/0x350 [ 809.826714][ T8915] ? hrtimer_interrupt+0x6ea/0x930 [ 809.831804][ T8915] __x64_sys_openat+0x13f/0x1f0 [ 809.836631][ T8915] ? __ia32_sys_open+0x1c0/0x1c0 [ 809.841545][ T8915] ? sched_clock_cpu+0x18/0x1b0 [ 809.846388][ T8915] ? lock_is_held_type+0xb0/0xe0 [ 809.851331][ T8915] ? do_syscall_64+0x1c/0xe0 [ 809.855922][ T8915] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 809.861884][ T8915] do_syscall_64+0x60/0xe0 [ 809.866281][ T8915] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 809.872154][ T8915] RIP: 0033:0x45cba9 [ 809.876023][ T8915] Code: Bad RIP value. [ 809.880071][ T8915] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 809.888462][ T8915] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 809.896416][ T8915] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 809.904369][ T8915] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 809.912320][ T8915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 809.920269][ T8915] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 [ 809.977163][ T3182] usb 1-1: USB disconnect, device number 94 03:38:24 executing program 0 (fault-call:2 fault-nth:2): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:38:24 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00') 03:38:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1416675, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:24 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x3f000000}, 0x0) 03:38:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2941f, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:24 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040)={0x58ef, 0x4, 0x1ff, 0x2, 0x8, 0x7, 0x7f, 0xff}, &(0x7f00000000c0)={0x6, 0x1f, 0x7fff, 0x101, 0x80000000, 0x401, 0x2, 0xfffffffffffffff8}, &(0x7f0000000100)={0x5, 0x80000001, 0x1, 0x3, 0x5, 0x8, 0x9, 0x8}, &(0x7f0000000280)={r2, r3+60000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x2]}, 0x8}) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x4880) sendmmsg$inet(r1, &(0x7f0000001880)=[{{&(0x7f0000000340)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000380)="fb4e764923de9697fe63c5b23eddee77e783371944f77b6753d1596aaaad130c9549f5b3d9dccbf0ef2f4a1f7349c4952d09900f8e4d47184a1fca2e52a9293ed294fa36a07cc2da1b98a5c9e3b01bdad836eef1406c9affcb249d1970eb6db9df0ed67aa664b2067814af858a0b431b7800c4a701213d5613d35440c40d138131175a132dd7affaaacfbccaccf491223b26696ec59ff0f8e3", 0x99}, {&(0x7f0000000440)="24f3a9f0ea044a70f87e4184d48e9e6795cb562d8b0c38c28c78a5b643756a19cf2af50bbfecca6c6fe90e84e9a05b963219e433e8fe34d3211cab7042aa2f2f", 0x40}, {&(0x7f0000000480)="969320c2453d1ecde59fe4efb4ea00b212bcd1263ebe41efd374992cc9c39647a0bc4e64604fb4e6ac931de3f83dc2b3223acd245941109669219a02a40b33cb4d16b6c3f4375788c8c6b184f7fe0562e30f2ded0fcfca2a97248024fbdbec134c59dbe2152bd0c2fe7bc651d34a9b6b3f0e20e0fe77922c535d4b0d457a1a6f5f93c23f3df7713a5a17cf5fa39b002f5232693d0b5d8a8ad0dfac90b875", 0x9e}, {&(0x7f0000000540)="c1762d60b240e92a11c289b3f028e4a6a8cb25fbe8c0a01c6dc4cc5825ee89ed46ad29bd14d289ce388e3ea44f3c58ef3de2593197369c0d5f7864453b9c14acba1d40462848adf1e13446e19fe8e88c510765c861a19342a40f7c23bc6adc36e151296125bd2870d8fc1fba92b72206aaf54be611957b05efe351bef491d2f959afdb62364beef3ae4e4f7443e983ec277a723e05de8e50590751a955069990ddb2554e1e7b61383fbbfb04c706fdbdf8e4ce794783573ad4554f9bfc37d0fb0035dbe26361959ec60a43ecdbe96eb060fc5d3e25ae1ea9596fa924d52534668e846a04dd0d2a2ab622fe4b23689257e2cbdb843572d88d2b713a0a51af0dc49c271d16e8287a7a002acb030239fe5c4e5285bbadfa593449dcf1db5c1a67b63ba201c578aa9abbb4128eaf0940c96123349f692aaed155f3d6a8af90bdf638fd135dff96493d15210efdee517eb88dad7fc54168659ec0c535750aeeb2691aa3ab1b939f119b3d1160d948174e8c185d4ac0ee0015b60c5e353c43ae3ba80c0bf4664364531a50948e4be7894abe5e05927268dadc02326819671e9f38f543d8f1e7e128136277f0b49d84c23a3a828f1186766ac9eca4e36eea8ea4659c90ddba290c981568f71fc3093a9caf4a8ccd27749a2453350a38f2d3068223892bfec55cacf30b5ab1c63c68e6e789486f33b3deac1473774bc4b9c60a7feeb5a90da6c012dbbd3b9f3faf683810b4921cf28936ece113c09ffa2526a7f0158657383167b18c70f8d4fb9ab03c77c75976d61ca17858a5fdf707c25808ca78a05c23637297da6408e824537943b0bf0f28a13a1eba89201a1dc1b2c7725780c37903dadf7781518fb0834ee86633d25812e6c8a70353402e0802deb9ff37a03bd3c68607d4c08ae4ef9a9dda8c80072be5ef6426fd7a016179c9f8d387839df7787c46d89ab087cee367affa070687c4464b3eba4983bc5607876cd75aee9f701bd3b872ab34933ac5a002297d45c66b478628a03ba2141a57da7081fdcb6ea8a43ba889aae51346e359876617f0060fb1a67003628a815bb4b918e5bded801a25228801fc2775abb606c0bd8d107cacae8ddb20089632f80ff58f4b656fe0af9352cd6c9a4e77b186a93e1101905fc6e654956f8d5faa195144a4bf8662ac2ee8fb41207e8682d0b41a060e7c715dd08228ffe7a70ab3f1335a5f5dcbf2bd84ab50be5107e3049a1b478db5c9ac55dd11cb89968d71da85d98d742a45809a8994b5e78e20aeedfce31b908ec23f00025f0865ef328391dfd8c5434c6a49773f28f84c64bc47b8178387c6e724053b2ba4f7418740ff4f489319ddb9e9b970a268f266d1595b1ff9686861b5efa97bb7cd6694a773c1ea9f99fadd46d7b9edd3773ced6c058fbc64aee626570a4889cdad36ad106387e845affdc1a6054fe549e7a38e522c76edf94b68579ca8f82703aa37a8ff6cc6141a8f25f14e62f3ac0d8969b7e8b81dfe2917d3fec9e714ba6c7dbbc66790ed8382ea787d4594251a8ac4acb0416398ba5cdf8dac8ba60faa1b619bd9ed35f1fecd946ee0108d6a2606dd28e811c265455331e2c3976d7f85da763587ab331aa4a395406e34a6df32ad1542333a22fe6aaf80743eb0a10dda1160b05660e7c6ace504a67499583bdf5d26c37afdca968b7a042b3f86fd2a59a0e1631706eedd62d5d9354e393ea5c9b52f7fd7b909928f00cbe20143ecbc12828831996a249a8a28fc462160ed90e54e7e536e6867fea5d93a37d469c6dee4d3c2db62ebe707f0352ea7b9addba83f0249f40e48c1eb55cbad5ef8c8ad8d132b95265dd7d6e8ccf481b840b28a486843d762a95433ff01d9ba914e6f93295ef494b20af38bcc3756048855fc9455bc5ea82644714da43467dc71df94359a34cb3135b013cce4f36e15f8736a78272acf3eea9cd515ab9db4d4552c6e200a17d594b948f0a8f55d5548c02d28074d2f192c44a121f9aacc2a4dd35170c505a51901aab2c09acd17bbf42533c4124d3bc20ca1d0d4e7699660ff0ab4f00ab60b628525aa22077d88bfd463880a79baae05f09fb51feaf3777d1d66eb18e59482da80b816652ae418688d3f0c47c48745a63770bfba1812966d448dd5e4a0ed934557e443a0ebf9dd7d9f7d843fb33e1e0dcc0e401f339f1e74bdf48edeb316d4e4fa8b7b4f481033e9e48a17e1821d307b1efbf7b632f5e2345de26e305b060036a96b091d151e9e9ad497d7262881fcd630811e10824731e63c2ae060441e236a945537a8f835eae3649d17e5e31ae41c6ebf87dc89badd3fd76c941b629f2ad406e6e9099b29c52dd9c6a38e61cd18a03e4ca1010da61f75294789153cc1baacd4f3ac320f7d2cb7a3cb19e595df8f69c6b2ec15595429f749a0b0dad4bd699d5ee58f06c6e5372bcfe01a415b31bce98b6d376d874dd1b9a298faf589ff94253b774be83a8e970dbd8b9b91f71842971db4f33863959499dccbefad559f98a6568dd0a780c4f89a13b8262e207f4ab908d2e10d367774e2a8de04816a0ddeff71e3152ffc9575f8a90c2dcc837ccc0364d14485e2d711fecbe6cd049e949fb8adb8661c50bd1ede7b7e435bc140557e8a18d4711bbbf8d9d1a9019e050d54beb1926c0617737d5f8df6d8bc0884216d5ea39ef8934e0197415d66c573f7467942cb965ec455af5ff8181e1f63cbe30137b03b1d089d037fbe283537b7c0c1ac52483f2ccd45fd24fe7e431e6af91f62d21965f9d643e50928835f4e80c9aac19f76c5b8fa4dc23fefbc0a2901fe8ca787fabba4b1649a0c80fb4e3b4c720651a2d45edf63e5a21a79d0c00143b819c169dc99459306b9e4e10ffc61969c324441cf748e067b5088be109002fb9062a4482762b8111625f7a4c7a831e42ce2d0deb3f4e88bbe37494531e97e3b1913ce9f2703ff227413935f9424126106564cbc7a376f6afa409e3dd82e928be33bd7286d727e2ee72b626c5063e3495485ac62cdb9c06af938975655e9b4dc231b20cdf2b19fa536e73b531bd58bd3dd691bf8daf2e609c637e621593ee8e2a37364753a82c953a68a0c4166497a2664028c6d40ce503ba737d817964e5eb8b496f12e7158c274fe2c394fdede883c8e64b3b809c25d2fc02749a64068436964e5198027534f73d88c9aac84d86dc82cd3938e710357ce769173d22389b0086412459d43d56b86835bcc6103e5fdc2fd65eeb5150ea9c2c0be5cb0faf591402606f8f62ee5cde230739a286fea64bf642dc089d72d289d4941f4d8bf090362a1156d3d15217c365d78d9e14027737dd03e4e46ea0f3d8dba81d01efb251c2ba39d7401b0b39b04fe931d6a2d868332238a9165f914f24326813e1a937e8462940d8d7e43dbf038dfdbe1755bd653c2bb228c04e222ae351b2e914780e859079fe0cded3c60d5be1ac503ccef5ddd7d825b201cdb56d3877185058a84c10aba7be28ca541b1e90b338009811835536b0d7348849b777036f25db930279ae70c5dfbc356560255ac305869a70d06db3aafde28e4178518a4223784b2cba43c39ab2d0a43c98e0cf4d2f6509c085a4170ca11658ddd70a2b183a7594aa52150f6e26037071a0fe5eda7c9e7e00f49755aebe7a56fbce6df1aa56f63563398ec624c0cb5bb447bdf8c3755c2ef26fb557669f2b8419bf58461d877f1aaa1426a2c9792a72be02fa244479f62e01a5cbcb85de7df44763eb9175587522dfb2f811494c7d2b9c7b12509681e2606c3c463b04564ec41732c66ae6f2821125fd9126cd589c1b307e2452248ae8d256c93495f5eec9d4824accacffeb902dcfb82e8c0b859848d8f5a85bab2d4f256ee670a5e3f27445a5e011ce244cad75f6bcd1277862e403b363b1da71e2db0d505b26ec47579f39d493d0b1ce41779c3e6f6e87fae14536267e1d8bf2e2e78ebfb45caa03c389b4a111ac9b32baa0ee6ea6613f606bc3fd6e69fe5a0ddbcf638292d5ede5b951941ca773ea614f170284853b2da400467ccc20b5ab7a73f1be72ea1611835df9b26bf9c4a551dab28e579d603ba88ae90fb17077b07bca5d9f58f9f0568918547bc3a89f26202a44f5dd5ac9de2bf55de0d294421e98aefb0c2185fefe6425451a9e7ef4f6e4b5cf7e610c72704c6b2a20262ef62c32749096239d257e3aa24d0acc34570ffa319cd884b88beedfdd2ed4dfbc0b0c9631b242f627eb40c4b4abf7da1829dac3cf0ef85d572ca9e6ccda688354e3afbbe26403336be8fcd991333235de47138d6af7431be5eb90da5436630fe1efb26e1e8e36920c3736bdacf312fb83a684a4534b9fdac05ff4582c8dedcfcfb26fd34352c261c3ed121694f41db4d57d6d7fd97ec1dd3103abcda1eec70441f246ffe7d987d2e248e62b868e97e52dab07cee2cf2e78b6bdb0d463f2265b4cb901c4c6d483040bb47cecbed3c6d6cb9b9feaf16ef7e16e095e7c9c98d61cb2076992be9845fa64a0688c964c49bf4095ec659ed45e35a04c23bf3f7109625c67c87c40d4c1de1663d90f77ef43ef7e7513b3b19f3aba4a4feee755250b0dc6589b79e06f9e7e507411bd4dc17638cb5d70550b6491f5fe49248d31d03862fc78b05cb63f7b24a38230f03580f19b49bfda924df399f0c482a65575bc63b05a206b9e664d5e1c407bd18f9428b8addc8eef9e0e4c4dfeb09842bc55e5cc0893ef51a1f378aa765b7643f6dc7223cde19de6ac80c9497f42eb6584faa8a77166bfef404ae6df2cf41d5b035cebc35ad503c088677407e7316a33c770cca50602a99dfaa6717ed2c550b1746e18a347f7e7fbcc65a54339653b14e8a0bc3220d525a97bba54e18ac74bff17de20a57d90ac68b8b9b11cdb25824478d303186a74ec0060675d47485bb1cf81a8e1dcf326f1c9a32ecf3c6f4e520c53f877a0b4572ee0de0140e834aaa0c8f74bd0f8a3acec88b5bee63ce9382ea0071b2ea41a7ad9f61f50078617e4ecbd49d25c6eb757e36d762c249087a713deac2a55b7108175f24f22e417371642cd58a28088a8075a2aad2b4ed216983f4baebe690874b8d9152150413275d9f15cf7584dcfe4226ea310b0ebc601a3056d10d134f588b18159c91083fca5684fb506b83cde75c88a3d5a479df2b50894e7bf49bffba54a8761ef06ae16142e7817e0ba83b838ac875de136464c4f32b9b8ee024bd872fa67cb4f1f381707168741a9dcbe61179e329572ea8c32129e731990f69524f77fd79c40924193ff140bbddaf77af836157cbaf32f85c60e061c962383df3d29bc28b69077b1c33813cb3ecb37bf4e7c5ff719e24d0932463e092d559011edaaab168f474e04d09199a0bb364354ede4a0674f84e3be4d3654189beccaebbecb2f205fae5afdf2b6fb7023468b7e3525859529b3de6dae6177053a227dad8e4f0092d41b0cc9cd229aa9ec99702491d3c2293e2085e24730bf0e8e9ec790a0bc6ce2cb59503c107983d3f592a1c2d04f489c2397ccaa84c1380e953ab32bed38a63418a397a5ba3330da147be8026dc8343a25702b549cc6bc61247dd6868c5c280e295169e0bca7b576a085503619ca10e1044c0858a759f27c0c4c52843fd7c78d82e069b9a9262ff986667cb9f009fb306003b4aa38d56957c32e97ac70faefb3775164ae588b6eb780f43c27273511a7e52c35caeb387338a3ef7779d01391f962d4372e9409923d10fb86459f7e5703cf39085adff613de199e496bcf52d0b0c7a6e23b06a8f8239a44ce97dee5bcf8c38e6d975d410907d41bce3c229", 0x1000}, {&(0x7f0000001540)="33b04b6a24912400c75f366513b2b894892f139a2f5513ab0f7c8143f1cadb8388e281c0a3c2d6c5860eb365808afca58f77de0b3c78d62702fe858e351b54aeb568be3d1ab03f56747bb4bc3f492c0d143e269cc52627c88d2d4f0771691595b85b16dca76c81", 0x67}, {&(0x7f00000015c0)="b966abecacb1eda4d2ff26fad229781ca55becb5b6aaa24d0050e0f99a772b479210a085204d7ca8e5c7ea1cb07b8c026785f3a915d2f76a1dabe574d71388da25fe52d824da4bd97b0ed9b4517a5833014aa219cdcf6f4545cd1f1bfb4e270ade8917e56377c5d506931228cabce1780bb3d0f55f354518a9c59e3f1d1b9110941a1e4df8ba3f72cb8390cb58e471e240bc19b0e63893b3030cf710c47c31bcb1ca882836e58b034370ce0523fa59c97d1110c41bad09697c1cb4ca60c61045ca608ef73ed4d2c4c75425", 0xcb}, {&(0x7f00000016c0)="9134ca9f18728ff68b3e570a7af37b0a90b9e2d7e68f6eefeb9c42a4558a03e27e4e5498ac48766dbde0daf8c570c5f15f8f776c4493fdf79e178089e797556a8202d5c42c79186246f065d997633a2b539449aa4f7677f0276cf64c6361e3ee235e06659a03c7ab86f70389faf8bef8390c294309364c6cd4acb4e917ab871ff0f043eac0d2bab9f0eae5458a311f5ad05b959e", 0x94}, {&(0x7f0000001780)="1290f5d0ba6c47dcc013504edc0690bd917d607099f612c03124ac170b5284fb5f708fbb361b34bc4f04", 0x2a}], 0x8, &(0x7f0000001840)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x30}}], 0x1, 0x4000000) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x4}]}}]}, 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001a80)={'ip6tnl0\x00', &(0x7f0000001a00)={'syztnl2\x00', 0x0, 0x2f, 0x80, 0x1f, 0x1, 0x48, @local, @private0={0xfc, 0x0, [], 0x1}, 0x700, 0x1, 0xffff, 0x1f}}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x4}]}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000018c0)={'team0\x00', r8}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000001980)={'syztnl2\x00', &(0x7f0000001900)={'syztnl2\x00', r9, 0x4, 0xff, 0x1, 0x2, 0x48, @mcast1, @loopback, 0x40, 0x7800, 0x1, 0xfa}}) r10 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r10, 0x0) [ 810.551444][ T9032] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x2000000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 810.603979][ T9032] 8021q: adding VLAN 0 to HW filter on device bond245 [ 810.631309][ T9064] bond245: (slave bridge416): making interface the new active one [ 810.642495][ T9064] bond245: (slave bridge416): Enslaving as an active interface with an up link 03:38:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x3000000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 810.655938][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): bond245: link becomes ready [ 810.672624][ T9032] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x4000000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:24 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=0x0, @ANYBLOB="7ff3806daf02cb4fdbee75cc340aab0bb9e663352d0d48cee0269c5c4d891d087d4486f9cfab04995db19d7bbf3f9a3d30986c8f68a3c300ea5934de5ebfaa6380f162"], 0x3c}}, 0x0) [ 810.756187][ T9064] bond245: (slave bridge417): Enslaving as an active interface with a down link 03:38:24 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) 03:38:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29420, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 810.845068][ T3182] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 810.977497][ T9098] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 811.111363][ T9098] 8021q: adding VLAN 0 to HW filter on device bond246 [ 811.118373][ T3182] usb 1-1: Using ep0 maxpacket: 8 [ 811.140284][ T9102] bond246: (slave bridge418): making interface the new active one [ 811.152687][ T9102] bond246: (slave bridge418): Enslaving as an active interface with an up link [ 811.163778][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond246: link becomes ready [ 811.176376][ T9098] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 811.203799][ T9102] bond246: (slave bridge419): Enslaving as an active interface with a down link [ 811.235217][ T3182] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 811.243234][ T3182] usb 1-1: config 0 has no interface number 0 [ 811.260565][ T3182] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 811.311456][ T3182] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 811.324187][ T3182] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 811.348066][ T3182] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 811.361322][ T3182] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.379283][ T3182] usb 1-1: config 0 descriptor?? [ 811.395431][ T9039] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 811.402383][ T9039] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 811.686247][ T9039] FAULT_INJECTION: forcing a failure. [ 811.686247][ T9039] name failslab, interval 1, probability 0, space 0, times 0 [ 811.718787][ T9039] CPU: 0 PID: 9039 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 811.727394][ T9039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 811.737429][ T9039] Call Trace: [ 811.740705][ T9039] dump_stack+0x18f/0x20d [ 811.745035][ T9039] should_fail.cold+0x5/0x14 [ 811.749633][ T9039] should_failslab+0x5/0xf [ 811.754045][ T9039] kmem_cache_alloc+0x2a9/0x3b0 [ 811.758897][ T9039] __alloc_file+0x21/0x350 [ 811.763298][ T9039] alloc_empty_file+0x6d/0x170 [ 811.768043][ T9039] path_openat+0xe3/0x2750 [ 811.772438][ T9039] ? mark_held_locks+0x9f/0xe0 [ 811.777214][ T9039] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 811.783347][ T9039] ? trace_hardirqs_on+0x5f/0x220 [ 811.788353][ T9039] ? path_lookupat+0x830/0x830 [ 811.793094][ T9039] ? perf_trace_lock+0xeb/0x4a0 [ 811.797933][ T9039] ? __lockdep_free_key_range+0x110/0x110 [ 811.803627][ T9039] ? expand_files+0x4ee/0x890 [ 811.808284][ T9039] do_filp_open+0x17e/0x3c0 [ 811.812764][ T9039] ? may_open_dev+0xf0/0xf0 [ 811.817243][ T9039] ? __alloc_fd+0x28d/0x600 [ 811.821724][ T9039] ? lock_downgrade+0x820/0x820 [ 811.826558][ T9039] ? do_raw_spin_lock+0x120/0x2b0 [ 811.831566][ T9039] ? rwlock_bug.part.0+0x90/0x90 [ 811.836501][ T9039] ? _raw_spin_unlock+0x24/0x40 [ 811.841444][ T9039] ? __alloc_fd+0x28d/0x600 [ 811.845931][ T9039] do_sys_openat2+0x16f/0x3b0 [ 811.850592][ T9039] ? build_open_flags+0x650/0x650 [ 811.855602][ T9039] ? clockevents_program_event+0x12b/0x350 [ 811.861407][ T9039] ? hrtimer_interrupt+0x6ea/0x930 [ 811.866499][ T9039] __x64_sys_openat+0x13f/0x1f0 [ 811.871325][ T9039] ? __ia32_sys_open+0x1c0/0x1c0 [ 811.876240][ T9039] ? sched_clock_cpu+0x18/0x1b0 [ 811.881069][ T9039] ? lock_is_held_type+0xb0/0xe0 [ 811.885991][ T9039] ? do_syscall_64+0x1c/0xe0 [ 811.890558][ T9039] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 811.896519][ T9039] do_syscall_64+0x60/0xe0 [ 811.900918][ T9039] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 811.906820][ T9039] RIP: 0033:0x45cba9 [ 811.910698][ T9039] Code: Bad RIP value. [ 811.914749][ T9039] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 811.923137][ T9039] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 811.931091][ T9039] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 811.939040][ T9039] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 811.947004][ T9039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 811.954961][ T9039] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 [ 811.973268][ T12] usb 1-1: USB disconnect, device number 95 03:38:26 executing program 0 (fault-call:2 fault-nth:3): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:38:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x4fb0000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:26 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}]}}}]}, 0x3c}}, 0x40081) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x90, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000080}, 0x90) 03:38:26 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) 03:38:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29421, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:26 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x1, 0xaa, 0x0, 0x100000000000000b, 0x0, 0x2}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r3 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r3, 0x0) [ 812.533253][ T9192] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x5000000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:26 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c0002800800010054cc5f659e6a6aa2d5093705ecd60e97ba71b092c1da0069c494e4e056f6751a8629696a4fec07e5f76c9f9170d9992d00d09b3e", @ANYRESHEX=r0, @ANYBLOB], 0x3c}}, 0x0) [ 812.648037][ T9192] 8021q: adding VLAN 0 to HW filter on device bond247 03:38:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x6000000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 812.738010][ T9220] bond247: (slave bridge420): making interface the new active one [ 812.771372][ T9220] bond247: (slave bridge420): Enslaving as an active interface with an up link [ 812.806032][ T2593] IPv6: ADDRCONF(NETDEV_CHANGE): bond247: link becomes ready [ 812.834925][ T9192] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:26 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x65580000}, 0x0) [ 812.873742][ T9220] bond247: (slave bridge421): Enslaving as an active interface with a down link [ 812.877354][ T12] usb 1-1: new high-speed USB device number 96 using dummy_hcd 03:38:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29422, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x7000000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 813.139036][ T9262] 8021q: adding VLAN 0 to HW filter on device bond248 [ 813.162212][ T9283] bond248: (slave bridge422): making interface the new active one [ 813.173365][ T9283] bond248: (slave bridge422): Enslaving as an active interface with an up link [ 813.183554][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 813.193387][ T2593] IPv6: ADDRCONF(NETDEV_CHANGE): bond248: link becomes ready [ 813.237817][ T9283] bond248: (slave bridge423): Enslaving as an active interface with a down link [ 813.305001][ T12] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 813.316439][ T12] usb 1-1: config 0 has no interface number 0 [ 813.322610][ T12] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 813.354818][ T12] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 813.365910][ T12] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 813.376779][ T12] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 813.386847][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.399033][ T12] usb 1-1: config 0 descriptor?? [ 813.415238][ T9217] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 813.422118][ T9217] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 813.664330][ T9217] FAULT_INJECTION: forcing a failure. [ 813.664330][ T9217] name failslab, interval 1, probability 0, space 0, times 0 [ 813.692647][ T9217] CPU: 0 PID: 9217 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 813.701266][ T9217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 813.711333][ T9217] Call Trace: [ 813.714632][ T9217] dump_stack+0x18f/0x20d [ 813.718975][ T9217] should_fail.cold+0x5/0x14 [ 813.723576][ T9217] ? tomoyo_realpath_from_path+0xc3/0x620 [ 813.729307][ T9217] should_failslab+0x5/0xf [ 813.733734][ T9217] __kmalloc+0x27d/0x340 [ 813.737985][ T9217] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 813.743542][ T9217] tomoyo_realpath_from_path+0xc3/0x620 [ 813.749090][ T9217] tomoyo_check_open_permission+0x272/0x380 [ 813.754961][ T9217] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 813.760590][ T9217] ? lock_downgrade+0x820/0x820 [ 813.765415][ T9217] ? do_raw_spin_lock+0x120/0x2b0 [ 813.770416][ T9217] tomoyo_file_open+0xa3/0xd0 [ 813.775136][ T9217] security_file_open+0x52/0x3f0 [ 813.780060][ T9217] do_dentry_open+0x3a0/0x1290 [ 813.784806][ T9217] path_openat+0x1bb9/0x2750 [ 813.789375][ T9217] ? path_lookupat+0x830/0x830 [ 813.794118][ T9217] ? __lockdep_free_key_range+0x110/0x110 [ 813.799816][ T9217] ? lock_is_held_type+0xb0/0xe0 [ 813.804735][ T9217] do_filp_open+0x17e/0x3c0 [ 813.809215][ T9217] ? may_open_dev+0xf0/0xf0 [ 813.813697][ T9217] ? do_raw_spin_lock+0x120/0x2b0 [ 813.818697][ T9217] ? rwlock_bug.part.0+0x90/0x90 [ 813.823632][ T9217] ? _raw_spin_unlock+0x24/0x40 [ 813.828456][ T9217] ? __alloc_fd+0x28d/0x600 [ 813.832940][ T9217] do_sys_openat2+0x16f/0x3b0 [ 813.837643][ T9217] ? build_open_flags+0x650/0x650 [ 813.842645][ T9217] ? __mutex_unlock_slowpath+0xe2/0x610 [ 813.848183][ T9217] ? wait_for_completion+0x260/0x260 [ 813.853450][ T9217] __x64_sys_openat+0x13f/0x1f0 [ 813.858293][ T9217] ? __ia32_sys_open+0x1c0/0x1c0 [ 813.864280][ T9217] ? ksys_write+0x1a5/0x250 [ 813.868766][ T9217] ? lock_is_held_type+0xb0/0xe0 [ 813.873682][ T9217] ? do_syscall_64+0x1c/0xe0 [ 813.878249][ T9217] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 813.884204][ T9217] do_syscall_64+0x60/0xe0 [ 813.888597][ T9217] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 813.894462][ T9217] RIP: 0033:0x45cba9 [ 813.898326][ T9217] Code: Bad RIP value. [ 813.902365][ T9217] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 813.910748][ T9217] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 813.918694][ T9217] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 813.926643][ T9217] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 813.934748][ T9217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 813.942694][ T9217] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 [ 813.964085][ T9217] ERROR: Out of memory at tomoyo_realpath_from_path. [ 814.008236][ T3182] usb 1-1: USB disconnect, device number 96 03:38:28 executing program 0 (fault-call:2 fault-nth:4): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:38:28 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') getpeername$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10) fcntl$getown(r1, 0x9) 03:38:28 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x81000000}, 0x0) 03:38:28 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x0) accept4$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14, 0x80800) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r1+30000000}, 0x0) r4 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r4, 0x0) 03:38:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x8000000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29423, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x9000000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 814.577221][ T9356] validate_nla: 2 callbacks suppressed [ 814.577232][ T9356] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 814.665780][ T9356] 8021q: adding VLAN 0 to HW filter on device bond249 [ 814.698770][ T9372] bond249: (slave bridge424): making interface the new active one 03:38:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xa000000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xe000000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 814.766421][ T9372] bond249: (slave bridge424): Enslaving as an active interface with an up link [ 814.806158][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): bond249: link becomes ready 03:38:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x10000000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 814.848651][ T9356] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:28 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x88a8ffff}, 0x0) 03:38:28 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) [ 814.894951][ T3182] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 814.959673][ T9372] bond249: (slave bridge425): Enslaving as an active interface with a down link [ 815.164776][ T3182] usb 1-1: Using ep0 maxpacket: 8 [ 815.306791][ T3182] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 815.324661][ T3182] usb 1-1: config 0 has no interface number 0 [ 815.330799][ T3182] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 815.346740][ T3182] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 815.358986][ T3182] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 815.382935][ T3182] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 815.393050][ T3182] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.404517][ T3182] usb 1-1: config 0 descriptor?? [ 815.425771][ T9363] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 815.432837][ T9363] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 815.683889][ T9363] FAULT_INJECTION: forcing a failure. [ 815.683889][ T9363] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 815.697119][ T9363] CPU: 0 PID: 9363 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 815.705693][ T9363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 815.715727][ T9363] Call Trace: [ 815.718995][ T9363] dump_stack+0x18f/0x20d [ 815.723325][ T9363] should_fail.cold+0x5/0x14 [ 815.727898][ T9363] __alloc_pages_nodemask+0x1a3/0x930 [ 815.733247][ T9363] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 815.739986][ T9363] ? kvm_sched_clock_read+0x14/0x40 [ 815.745157][ T9363] ? sched_clock+0x2a/0x40 [ 815.749547][ T9363] ? sched_clock_cpu+0x18/0x1b0 [ 815.754382][ T9363] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 815.760518][ T9363] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 815.766481][ T9363] cache_grow_begin+0x8c/0xb20 [ 815.771223][ T9363] ? tomoyo_realpath_from_path+0xc3/0x620 [ 815.777036][ T9363] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 815.782498][ T9363] cache_alloc_refill+0x27b/0x340 [ 815.787505][ T9363] ? lockdep_hardirqs_off+0x66/0xa0 [ 815.792712][ T9363] ? tomoyo_realpath_from_path+0xc3/0x620 [ 815.798413][ T9363] __kmalloc+0x319/0x340 [ 815.802642][ T9363] tomoyo_realpath_from_path+0xc3/0x620 [ 815.808176][ T9363] tomoyo_check_open_permission+0x272/0x380 [ 815.814047][ T9363] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 815.819679][ T9363] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 815.825646][ T9363] ? trace_hardirqs_on+0x5f/0x220 [ 815.830649][ T9363] ? lockdep_hardirqs_on+0x6a/0xe0 [ 815.835739][ T9363] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 815.841889][ T9363] tomoyo_file_open+0xa3/0xd0 [ 815.846551][ T9363] security_file_open+0x52/0x3f0 [ 815.851469][ T9363] ? do_dentry_open+0x2cc/0x1290 [ 815.856399][ T9363] do_dentry_open+0x3a0/0x1290 [ 815.861150][ T9363] path_openat+0x1bb9/0x2750 [ 815.865724][ T9363] ? path_lookupat+0x830/0x830 [ 815.870472][ T9363] ? __lockdep_free_key_range+0x110/0x110 [ 815.876170][ T9363] ? kvm_sched_clock_read+0x14/0x40 [ 815.881351][ T9363] ? sched_clock+0x2a/0x40 [ 815.885756][ T9363] do_filp_open+0x17e/0x3c0 [ 815.890236][ T9363] ? may_open_dev+0xf0/0xf0 [ 815.894724][ T9363] ? __alloc_fd+0x2d9/0x600 [ 815.899292][ T9363] ? _raw_spin_unlock+0x24/0x40 [ 815.904114][ T9363] ? __alloc_fd+0x28d/0x600 [ 815.908600][ T9363] do_sys_openat2+0x16f/0x3b0 [ 815.913251][ T9363] ? build_open_flags+0x650/0x650 [ 815.918251][ T9363] ? clockevents_program_event+0x12b/0x350 [ 815.924034][ T9363] ? hrtimer_interrupt+0x6ea/0x930 [ 815.929120][ T9363] __x64_sys_openat+0x13f/0x1f0 [ 815.933967][ T9363] ? __ia32_sys_open+0x1c0/0x1c0 [ 815.938877][ T9363] ? sched_clock_cpu+0x18/0x1b0 [ 815.943703][ T9363] ? lock_is_held_type+0xb0/0xe0 [ 815.948616][ T9363] ? do_syscall_64+0x1c/0xe0 [ 815.953181][ T9363] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 815.959137][ T9363] do_syscall_64+0x60/0xe0 [ 815.963529][ T9363] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 815.969393][ T9363] RIP: 0033:0x45cba9 [ 815.973256][ T9363] Code: Bad RIP value. [ 815.977295][ T9363] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 815.985676][ T9363] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 815.993707][ T9363] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 816.001652][ T9363] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 816.009610][ T9363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 816.017556][ T9363] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 [ 816.069212][ T12] usb 1-1: USB disconnect, device number 97 03:38:30 executing program 0 (fault-call:2 fault-nth:5): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:38:30 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = dup(r0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f0000000000)='./file0\x00', 0x6002, 0xe7eeab4c1e43e543) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x4000401) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x7f) r5 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) 03:38:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29424, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x10270000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:30 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 03:38:30 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r3 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r3, 0x0) [ 816.636490][ T9471] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 816.693845][ T9471] 8021q: adding VLAN 0 to HW filter on device bond250 [ 816.730286][ T9517] bond250: (slave bridge426): making interface the new active one 03:38:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x18020000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 816.745008][ T9517] bond250: (slave bridge426): Enslaving as an active interface with an up link [ 816.777049][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): bond250: link becomes ready [ 816.793528][ T9517] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:30 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xd8010000}, 0x0) 03:38:30 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8041) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c1e020010693f9a05311e380700000100040000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) [ 816.853047][ T9525] bond250: (slave bridge427): Enslaving as an active interface with a down link 03:38:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29425, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x20000000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 816.955287][ T3182] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 817.000904][ T9538] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:31 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) [ 817.105803][ T9538] 8021q: adding VLAN 0 to HW filter on device bond251 [ 817.195311][ T9551] bond251: (slave bridge428): making interface the new active one [ 817.238193][ T9551] bond251: (slave bridge428): Enslaving as an active interface with an up link [ 817.244581][ T3182] usb 1-1: Using ep0 maxpacket: 8 [ 817.278113][ T2593] IPv6: ADDRCONF(NETDEV_CHANGE): bond251: link becomes ready [ 817.297574][ T9551] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 817.367550][ T9551] 8021q: adding VLAN 0 to HW filter on device bond252 [ 817.398652][ T3182] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 817.419684][ T3182] usb 1-1: config 0 has no interface number 0 [ 817.443456][ T3182] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 817.460381][ T3182] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 817.471445][ T3182] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 817.504655][ T3182] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 817.513871][ T3182] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.548832][ T3182] usb 1-1: config 0 descriptor?? [ 817.564934][ T9482] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 817.571882][ T9482] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 817.859867][ T9482] FAULT_INJECTION: forcing a failure. [ 817.859867][ T9482] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 817.873102][ T9482] CPU: 0 PID: 9482 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 817.881687][ T9482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.891739][ T9482] Call Trace: [ 817.895026][ T9482] dump_stack+0x18f/0x20d [ 817.899337][ T9482] should_fail.cold+0x5/0x14 [ 817.903903][ T9482] __alloc_pages_nodemask+0x1a3/0x930 [ 817.909258][ T9482] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 817.916003][ T9482] cache_grow_begin+0x8c/0xb20 [ 817.920743][ T9482] ? sched_clock_cpu+0x18/0x1b0 [ 817.925569][ T9482] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 817.931006][ T9482] cache_alloc_refill+0x27b/0x340 [ 817.936007][ T9482] ? lockdep_hardirqs_off+0x66/0xa0 [ 817.941183][ T9482] ? tomoyo_realpath_from_path+0xc3/0x620 [ 817.946876][ T9482] __kmalloc+0x319/0x340 [ 817.951097][ T9482] tomoyo_realpath_from_path+0xc3/0x620 [ 817.956622][ T9482] tomoyo_check_open_permission+0x272/0x380 [ 817.963316][ T9482] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 817.968940][ T9482] ? lockdep_hardirqs_on+0x6a/0xe0 [ 817.974074][ T9482] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 817.980206][ T9482] tomoyo_file_open+0xa3/0xd0 [ 817.984860][ T9482] security_file_open+0x52/0x3f0 [ 817.989776][ T9482] do_dentry_open+0x3a0/0x1290 [ 817.994520][ T9482] path_openat+0x1bb9/0x2750 [ 817.999089][ T9482] ? path_lookupat+0x830/0x830 [ 818.003899][ T9482] ? __lockdep_free_key_range+0x110/0x110 [ 818.009593][ T9482] ? kvm_sched_clock_read+0x14/0x40 [ 818.014772][ T9482] ? sched_clock+0x2a/0x40 [ 818.019166][ T9482] do_filp_open+0x17e/0x3c0 [ 818.023643][ T9482] ? may_open_dev+0xf0/0xf0 [ 818.028133][ T9482] ? _raw_spin_unlock+0x24/0x40 [ 818.033000][ T9482] ? __alloc_fd+0x28d/0x600 [ 818.037488][ T9482] do_sys_openat2+0x16f/0x3b0 [ 818.042155][ T9482] ? build_open_flags+0x650/0x650 [ 818.047154][ T9482] ? __x64_sys_openat+0x19a/0x1f0 [ 818.052149][ T9482] ? __x64_sys_openat+0x11d/0x1f0 [ 818.057155][ T9482] __x64_sys_openat+0x13f/0x1f0 [ 818.061978][ T9482] ? __ia32_sys_open+0x1c0/0x1c0 [ 818.066925][ T9482] do_syscall_64+0x60/0xe0 [ 818.071315][ T9482] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 818.077181][ T9482] RIP: 0033:0x45cba9 [ 818.081055][ T9482] Code: Bad RIP value. [ 818.085094][ T9482] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 818.093502][ T9482] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 818.101474][ T9482] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 818.109422][ T9482] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 818.117378][ T9482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 818.125326][ T9482] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 [ 818.185741][ T3182] usb 1-1: USB disconnect, device number 98 03:38:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x2e15b935, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:32 executing program 5: syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x4}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="d4020000130000082dbd7000ffdbdf2507000000", @ANYRES32=r4, @ANYBLOB="00000000000000000000000000000000ff77da3f6759cc35a3854fb2e0e934a86a89f03f127a5726a439b717b32a922f61088cb213062d6ed1e5d54e76bddb92492ddcc30175dad6a78b41351ac2c1c9edac314387542cea515fc1b5dce0bffeee25fa5c8bcbd2e3c4be377b59d3010bdf83", @ANYRES32=r8, @ANYBLOB="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"], 0x2d4}}, 0x0) 03:38:32 executing program 0 (fault-call:2 fault-nth:6): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:38:32 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xfeff0000}, 0x0) 03:38:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29426, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:32 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r3 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$RNDCLEARPOOL(r5, 0x5206, &(0x7f0000000000)=0x8) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r3, 0x0) 03:38:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x35b9152e, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 818.759446][ T9676] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x3f000000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 818.912083][ T9676] 8021q: adding VLAN 0 to HW filter on device bond253 03:38:33 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x4) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000b0010000104000009000040000060be37ed7e32dbff16620000091d1d1fcebda2d552c5cd3b09410cb4143636be5e7fa78ee984cb2c833c609ba5c0d9724acef6c4b2f8958d9631ffe8fca603dcf213adc00800000000000000de010000002a94bf920568e0c5dd676a5d4165a51d1000"/128, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) [ 818.966339][ T9685] bond253: (slave bridge430): making interface the new active one [ 818.978081][ T9685] bond253: (slave bridge430): Enslaving as an active interface with an up link [ 818.989102][ T2593] IPv6: ADDRCONF(NETDEV_CHANGE): bond253: link becomes ready 03:38:33 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) [ 819.018257][ T9676] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x40000000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 819.059960][ T3182] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 819.072063][ T9685] bond253: (slave bridge431): Enslaving as an active interface with a down link 03:38:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29427, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 819.216363][ T9740] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 819.267244][ T9740] 8021q: adding VLAN 0 to HW filter on device bond254 [ 819.299842][ T9770] bond254: (slave bridge432): making interface the new active one [ 819.313558][ T9770] bond254: (slave bridge432): Enslaving as an active interface with an up link [ 819.324720][T29962] IPv6: ADDRCONF(NETDEV_CHANGE): bond254: link becomes ready [ 819.325384][ T3182] usb 1-1: Using ep0 maxpacket: 8 [ 819.339242][ T9740] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 819.361420][ T9770] bond254: (slave bridge433): Enslaving as an active interface with a down link [ 819.486154][ T3182] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 819.494270][ T3182] usb 1-1: config 0 has no interface number 0 [ 819.503528][ T3182] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 819.515957][ T3182] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 819.527007][ T3182] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 819.538391][ T3182] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 819.548678][ T3182] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.563600][ T3182] usb 1-1: config 0 descriptor?? [ 819.614854][ T9680] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 819.621962][ T9680] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 819.841552][ T9680] FAULT_INJECTION: forcing a failure. [ 819.841552][ T9680] name failslab, interval 1, probability 0, space 0, times 0 [ 819.874435][ T9680] CPU: 1 PID: 9680 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 819.883042][ T9680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 819.893083][ T9680] Call Trace: [ 819.896372][ T9680] dump_stack+0x18f/0x20d [ 819.900687][ T9680] should_fail.cold+0x5/0x14 [ 819.905262][ T9680] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 819.910615][ T9680] should_failslab+0x5/0xf [ 819.915022][ T9680] __kmalloc+0x27d/0x340 [ 819.919249][ T9680] ? tomoyo_realpath_from_path+0xc3/0x620 [ 819.924949][ T9680] tomoyo_encode2.part.0+0xe9/0x3a0 [ 819.930161][ T9680] ? tomoyo_realpath_from_path+0xc3/0x620 [ 819.935866][ T9680] tomoyo_encode+0x28/0x50 [ 819.940263][ T9680] tomoyo_realpath_from_path+0x186/0x620 [ 819.945884][ T9680] tomoyo_check_open_permission+0x272/0x380 [ 819.951775][ T9680] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 819.957413][ T9680] ? lock_downgrade+0x820/0x820 [ 819.962241][ T9680] ? do_raw_spin_lock+0x120/0x2b0 [ 819.967261][ T9680] tomoyo_file_open+0xa3/0xd0 [ 819.971934][ T9680] security_file_open+0x52/0x3f0 [ 819.976856][ T9680] do_dentry_open+0x3a0/0x1290 [ 819.981606][ T9680] path_openat+0x1bb9/0x2750 [ 819.986182][ T9680] ? path_lookupat+0x830/0x830 [ 819.990938][ T9680] ? __lockdep_free_key_range+0x110/0x110 [ 819.996635][ T9680] ? lock_is_held_type+0xb0/0xe0 [ 820.001557][ T9680] do_filp_open+0x17e/0x3c0 [ 820.006043][ T9680] ? may_open_dev+0xf0/0xf0 [ 820.010531][ T9680] ? do_raw_spin_lock+0x120/0x2b0 [ 820.015534][ T9680] ? rwlock_bug.part.0+0x90/0x90 [ 820.020542][ T9680] ? _raw_spin_unlock+0x24/0x40 [ 820.025373][ T9680] ? __alloc_fd+0x28d/0x600 [ 820.029860][ T9680] do_sys_openat2+0x16f/0x3b0 [ 820.034517][ T9680] ? build_open_flags+0x650/0x650 [ 820.039522][ T9680] ? __mutex_unlock_slowpath+0xe2/0x610 [ 820.045064][ T9680] ? wait_for_completion+0x260/0x260 [ 820.050330][ T9680] __x64_sys_openat+0x13f/0x1f0 [ 820.055165][ T9680] ? __ia32_sys_open+0x1c0/0x1c0 [ 820.060080][ T9680] ? ksys_write+0x1a5/0x250 [ 820.064562][ T9680] ? lock_is_held_type+0xb0/0xe0 [ 820.069479][ T9680] ? do_syscall_64+0x1c/0xe0 [ 820.074060][ T9680] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 820.080022][ T9680] do_syscall_64+0x60/0xe0 [ 820.084420][ T9680] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 820.090288][ T9680] RIP: 0033:0x45cba9 [ 820.094157][ T9680] Code: Bad RIP value. [ 820.098198][ T9680] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 820.106585][ T9680] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 820.114534][ T9680] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 820.122483][ T9680] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 820.130430][ T9680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 820.138380][ T9680] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 [ 820.181643][ T9680] ERROR: Out of memory at tomoyo_realpath_from_path. [ 820.194155][T29962] usb 1-1: USB disconnect, device number 99 03:38:34 executing program 0 (fault-call:2 fault-nth:7): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:38:34 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xffffa888}, 0x0) 03:38:34 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) getpeername(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000000c0)=0x80) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000240)={@pppoe={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'bridge_slave_1\x00'}}, {&(0x7f00000001c0)=""/120, 0x78}, &(0x7f0000000100), 0x33}, 0xa0) syz_open_procfs(0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) 03:38:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29428, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x40020000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:34 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000140)={0xf0f041}) syz_open_dev$audion(0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r4 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r4, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r6, 0x40a85321, &(0x7f0000000280)={{0x9, 0x1}, 'port1\x00', 0x68, 0x80000, 0xc7d2, 0x7f, 0x5ec, 0x3, 0x7, 0x0, 0x0, 0x3}) [ 820.753815][ T9826] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x48000000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x4c000000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x50000000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x64000000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 820.944426][ T9826] 8021q: adding VLAN 0 to HW filter on device bond255 03:38:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x68000000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x6c000000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 821.072078][ T9833] bond255: (slave bridge434): making interface the new active one [ 821.085164][T29962] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 821.093703][ T9833] bond255: (slave bridge434): Enslaving as an active interface with an up link [ 821.118351][ T9826] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 821.134469][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): bond255: link becomes ready [ 821.211121][ T9833] bond255: (slave bridge435): Enslaving as an active interface with a down link [ 821.334418][T29962] usb 1-1: Using ep0 maxpacket: 8 [ 821.454590][T29962] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 821.462606][T29962] usb 1-1: config 0 has no interface number 0 [ 821.474833][T29962] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 821.487875][T29962] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 821.500037][T29962] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 821.513165][T29962] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 821.522985][T29962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.532406][T29962] usb 1-1: config 0 descriptor?? [ 821.564705][ T9838] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 821.571657][ T9838] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 821.819567][ T9838] FAULT_INJECTION: forcing a failure. [ 821.819567][ T9838] name failslab, interval 1, probability 0, space 0, times 0 [ 821.833565][ T9838] CPU: 0 PID: 9838 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 821.842160][ T9838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 821.852218][ T9838] Call Trace: [ 821.855516][ T9838] dump_stack+0x18f/0x20d [ 821.859855][ T9838] should_fail.cold+0x5/0x14 [ 821.864458][ T9838] should_failslab+0x5/0xf [ 821.868882][ T9838] kmem_cache_alloc_trace+0x240/0x2d0 [ 821.874324][ T9838] ? snd_seq_queue_alloc+0x1c/0x4d0 [ 821.879534][ T9838] snd_seq_queue_alloc+0x51/0x4d0 [ 821.884627][ T9838] snd_seq_ioctl_create_queue+0xab/0x320 [ 821.890268][ T9838] snd_seq_kernel_client_ctl+0xeb/0x130 [ 821.895809][ T9838] alloc_seq_queue+0xf0/0x190 [ 821.900481][ T9838] ? async_call_lookup_ports+0x10/0x10 [ 821.905930][ T9838] ? snd_seq_oss_open+0x362/0xa10 [ 821.910936][ T9838] snd_seq_oss_open+0x36a/0xa10 [ 821.915771][ T9838] odev_open+0x6c/0x90 [ 821.919817][ T9838] ? odev_release+0x70/0x70 [ 821.924372][ T9838] soundcore_open+0x445/0x600 [ 821.929094][ T9838] ? sound_devnode+0xf0/0xf0 [ 821.933668][ T9838] chrdev_open+0x266/0x770 [ 821.938065][ T9838] ? cdev_device_add+0x210/0x210 [ 821.944717][ T9838] ? security_file_open+0x1f5/0x3f0 [ 821.949892][ T9838] do_dentry_open+0x501/0x1290 [ 821.954631][ T9838] ? cdev_device_add+0x210/0x210 [ 821.959546][ T9838] path_openat+0x1bb9/0x2750 [ 821.964117][ T9838] ? path_lookupat+0x830/0x830 [ 821.968864][ T9838] ? sched_clock+0x2a/0x40 [ 821.973283][ T9838] ? __lockdep_free_key_range+0x110/0x110 [ 821.978976][ T9838] ? kvm_sched_clock_read+0x14/0x40 [ 821.984146][ T9838] ? sched_clock+0x2a/0x40 [ 821.988539][ T9838] do_filp_open+0x17e/0x3c0 [ 821.993017][ T9838] ? may_open_dev+0xf0/0xf0 [ 821.997534][ T9838] ? __alloc_fd+0x475/0x600 [ 822.002014][ T9838] ? _raw_spin_unlock+0x24/0x40 [ 822.006838][ T9838] ? __alloc_fd+0x28d/0x600 [ 822.011338][ T9838] do_sys_openat2+0x16f/0x3b0 [ 822.015991][ T9838] ? build_open_flags+0x650/0x650 [ 822.020989][ T9838] ? clockevents_program_event+0x12b/0x350 [ 822.026771][ T9838] ? hrtimer_interrupt+0x6ea/0x930 [ 822.031854][ T9838] __x64_sys_openat+0x13f/0x1f0 [ 822.036678][ T9838] ? __ia32_sys_open+0x1c0/0x1c0 [ 822.041586][ T9838] ? sched_clock_cpu+0x18/0x1b0 [ 822.046411][ T9838] ? lock_is_held_type+0xb0/0xe0 [ 822.051331][ T9838] ? do_syscall_64+0x1c/0xe0 [ 822.055897][ T9838] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 822.061853][ T9838] do_syscall_64+0x60/0xe0 [ 822.066257][ T9838] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 822.072124][ T9838] RIP: 0033:0x45cba9 [ 822.075987][ T9838] Code: Bad RIP value. [ 822.080025][ T9838] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 822.088408][ T9838] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 822.096372][ T9838] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 822.104351][ T9838] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 822.112296][ T9838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 822.120242][ T9838] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 [ 822.157854][ T12] usb 1-1: USB disconnect, device number 100 03:38:36 executing program 0 (fault-call:2 fault-nth:8): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:38:36 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 03:38:36 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xffffffffffffff21, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) 03:38:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x74000000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29429, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:36 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r3 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x1, 0x11, r3, 0x0) 03:38:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x75664101, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 822.714773][ T9943] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 822.784707][ T9943] 8021q: adding VLAN 0 to HW filter on device bond256 [ 822.793576][ T9944] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 03:38:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x7a000000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x8dffffff, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 822.866691][ T9961] bond256: (slave bridge436): making interface the new active one 03:38:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x910a10e4, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:37 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() tkill(r1, 0x1000000000016) r2 = getpgrp(r1) rt_sigqueueinfo(r2, 0x1f, &(0x7f0000000000)={0x32, 0xffff, 0x7}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) [ 822.938426][ T9961] bond256: (slave bridge436): Enslaving as an active interface with an up link 03:38:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x91ffffff, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 822.987030][T29962] IPv6: ADDRCONF(NETDEV_CHANGE): bond256: link becomes ready [ 823.024373][ T9943] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 823.045187][ T3181] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 823.093901][ T9961] bond256: (slave bridge437): Enslaving as an active interface with a down link [ 823.314342][ T3181] usb 1-1: Using ep0 maxpacket: 8 [ 823.464326][ T3181] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 823.472429][ T3181] usb 1-1: config 0 has no interface number 0 [ 823.484014][ T3181] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 823.498240][ T3181] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 823.519178][ T3181] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 823.531503][ T3181] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 823.541063][ T3181] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.551910][ T3181] usb 1-1: config 0 descriptor?? [ 823.574655][ T9973] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 823.581614][ T9973] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 823.809510][ T9973] FAULT_INJECTION: forcing a failure. [ 823.809510][ T9973] name failslab, interval 1, probability 0, space 0, times 0 [ 823.823333][ T9973] CPU: 0 PID: 9973 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 823.831935][ T9973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 823.841993][ T9973] Call Trace: [ 823.845295][ T9973] dump_stack+0x18f/0x20d [ 823.849634][ T9973] should_fail.cold+0x5/0x14 [ 823.854217][ T9973] should_failslab+0x5/0xf [ 823.858644][ T9973] kmem_cache_alloc_trace+0x240/0x2d0 [ 823.864000][ T9973] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 823.870140][ T9973] snd_seq_create_port+0xb2/0x8a0 [ 823.875159][ T9973] ? snd_seq_ioctl_create_port+0x17/0x6d0 [ 823.880867][ T9973] snd_seq_ioctl_create_port+0x101/0x6d0 [ 823.886485][ T9973] snd_seq_kernel_client_ctl+0xeb/0x130 [ 823.892017][ T9973] create_port+0x17e/0x240 [ 823.896427][ T9973] ? alloc_seq_queue+0x190/0x190 [ 823.901351][ T9973] ? snd_seq_oss_process_event+0x27d0/0x27d0 [ 823.907308][ T9973] ? create_port+0x240/0x240 [ 823.911887][ T9973] ? mark_held_locks+0x9f/0xe0 [ 823.916659][ T9973] snd_seq_oss_open+0x348/0xa10 [ 823.921493][ T9973] odev_open+0x6c/0x90 [ 823.925539][ T9973] ? odev_release+0x70/0x70 [ 823.930021][ T9973] soundcore_open+0x445/0x600 [ 823.934701][ T9973] ? sound_devnode+0xf0/0xf0 [ 823.939269][ T9973] chrdev_open+0x266/0x770 [ 823.943667][ T9973] ? cdev_device_add+0x210/0x210 [ 823.948586][ T9973] ? security_file_open+0x1f5/0x3f0 [ 823.953776][ T9973] do_dentry_open+0x501/0x1290 [ 823.958531][ T9973] ? cdev_device_add+0x210/0x210 [ 823.963453][ T9973] path_openat+0x1bb9/0x2750 [ 823.968028][ T9973] ? path_lookupat+0x830/0x830 [ 823.972774][ T9973] ? __lockdep_free_key_range+0x110/0x110 [ 823.978472][ T9973] ? lock_is_held_type+0xb0/0xe0 [ 823.983399][ T9973] do_filp_open+0x17e/0x3c0 [ 823.987883][ T9973] ? may_open_dev+0xf0/0xf0 [ 823.992368][ T9973] ? do_raw_spin_lock+0x120/0x2b0 [ 823.997371][ T9973] ? rwlock_bug.part.0+0x90/0x90 [ 824.002293][ T9973] ? _raw_spin_unlock+0x24/0x40 [ 824.007120][ T9973] ? __alloc_fd+0x28d/0x600 [ 824.011606][ T9973] do_sys_openat2+0x16f/0x3b0 [ 824.016265][ T9973] ? build_open_flags+0x650/0x650 [ 824.021274][ T9973] __x64_sys_openat+0x13f/0x1f0 [ 824.026103][ T9973] ? __ia32_sys_open+0x1c0/0x1c0 [ 824.031020][ T9973] ? ksys_write+0x1a5/0x250 [ 824.035502][ T9973] ? lock_is_held_type+0xb0/0xe0 [ 824.040418][ T9973] ? do_syscall_64+0x1c/0xe0 [ 824.044989][ T9973] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 824.050950][ T9973] do_syscall_64+0x60/0xe0 [ 824.055347][ T9973] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 824.061219][ T9973] RIP: 0033:0x45cba9 [ 824.065084][ T9973] Code: Bad RIP value. [ 824.069125][ T9973] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 824.077511][ T9973] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 824.085460][ T9973] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 824.093409][ T9973] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 824.101361][ T9973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 824.109316][ T9973] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 [ 824.165114][ T9973] ALSA: seq_oss: can't create port [ 824.172871][T29962] usb 1-1: USB disconnect, device number 101 03:38:38 executing program 0 (fault-call:2 fault-nth:9): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:38:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xe02e0000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:38 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 03:38:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2942a, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:38 executing program 3: clock_gettime(0x7, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000000)) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r3 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r3, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) 03:38:38 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) [ 824.746755][T10058] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xe4100a91, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xe8030000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xf4010000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 824.916020][T10058] 8021q: adding VLAN 0 to HW filter on device bond257 03:38:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xf5ffffff, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 824.964962][T10063] bond257: (slave bridge438): making interface the new active one [ 825.001118][T10063] bond257: (slave bridge438): Enslaving as an active interface with an up link [ 825.015375][ T3178] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 825.024823][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): bond257: link becomes ready [ 825.045436][T10058] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 825.102100][T10063] bond257: (slave bridge439): Enslaving as an active interface with a down link [ 825.254591][ T3178] usb 1-1: Using ep0 maxpacket: 8 [ 825.385012][ T3178] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 825.393044][ T3178] usb 1-1: config 0 has no interface number 0 [ 825.399643][ T3178] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 825.411049][ T3178] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 825.421463][ T3178] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 825.431636][ T3178] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 825.441413][ T3178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.455685][ T3178] usb 1-1: config 0 descriptor?? [ 825.474464][T10060] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 825.483315][T10060] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 825.716716][T10060] FAULT_INJECTION: forcing a failure. [ 825.716716][T10060] name failslab, interval 1, probability 0, space 0, times 0 [ 825.742893][T10060] CPU: 1 PID: 10060 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 825.751588][T10060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 825.761644][T10060] Call Trace: [ 825.764943][T10060] dump_stack+0x18f/0x20d [ 825.769288][T10060] should_fail.cold+0x5/0x14 [ 825.773882][T10060] should_failslab+0x5/0xf [ 825.778288][T10060] kmem_cache_alloc_trace+0x240/0x2d0 [ 825.783732][T10060] ? snd_seq_ioctl_create_port+0x4e4/0x6d0 [ 825.789517][T10060] snd_seq_queue_alloc+0x51/0x4d0 [ 825.794540][T10060] snd_seq_ioctl_create_queue+0xab/0x320 [ 825.800193][T10060] ? alloc_seq_queue+0x190/0x190 [ 825.808027][T10060] snd_seq_kernel_client_ctl+0xeb/0x130 [ 825.813580][T10060] alloc_seq_queue+0xf0/0x190 [ 825.818278][T10060] ? async_call_lookup_ports+0x10/0x10 [ 825.823761][T10060] ? trace_kmalloc+0xfd/0x130 [ 825.828453][T10060] snd_seq_oss_open+0x36a/0xa10 [ 825.833398][T10060] odev_open+0x6c/0x90 [ 825.837474][T10060] ? odev_release+0x70/0x70 [ 825.841983][T10060] soundcore_open+0x445/0x600 [ 825.846671][T10060] ? sound_devnode+0xf0/0xf0 [ 825.851374][T10060] chrdev_open+0x266/0x770 [ 825.855799][T10060] ? cdev_device_add+0x210/0x210 [ 825.860748][T10060] ? security_file_open+0x1f5/0x3f0 [ 825.865957][T10060] do_dentry_open+0x501/0x1290 [ 825.870713][T10060] ? cdev_device_add+0x210/0x210 [ 825.875635][T10060] path_openat+0x1bb9/0x2750 [ 825.880209][T10060] ? path_lookupat+0x830/0x830 [ 825.884977][T10060] ? __lockdep_free_key_range+0x110/0x110 [ 825.890686][T10060] ? lock_is_held_type+0xb0/0xe0 [ 825.895606][T10060] do_filp_open+0x17e/0x3c0 [ 825.900087][T10060] ? may_open_dev+0xf0/0xf0 [ 825.904587][T10060] ? do_raw_spin_lock+0x120/0x2b0 [ 825.909597][T10060] ? rwlock_bug.part.0+0x90/0x90 [ 825.914519][T10060] ? _raw_spin_unlock+0x24/0x40 [ 825.919341][T10060] ? __alloc_fd+0x28d/0x600 [ 825.923930][T10060] do_sys_openat2+0x16f/0x3b0 [ 825.928600][T10060] ? build_open_flags+0x650/0x650 [ 825.933599][T10060] ? __mutex_unlock_slowpath+0xe2/0x610 [ 825.939123][T10060] ? wait_for_completion+0x260/0x260 [ 825.944429][T10060] __x64_sys_openat+0x13f/0x1f0 [ 825.949252][T10060] ? __ia32_sys_open+0x1c0/0x1c0 [ 825.954163][T10060] ? ksys_write+0x1a5/0x250 [ 825.958641][T10060] ? lock_is_held_type+0xb0/0xe0 [ 825.963554][T10060] ? do_syscall_64+0x1c/0xe0 [ 825.968205][T10060] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 825.974249][T10060] do_syscall_64+0x60/0xe0 [ 825.978640][T10060] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 825.984504][T10060] RIP: 0033:0x45cba9 [ 825.988369][T10060] Code: Bad RIP value. [ 825.992526][T10060] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 826.000919][T10060] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 826.008871][T10060] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 826.016820][T10060] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 826.024768][T10060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 826.032720][T10060] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 03:38:40 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000100001040000000000ff0f0000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000000)={0x2, 0x6, 0xc544, 0x7, 'syz0\x00', 0x10000}) 03:38:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfe800000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 826.067175][T29962] usb 1-1: USB disconnect, device number 102 03:38:40 executing program 0 (fault-call:2 fault-nth:10): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:38:40 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 03:38:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2942b, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:40 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r3 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x505541, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r3, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000040)={0xb5, 0x1}) 03:38:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xff000000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xfffffffffffffe8c, 0xe9, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x1, 0x40000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4c8c40, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r2, @ANYRES32=r3], 0xfc}, 0x1, 0x0, 0x0, 0x4044080}, 0x440d1) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x4}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_deladdr={0x38, 0x15, 0x400, 0x70bd2d, 0x25dfdbfc, {0x2, 0x1f, 0x30, 0xc8, r7}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}, @IFA_FLAGS={0x8, 0x8, 0x340}, @IFA_ADDRESS={0x8, 0x1, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @private=0xa010100}]}, 0x38}}, 0x0) 03:38:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xff0f0000, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 826.645801][T10174] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xffffff8d, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 826.731738][T10174] 8021q: adding VLAN 0 to HW filter on device bond258 [ 826.820239][T10202] bond258: (slave bridge440): making interface the new active one 03:38:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xffffff91, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 826.891803][T10202] bond258: (slave bridge440): Enslaving as an active interface with an up link [ 826.921970][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bond258: link becomes ready 03:38:41 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 03:38:41 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1003}, [@IFLA_PHYS_SWITCH_ID={0x1e, 0x24, "179e63b604fb9d318bd440c1c0075bc7d38410825eccdecc7717"}]}, 0x40}}, 0x0) [ 826.964288][T10174] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 827.002073][T10202] bond258: (slave bridge441): Enslaving as an active interface with a down link [ 827.014250][T29962] usb 1-1: new high-speed USB device number 103 using dummy_hcd 03:38:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2942c, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 827.148309][T10241] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 827.184301][T10241] 8021q: adding VLAN 0 to HW filter on device bond259 [ 827.246170][T10275] bond259: (slave bridge442): making interface the new active one [ 827.264705][T29962] usb 1-1: Using ep0 maxpacket: 8 [ 827.272782][T10275] bond259: (slave bridge442): Enslaving as an active interface with an up link [ 827.290158][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bond259: link becomes ready [ 827.309933][T10241] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 827.331215][T10275] bond259: (slave bridge443): Enslaving as an active interface with a down link [ 827.394322][T29962] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 827.403302][T29962] usb 1-1: config 0 has no interface number 0 [ 827.421921][T29962] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 827.435151][T29962] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 827.447042][T29962] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 827.458384][T29962] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 827.484002][T29962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.514196][T29962] usb 1-1: config 0 descriptor?? [ 827.544532][T10213] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 827.551504][T10213] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 827.791928][T10213] FAULT_INJECTION: forcing a failure. [ 827.791928][T10213] name failslab, interval 1, probability 0, space 0, times 0 [ 827.812211][T10213] CPU: 1 PID: 10213 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 827.820909][T10213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 827.830967][T10213] Call Trace: [ 827.834269][T10213] dump_stack+0x18f/0x20d [ 827.838619][T10213] should_fail.cold+0x5/0x14 [ 827.843225][T10213] should_failslab+0x5/0xf [ 827.847631][T10213] kmem_cache_alloc_trace+0x240/0x2d0 [ 827.852994][T10213] snd_seq_prioq_new+0x3c/0x120 [ 827.857823][T10213] snd_seq_queue_alloc+0x159/0x4d0 [ 827.862928][T10213] snd_seq_ioctl_create_queue+0xab/0x320 [ 827.868542][T10213] ? alloc_seq_queue+0x190/0x190 [ 827.873460][T10213] snd_seq_kernel_client_ctl+0xeb/0x130 [ 827.878987][T10213] alloc_seq_queue+0xf0/0x190 [ 827.883644][T10213] ? async_call_lookup_ports+0x10/0x10 [ 827.889095][T10213] ? trace_kmalloc+0xfd/0x130 [ 827.893786][T10213] snd_seq_oss_open+0x36a/0xa10 [ 827.898617][T10213] odev_open+0x6c/0x90 [ 827.902662][T10213] ? odev_release+0x70/0x70 [ 827.907140][T10213] soundcore_open+0x445/0x600 [ 827.911798][T10213] ? sound_devnode+0xf0/0xf0 [ 827.916373][T10213] chrdev_open+0x266/0x770 [ 827.920769][T10213] ? cdev_device_add+0x210/0x210 [ 827.925686][T10213] ? security_file_open+0x1f5/0x3f0 [ 827.930864][T10213] do_dentry_open+0x501/0x1290 [ 827.935603][T10213] ? cdev_device_add+0x210/0x210 [ 827.940535][T10213] path_openat+0x1bb9/0x2750 [ 827.945108][T10213] ? path_lookupat+0x830/0x830 [ 827.949870][T10213] ? __lockdep_free_key_range+0x110/0x110 [ 827.955572][T10213] ? lock_is_held_type+0xb0/0xe0 [ 827.960495][T10213] do_filp_open+0x17e/0x3c0 [ 827.964979][T10213] ? may_open_dev+0xf0/0xf0 [ 827.969476][T10213] ? do_raw_spin_lock+0x120/0x2b0 [ 827.974479][T10213] ? rwlock_bug.part.0+0x90/0x90 [ 827.979398][T10213] ? _raw_spin_unlock+0x24/0x40 [ 827.984225][T10213] ? __alloc_fd+0x28d/0x600 [ 827.988707][T10213] do_sys_openat2+0x16f/0x3b0 [ 827.993357][T10213] ? build_open_flags+0x650/0x650 [ 827.998360][T10213] ? __mutex_unlock_slowpath+0xe2/0x610 [ 828.004032][T10213] ? wait_for_completion+0x260/0x260 [ 828.009297][T10213] __x64_sys_openat+0x13f/0x1f0 [ 828.014124][T10213] ? __ia32_sys_open+0x1c0/0x1c0 [ 828.019033][T10213] ? ksys_write+0x1a5/0x250 [ 828.023523][T10213] ? lock_is_held_type+0xb0/0xe0 [ 828.028438][T10213] ? do_syscall_64+0x1c/0xe0 [ 828.033005][T10213] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 828.038961][T10213] do_syscall_64+0x60/0xe0 [ 828.043352][T10213] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 828.049218][T10213] RIP: 0033:0x45cba9 [ 828.053082][T10213] Code: Bad RIP value. [ 828.057119][T10213] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 828.065525][T10213] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 828.073471][T10213] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 828.081598][T10213] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 828.089544][T10213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 828.097491][T10213] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 [ 828.137752][ T1236] usb 1-1: USB disconnect, device number 103 03:38:42 executing program 0 (fault-call:2 fault-nth:11): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:38:42 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0x2) 03:38:42 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x483}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) 03:38:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffff5, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2942d, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:42 executing program 3: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x8, 0x4) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r1+30000000}, 0x0) r4 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r4, 0x0) 03:38:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfd, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 828.700757][T10333] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 828.797072][T10333] 8021q: adding VLAN 0 to HW filter on device bond260 03:38:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:38:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x2], 0x1c}, 0xd}, 0x1c) 03:38:43 executing program 5: r0 = syz_open_procfs(0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0xc, 0x0, 0x7}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x891}, 0x8804) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newrule={0x44, 0x20, 0xb01, 0x70bd26, 0x25dfdbfb, {0xa, 0x14, 0x80, 0x4c, 0x81, 0x0, 0x0, 0x4, 0x4}, [@FRA_SRC={0x14, 0x2, @remote}, @FRA_SRC={0x14, 0x2, @local}]}, 0x44}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r4 = fcntl$dupfd(r3, 0x0, r1) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000240)={'macvtap0\x00', {0x2, 0x4e23, @multicast1}}) 03:38:43 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0x3) [ 828.926933][T10359] bond260: (slave bridge444): making interface the new active one [ 828.943052][T10359] bond260: (slave bridge444): Enslaving as an active interface with an up link [ 828.963226][T29962] IPv6: ADDRCONF(NETDEV_CHANGE): bond260: link becomes ready 03:38:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x3], 0x1c}, 0xd}, 0x1c) [ 828.977186][T10333] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 828.984258][ T1236] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 829.040996][T10359] bond260: (slave bridge445): Enslaving as an active interface with a down link [ 829.224699][ T1236] usb 1-1: Using ep0 maxpacket: 8 [ 829.345298][ T1236] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 829.353315][ T1236] usb 1-1: config 0 has no interface number 0 [ 829.361134][ T1236] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 829.373867][ T1236] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 829.384591][ T1236] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 829.395326][ T1236] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 829.405264][ T1236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.421397][ T1236] usb 1-1: config 0 descriptor?? [ 829.446992][T10339] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 829.455543][T10339] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 829.728391][T10339] FAULT_INJECTION: forcing a failure. [ 829.728391][T10339] name failslab, interval 1, probability 0, space 0, times 0 [ 829.750495][T10339] CPU: 1 PID: 10339 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 829.759207][T10339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 829.769273][T10339] Call Trace: [ 829.772574][T10339] dump_stack+0x18f/0x20d [ 829.776916][T10339] should_fail.cold+0x5/0x14 [ 829.781528][T10339] should_failslab+0x5/0xf [ 829.785962][T10339] kmem_cache_alloc_trace+0x240/0x2d0 [ 829.791341][T10339] snd_seq_prioq_new+0x3c/0x120 [ 829.796197][T10339] snd_seq_queue_alloc+0x159/0x4d0 [ 829.801319][T10339] snd_seq_ioctl_create_queue+0xab/0x320 [ 829.806981][T10339] ? __sanitizer_cov_trace_pc+0x35/0x60 [ 829.812533][T10339] snd_seq_kernel_client_ctl+0xeb/0x130 [ 829.818086][T10339] alloc_seq_queue+0xf0/0x190 [ 829.822774][T10339] ? async_call_lookup_ports+0x10/0x10 [ 829.828260][T10339] ? snd_seq_oss_open+0x2ab/0xa10 [ 829.833291][T10339] snd_seq_oss_open+0x36a/0xa10 [ 829.838151][T10339] odev_open+0x6c/0x90 [ 829.842221][T10339] ? odev_release+0x70/0x70 [ 829.846838][T10339] soundcore_open+0x445/0x600 [ 829.851518][T10339] ? sound_devnode+0xf0/0xf0 [ 829.856087][T10339] chrdev_open+0x266/0x770 [ 829.860484][T10339] ? cdev_device_add+0x210/0x210 [ 829.865402][T10339] ? security_file_open+0x1f5/0x3f0 [ 829.870582][T10339] do_dentry_open+0x501/0x1290 [ 829.875326][T10339] ? cdev_device_add+0x210/0x210 [ 829.880246][T10339] path_openat+0x1bb9/0x2750 [ 829.884821][T10339] ? lockdep_hardirqs_on_prepare+0x320/0x590 [ 829.890788][T10339] ? path_lookupat+0x830/0x830 [ 829.895534][T10339] ? __lockdep_free_key_range+0x110/0x110 [ 829.901258][T10339] ? lock_is_held_type+0xb0/0xe0 [ 829.906176][T10339] do_filp_open+0x17e/0x3c0 [ 829.910657][T10339] ? may_open_dev+0xf0/0xf0 [ 829.915142][T10339] ? do_raw_spin_lock+0x120/0x2b0 [ 829.920145][T10339] ? rwlock_bug.part.0+0x90/0x90 [ 829.925061][T10339] ? _raw_spin_unlock+0x24/0x40 [ 829.929886][T10339] ? __alloc_fd+0x28d/0x600 [ 829.934404][T10339] do_sys_openat2+0x16f/0x3b0 [ 829.939059][T10339] ? build_open_flags+0x650/0x650 [ 829.944058][T10339] ? clockevents_program_event+0x12b/0x350 [ 829.949873][T10339] ? hrtimer_interrupt+0x6ea/0x930 [ 829.954960][T10339] __x64_sys_openat+0x13f/0x1f0 [ 829.959787][T10339] ? __ia32_sys_open+0x1c0/0x1c0 [ 829.964707][T10339] ? sched_clock_cpu+0x18/0x1b0 [ 829.969543][T10339] ? lock_is_held_type+0xb0/0xe0 [ 829.974455][T10339] ? do_syscall_64+0x1c/0xe0 [ 829.979030][T10339] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 829.984993][T10339] do_syscall_64+0x60/0xe0 [ 829.989484][T10339] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 829.995352][T10339] RIP: 0033:0x45cba9 [ 829.999220][T10339] Code: Bad RIP value. [ 830.003260][T10339] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 830.011646][T10339] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 830.019632][T10339] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 830.027592][T10339] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 830.035540][T10339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 830.043488][T10339] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 [ 830.072925][T29962] usb 1-1: USB disconnect, device number 104 03:38:44 executing program 0 (fault-call:2 fault-nth:12): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:38:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2942e, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:44 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0x4) 03:38:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x4], 0x1c}, 0xd}, 0x1c) 03:38:44 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xe9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x15855, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x40, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c000288080013b30a6c22bd9525e1226f660100", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) 03:38:44 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCEXCL(r4, 0x540c) r5 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r5, 0x0) 03:38:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x5], 0x1c}, 0xd}, 0x1c) [ 830.646023][T10454] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 830.757621][T10454] 8021q: adding VLAN 0 to HW filter on device bond261 03:38:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x6], 0x1c}, 0xd}, 0x1c) 03:38:44 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0x5) [ 830.844162][T10475] bond261: (slave bridge446): making interface the new active one [ 830.881641][T10475] bond261: (slave bridge446): Enslaving as an active interface with an up link 03:38:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x7], 0x1c}, 0xd}, 0x1c) [ 830.913139][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bond261: link becomes ready [ 830.934014][T10454] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:45 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0xfffffffffffffff4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) [ 830.971336][T10475] bond261: (slave bridge447): Enslaving as an active interface with a down link [ 831.007274][ T3182] usb 1-1: new high-speed USB device number 105 using dummy_hcd 03:38:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x8], 0x1c}, 0xd}, 0x1c) [ 831.073864][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 831.256576][ T3182] usb 1-1: Using ep0 maxpacket: 8 [ 831.374121][ T3182] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 831.382222][ T3182] usb 1-1: config 0 has no interface number 0 [ 831.392535][ T3182] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 831.404804][ T3182] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 831.415045][ T3182] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 831.424939][ T3182] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 831.434467][ T3182] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.447916][ T3182] usb 1-1: config 0 descriptor?? [ 831.474181][T10458] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 831.484031][T10458] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 831.719413][T10458] FAULT_INJECTION: forcing a failure. [ 831.719413][T10458] name failslab, interval 1, probability 0, space 0, times 0 [ 831.743735][T10458] CPU: 1 PID: 10458 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 831.752424][T10458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 831.762461][T10458] Call Trace: [ 831.765747][T10458] dump_stack+0x18f/0x20d [ 831.770069][T10458] should_fail.cold+0x5/0x14 [ 831.774643][T10458] should_failslab+0x5/0xf [ 831.779046][T10458] kmem_cache_alloc_trace+0x240/0x2d0 [ 831.784549][T10458] snd_timer_instance_new+0x44/0x2f0 [ 831.789837][T10458] snd_seq_timer_open+0x1a5/0x530 [ 831.794846][T10458] ? snd_seq_timer_set_skew+0xc0/0xc0 [ 831.800201][T10458] ? mark_held_locks+0x9f/0xe0 [ 831.804945][T10458] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 831.810731][T10458] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 831.816689][T10458] ? trace_hardirqs_on+0x5f/0x220 [ 831.821694][T10458] queue_use+0xe6/0x250 [ 831.825834][T10458] snd_seq_queue_alloc+0x2c6/0x4d0 [ 831.830948][T10458] snd_seq_ioctl_create_queue+0xab/0x320 [ 831.837007][T10458] ? alloc_seq_queue+0x190/0x190 [ 831.841947][T10458] snd_seq_kernel_client_ctl+0xeb/0x130 [ 831.847483][T10458] alloc_seq_queue+0xf0/0x190 [ 831.852165][T10458] ? async_call_lookup_ports+0x10/0x10 [ 831.857620][T10458] ? trace_kmalloc+0xfd/0x130 [ 831.862464][T10458] snd_seq_oss_open+0x36a/0xa10 [ 831.867304][T10458] odev_open+0x6c/0x90 [ 831.871356][T10458] ? odev_release+0x70/0x70 [ 831.875844][T10458] soundcore_open+0x445/0x600 [ 831.880508][T10458] ? sound_devnode+0xf0/0xf0 [ 831.885092][T10458] chrdev_open+0x266/0x770 [ 831.889502][T10458] ? cdev_device_add+0x210/0x210 [ 831.894426][T10458] ? security_file_open+0x1f5/0x3f0 [ 831.899608][T10458] do_dentry_open+0x501/0x1290 [ 831.904364][T10458] ? cdev_device_add+0x210/0x210 [ 831.909288][T10458] path_openat+0x1bb9/0x2750 [ 831.913865][T10458] ? path_lookupat+0x830/0x830 [ 831.918631][T10458] ? __lockdep_free_key_range+0x110/0x110 [ 831.924327][T10458] ? lock_is_held_type+0xb0/0xe0 [ 831.929258][T10458] do_filp_open+0x17e/0x3c0 [ 831.933754][T10458] ? may_open_dev+0xf0/0xf0 [ 831.938254][T10458] ? do_raw_spin_lock+0x120/0x2b0 [ 831.943256][T10458] ? rwlock_bug.part.0+0x90/0x90 [ 831.948174][T10458] ? _raw_spin_unlock+0x24/0x40 [ 831.953023][T10458] ? __alloc_fd+0x28d/0x600 [ 831.957512][T10458] do_sys_openat2+0x16f/0x3b0 [ 831.962165][T10458] ? build_open_flags+0x650/0x650 [ 831.967862][T10458] ? __mutex_unlock_slowpath+0xe2/0x610 [ 831.973390][T10458] ? wait_for_completion+0x260/0x260 [ 831.978657][T10458] __x64_sys_openat+0x13f/0x1f0 [ 831.983485][T10458] ? __ia32_sys_open+0x1c0/0x1c0 [ 831.988399][T10458] ? ksys_write+0x1a5/0x250 [ 831.992880][T10458] ? lock_is_held_type+0xb0/0xe0 [ 831.997801][T10458] ? do_syscall_64+0x1c/0xe0 [ 832.002370][T10458] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 832.008334][T10458] do_syscall_64+0x60/0xe0 [ 832.012730][T10458] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 832.018601][T10458] RIP: 0033:0x45cba9 [ 832.022466][T10458] Code: Bad RIP value. [ 832.026507][T10458] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 832.034907][T10458] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 832.042856][T10458] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 832.050804][T10458] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 832.058752][T10458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 832.066711][T10458] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 [ 832.110701][ T3182] usb 1-1: USB disconnect, device number 105 03:38:46 executing program 0 (fault-call:2 fault-nth:13): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:38:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2942f, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:46 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0x6) 03:38:46 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000024000b0f00"/20, @ANYRES32=r4, @ANYBLOB="00667100000c0002000800040000000000000000000000000000800000000000"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_getaddr={0x44, 0x16, 0x300, 0x70bd29, 0x25dfdbfd, {0x2, 0x3f, 0x7, 0x0, r4}, [@IFA_LABEL={0x14, 0x3, 'gretap0\x00'}, @IFA_FLAGS={0x8, 0x8, 0xa}, @IFA_FLAGS={0x8, 0x8, 0x88}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}]}, 0x44}}, 0x0) 03:38:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x9], 0x1c}, 0xd}, 0x1c) 03:38:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200), 0x0) r2 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r2, 0x0) 03:38:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0xa], 0x1c}, 0xd}, 0x1c) [ 832.666473][T10565] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 832.700304][T10569] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0xe], 0x1c}, 0xd}, 0x1c) 03:38:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x10], 0x1c}, 0xd}, 0x1c) 03:38:46 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/213, 0xd5}, {&(0x7f0000000380)=""/148, 0x94}, {&(0x7f0000000000)=""/108, 0x6c}, {&(0x7f00000000c0)=""/2, 0x2}, {&(0x7f0000000440)=""/79, 0x4f}, {&(0x7f00000004c0)=""/157, 0x9d}, {&(0x7f0000000580)=""/129, 0x81}], 0x7, &(0x7f00000006c0)=""/188, 0xbc}, 0x7}, {{&(0x7f0000000780)=@l2tp6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/88, 0x58}], 0x2, &(0x7f0000000180)=""/54, 0x36}, 0x81}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001880)=""/229, 0xe5}], 0x1, &(0x7f00000019c0)=""/39, 0x27}, 0x1}], 0x3, 0x2, &(0x7f0000001ac0)={0x0, 0x989680}) r3 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r3, 0x0) [ 832.821316][T10569] 8021q: adding VLAN 0 to HW filter on device bond262 03:38:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x48], 0x1c}, 0xd}, 0x1c) [ 832.875167][T10575] bond262: (slave bridge448): making interface the new active one [ 832.894362][T10575] bond262: (slave bridge448): Enslaving as an active interface with an up link [ 832.903457][T10565] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 832.913826][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): bond262: link becomes ready 03:38:47 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c010000364300"/30, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) [ 832.933720][T10569] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 832.971414][T10575] bond262: (slave bridge449): Enslaving as an active interface with a down link [ 832.999563][ T3182] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 833.245131][ T3182] usb 1-1: Using ep0 maxpacket: 8 [ 833.363751][ T3182] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 833.371864][ T3182] usb 1-1: config 0 has no interface number 0 [ 833.378335][ T3182] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 833.389446][ T3182] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 833.399564][ T3182] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 833.409450][ T3182] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 833.418632][ T3182] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.430647][ T3182] usb 1-1: config 0 descriptor?? [ 833.454154][T10572] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 833.461314][T10572] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 833.688465][T10572] FAULT_INJECTION: forcing a failure. [ 833.688465][T10572] name failslab, interval 1, probability 0, space 0, times 0 [ 833.716710][T10572] CPU: 1 PID: 10572 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 833.725417][T10572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 833.735731][T10572] Call Trace: [ 833.739008][T10572] dump_stack+0x18f/0x20d [ 833.743470][T10572] should_fail.cold+0x5/0x14 [ 833.748056][T10572] should_failslab+0x5/0xf [ 833.752457][T10572] kmem_cache_alloc_trace+0x240/0x2d0 [ 833.757819][T10572] snd_timer_instance_new+0x44/0x2f0 [ 833.763127][T10572] snd_seq_timer_open+0x1a5/0x530 [ 833.768131][T10572] ? snd_seq_timer_set_skew+0xc0/0xc0 [ 833.773491][T10572] ? mark_held_locks+0x9f/0xe0 [ 833.778262][T10572] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 833.784047][T10572] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 833.790025][T10572] ? trace_hardirqs_on+0x5f/0x220 [ 833.795067][T10572] queue_use+0xe6/0x250 [ 833.799208][T10572] snd_seq_queue_alloc+0x2c6/0x4d0 [ 833.804302][T10572] snd_seq_ioctl_create_queue+0xab/0x320 [ 833.809909][T10572] ? alloc_seq_queue+0x190/0x190 [ 833.814826][T10572] snd_seq_kernel_client_ctl+0xeb/0x130 [ 833.820535][T10572] alloc_seq_queue+0xf0/0x190 [ 833.825198][T10572] ? async_call_lookup_ports+0x10/0x10 [ 833.830682][T10572] ? trace_kmalloc+0xfd/0x130 [ 833.835371][T10572] snd_seq_oss_open+0x36a/0xa10 [ 833.840281][T10572] odev_open+0x6c/0x90 [ 833.844346][T10572] ? odev_release+0x70/0x70 [ 833.848834][T10572] soundcore_open+0x445/0x600 [ 833.853502][T10572] ? sound_devnode+0xf0/0xf0 [ 833.858166][T10572] chrdev_open+0x266/0x770 [ 833.862556][T10572] ? cdev_device_add+0x210/0x210 [ 833.867473][T10572] ? security_file_open+0x1f5/0x3f0 [ 833.872649][T10572] do_dentry_open+0x501/0x1290 [ 833.877394][T10572] ? cdev_device_add+0x210/0x210 [ 833.882311][T10572] path_openat+0x1bb9/0x2750 [ 833.886882][T10572] ? path_lookupat+0x830/0x830 [ 833.891650][T10572] ? __lockdep_free_key_range+0x110/0x110 [ 833.897373][T10572] ? lock_is_held_type+0xb0/0xe0 [ 833.902311][T10572] do_filp_open+0x17e/0x3c0 [ 833.906885][T10572] ? may_open_dev+0xf0/0xf0 [ 833.911375][T10572] ? do_raw_spin_lock+0x120/0x2b0 [ 833.916390][T10572] ? rwlock_bug.part.0+0x90/0x90 [ 833.921310][T10572] ? _raw_spin_unlock+0x24/0x40 [ 833.926149][T10572] ? __alloc_fd+0x28d/0x600 [ 833.930635][T10572] do_sys_openat2+0x16f/0x3b0 [ 833.935291][T10572] ? build_open_flags+0x650/0x650 [ 833.941596][T10572] ? __mutex_unlock_slowpath+0xe2/0x610 [ 833.947117][T10572] ? wait_for_completion+0x260/0x260 [ 833.952386][T10572] __x64_sys_openat+0x13f/0x1f0 [ 833.957217][T10572] ? __ia32_sys_open+0x1c0/0x1c0 [ 833.962129][T10572] ? ksys_write+0x1a5/0x250 [ 833.966619][T10572] ? lock_is_held_type+0xb0/0xe0 [ 833.971533][T10572] ? do_syscall_64+0x1c/0xe0 [ 833.976101][T10572] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 833.982061][T10572] do_syscall_64+0x60/0xe0 [ 833.986456][T10572] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 833.992322][T10572] RIP: 0033:0x45cba9 [ 833.996186][T10572] Code: Bad RIP value. [ 834.000222][T10572] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 834.008608][T10572] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 834.016988][T10572] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 834.024936][T10572] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 834.032893][T10572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 834.040842][T10572] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 [ 834.079748][ T3182] usb 1-1: USB disconnect, device number 106 03:38:48 executing program 0 (fault-call:2 fault-nth:14): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:38:48 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0x8) 03:38:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x4c], 0x1c}, 0xd}, 0x1c) 03:38:48 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x181000, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000a00000000000000aaaaaaaaaa16bbbbbbbbbbbbaaaaaaaaaabbbbbbbbbbbbbbaaaaaaaaaabbffffffffffff0180c2000000aaaaaaaaaaaabbbbbbbbbbbbb4c74a439637d7a21a9a9c35b247e6674d0c98388e4e51f9796c7b1aa6725620a68ce04644110d64c40179e4f211ea8e59474c724204bdfe91e73dc302db12a463c535ccc1dd125d43ab0d0219220562ca1154e9387d93b9afe32f402ee629965c7b46a12c165caa939d3e4169a8b238000000000000000000"]) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9038}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) 03:38:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29430, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:48 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000000c0)={0x9f0000, 0x4, 0x1f4d, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x990a2d, 0x8, [], @p_u32=&(0x7f0000000000)=0x7}}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000100)=0x80000000, 0x4) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, 0x0) r6 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r6, 0x0) 03:38:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x50], 0x1c}, 0xd}, 0x1c) [ 834.663074][T10685] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 834.732381][T10685] 8021q: adding VLAN 0 to HW filter on device bond263 03:38:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x64], 0x1c}, 0xd}, 0x1c) [ 834.800842][T10696] bond263: (slave bridge450): making interface the new active one [ 834.811383][T10696] bond263: (slave bridge450): Enslaving as an active interface with an up link [ 834.822818][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): bond263: link becomes ready [ 834.837104][T10685] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:48 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=0x0, @ANYBLOB="fa716d64abe1d61daf5206abc9a9b9f19b5e6547c2cd9fc224a38631d6f3f6f91e9227f455"], 0x3c}}, 0x0) 03:38:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29431, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:48 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0x9) 03:38:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x68], 0x1c}, 0xd}, 0x1c) [ 834.865429][T10696] bond263: (slave bridge451): Enslaving as an active interface with a down link [ 834.980577][T10744] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 834.994579][ T12] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 835.140452][T10744] 8021q: adding VLAN 0 to HW filter on device bond264 [ 835.190943][T10750] bond264: (slave bridge452): making interface the new active one [ 835.201435][T10750] bond264: (slave bridge452): Enslaving as an active interface with an up link [ 835.214009][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): bond264: link becomes ready [ 835.226659][T10750] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 835.245247][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 835.249309][T10789] bond264: (slave bridge453): Enslaving as an active interface with a down link [ 835.363649][ T12] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 835.371674][ T12] usb 1-1: config 0 has no interface number 0 [ 835.378271][ T12] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 835.389335][ T12] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 835.400217][ T12] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 835.410220][ T12] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 835.420102][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.431459][ T12] usb 1-1: config 0 descriptor?? [ 835.463935][T10692] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 835.470912][T10692] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 835.696852][T10692] FAULT_INJECTION: forcing a failure. [ 835.696852][T10692] name failslab, interval 1, probability 0, space 0, times 0 [ 835.718209][T10692] CPU: 1 PID: 10692 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 835.726917][T10692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 835.736976][T10692] Call Trace: [ 835.740278][T10692] dump_stack+0x18f/0x20d [ 835.744622][T10692] should_fail.cold+0x5/0x14 [ 835.749220][T10692] ? snd_timer_instance_new+0x62/0x2f0 [ 835.754692][T10692] ? snd_timer_instance_new+0x62/0x2f0 [ 835.760156][T10692] should_failslab+0x5/0xf [ 835.764584][T10692] __kmalloc_track_caller+0x27b/0x330 [ 835.769965][T10692] kstrdup+0x36/0x70 [ 835.773869][T10692] snd_timer_instance_new+0x62/0x2f0 [ 835.779166][T10692] snd_seq_timer_open+0x1a5/0x530 [ 835.784188][T10692] ? snd_seq_timer_set_skew+0xc0/0xc0 [ 835.789541][T10692] ? mark_held_locks+0x9f/0xe0 [ 835.794295][T10692] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 835.800087][T10692] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 835.806056][T10692] ? trace_hardirqs_on+0x5f/0x220 [ 835.811064][T10692] queue_use+0xe6/0x250 [ 835.815201][T10692] snd_seq_queue_alloc+0x2c6/0x4d0 [ 835.820312][T10692] snd_seq_ioctl_create_queue+0xab/0x320 [ 835.825937][T10692] ? alloc_seq_queue+0x190/0x190 [ 835.830860][T10692] snd_seq_kernel_client_ctl+0xeb/0x130 [ 835.836396][T10692] alloc_seq_queue+0xf0/0x190 [ 835.841056][T10692] ? async_call_lookup_ports+0x10/0x10 [ 835.846503][T10692] ? trace_kmalloc+0xfd/0x130 [ 835.851174][T10692] snd_seq_oss_open+0x36a/0xa10 [ 835.856010][T10692] odev_open+0x6c/0x90 [ 835.860060][T10692] ? odev_release+0x70/0x70 [ 835.864548][T10692] soundcore_open+0x445/0x600 [ 835.869216][T10692] ? sound_devnode+0xf0/0xf0 [ 835.873787][T10692] chrdev_open+0x266/0x770 [ 835.878183][T10692] ? cdev_device_add+0x210/0x210 [ 835.883102][T10692] ? security_file_open+0x1f5/0x3f0 [ 835.888300][T10692] do_dentry_open+0x501/0x1290 [ 835.893041][T10692] ? cdev_device_add+0x210/0x210 [ 835.897960][T10692] path_openat+0x1bb9/0x2750 [ 835.902543][T10692] ? path_lookupat+0x830/0x830 [ 835.907296][T10692] ? __lockdep_free_key_range+0x110/0x110 [ 835.913127][T10692] ? lock_is_held_type+0xb0/0xe0 [ 835.918049][T10692] do_filp_open+0x17e/0x3c0 [ 835.922535][T10692] ? may_open_dev+0xf0/0xf0 [ 835.927023][T10692] ? do_raw_spin_lock+0x120/0x2b0 [ 835.932028][T10692] ? rwlock_bug.part.0+0x90/0x90 [ 835.937035][T10692] ? _raw_spin_unlock+0x24/0x40 [ 835.941870][T10692] ? __alloc_fd+0x28d/0x600 [ 835.946353][T10692] do_sys_openat2+0x16f/0x3b0 [ 835.951024][T10692] ? build_open_flags+0x650/0x650 [ 835.956048][T10692] ? __mutex_unlock_slowpath+0xe2/0x610 [ 835.961586][T10692] ? wait_for_completion+0x260/0x260 [ 835.968413][T10692] __x64_sys_openat+0x13f/0x1f0 [ 835.973240][T10692] ? __ia32_sys_open+0x1c0/0x1c0 [ 835.978167][T10692] ? ksys_write+0x1a5/0x250 [ 835.982646][T10692] ? lock_is_held_type+0xb0/0xe0 [ 835.987568][T10692] ? do_syscall_64+0x1c/0xe0 [ 835.992156][T10692] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 835.998124][T10692] do_syscall_64+0x60/0xe0 [ 836.002526][T10692] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 836.008396][T10692] RIP: 0033:0x45cba9 [ 836.012262][T10692] Code: Bad RIP value. [ 836.016327][T10692] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 836.024716][T10692] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 836.032664][T10692] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 836.040617][T10692] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 836.048564][T10692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 836.056511][T10692] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 [ 836.092126][ T3182] usb 1-1: USB disconnect, device number 107 03:38:50 executing program 0 (fault-call:2 fault-nth:15): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:38:50 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r3 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r3, 0x0) 03:38:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x6c], 0x1c}, 0xd}, 0x1c) 03:38:50 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x0, 0x20440) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000040)=0x12c00000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x204800, 0x0) ioctl$HIDIOCGPHYS(r2, 0x80404812, &(0x7f0000000100)) 03:38:50 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0xa) 03:38:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29432, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 836.654804][T10838] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x74], 0x1c}, 0xd}, 0x1c) [ 836.704850][T10838] 8021q: adding VLAN 0 to HW filter on device bond265 03:38:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x7a], 0x1c}, 0xd}, 0x1c) [ 836.753136][T10876] bond265: (slave bridge454): making interface the new active one [ 836.819796][T10876] bond265: (slave bridge454): Enslaving as an active interface with an up link [ 836.853833][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond265: link becomes ready 03:38:50 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0xc) 03:38:50 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) prctl$PR_GET_CHILD_SUBREAPER(0x25) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x4, 0x0, 0xfffff02c}, {0x3}]}, 0x10) fcntl$notify(r0, 0x402, 0x12) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x7c}, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) [ 836.891565][T10838] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 836.964154][T10876] bond265: (slave bridge455): Enslaving as an active interface with a down link 03:38:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29433, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 837.023487][ T3178] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 837.110152][T10903] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 837.168792][T10903] 8021q: adding VLAN 0 to HW filter on device bond266 [ 837.268779][T10929] bond266: (slave bridge456): making interface the new active one [ 837.273430][ T3178] usb 1-1: Using ep0 maxpacket: 8 [ 837.292326][T10929] bond266: (slave bridge456): Enslaving as an active interface with an up link [ 837.316973][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bond266: link becomes ready [ 837.334248][T10903] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 837.377361][T10929] bond266: (slave bridge457): Enslaving as an active interface with a down link [ 837.404471][ T3178] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 837.413429][ T3178] usb 1-1: config 0 has no interface number 0 [ 837.439929][ T3178] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 837.452351][ T3178] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 837.467740][ T3178] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 837.479008][ T3178] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 837.488957][ T3178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.502486][ T3178] usb 1-1: config 0 descriptor?? [ 837.533819][T10881] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 837.540877][T10881] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 837.788160][T10881] FAULT_INJECTION: forcing a failure. [ 837.788160][T10881] name failslab, interval 1, probability 0, space 0, times 0 [ 837.821241][T10881] CPU: 1 PID: 10881 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 837.829948][T10881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 837.840053][T10881] Call Trace: [ 837.843329][T10881] dump_stack+0x18f/0x20d [ 837.847640][T10881] should_fail.cold+0x5/0x14 [ 837.852236][T10881] should_failslab+0x5/0xf [ 837.856638][T10881] kmem_cache_alloc_trace+0x240/0x2d0 [ 837.861991][T10881] ? snd_hrtimer_callback+0x3c0/0x3c0 [ 837.867349][T10881] snd_hrtimer_open+0x41/0x110 [ 837.872137][T10881] snd_timer_open+0xb0a/0xfe0 [ 837.876838][T10881] ? snd_timer_instance_new+0x62/0x2f0 [ 837.882881][T10881] ? snd_timer_close_locked+0xbb0/0xbb0 [ 837.888404][T10881] ? memcpy+0x39/0x60 [ 837.892364][T10881] ? kstrdup+0x56/0x70 [ 837.896411][T10881] snd_seq_timer_open+0x259/0x530 [ 837.901423][T10881] ? snd_seq_timer_set_skew+0xc0/0xc0 [ 837.906776][T10881] ? mark_held_locks+0x9f/0xe0 [ 837.911528][T10881] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 837.917309][T10881] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 837.923269][T10881] ? trace_hardirqs_on+0x5f/0x220 [ 837.928272][T10881] queue_use+0xe6/0x250 [ 837.932404][T10881] snd_seq_queue_alloc+0x2c6/0x4d0 [ 837.937497][T10881] snd_seq_ioctl_create_queue+0xab/0x320 [ 837.943100][T10881] ? alloc_seq_queue+0x190/0x190 [ 837.948016][T10881] snd_seq_kernel_client_ctl+0xeb/0x130 [ 837.953558][T10881] alloc_seq_queue+0xf0/0x190 [ 837.958208][T10881] ? async_call_lookup_ports+0x10/0x10 [ 837.963651][T10881] ? trace_kmalloc+0xfd/0x130 [ 837.968306][T10881] snd_seq_oss_open+0x36a/0xa10 [ 837.973131][T10881] odev_open+0x6c/0x90 [ 837.977187][T10881] ? odev_release+0x70/0x70 [ 837.981664][T10881] soundcore_open+0x445/0x600 [ 837.986333][T10881] ? sound_devnode+0xf0/0xf0 [ 837.990895][T10881] chrdev_open+0x266/0x770 [ 837.995297][T10881] ? cdev_device_add+0x210/0x210 [ 838.000233][T10881] ? security_file_open+0x1f5/0x3f0 [ 838.005408][T10881] do_dentry_open+0x501/0x1290 [ 838.010142][T10881] ? cdev_device_add+0x210/0x210 [ 838.015057][T10881] path_openat+0x1bb9/0x2750 [ 838.019630][T10881] ? path_lookupat+0x830/0x830 [ 838.024375][T10881] ? __lockdep_free_key_range+0x110/0x110 [ 838.030065][T10881] ? lock_is_held_type+0xb0/0xe0 [ 838.034981][T10881] do_filp_open+0x17e/0x3c0 [ 838.039460][T10881] ? may_open_dev+0xf0/0xf0 [ 838.043941][T10881] ? do_raw_spin_lock+0x120/0x2b0 [ 838.048937][T10881] ? rwlock_bug.part.0+0x90/0x90 [ 838.053853][T10881] ? _raw_spin_unlock+0x24/0x40 [ 838.058682][T10881] ? __alloc_fd+0x28d/0x600 [ 838.063164][T10881] do_sys_openat2+0x16f/0x3b0 [ 838.067816][T10881] ? build_open_flags+0x650/0x650 [ 838.072811][T10881] ? __mutex_unlock_slowpath+0xe2/0x610 [ 838.078332][T10881] ? wait_for_completion+0x260/0x260 [ 838.083593][T10881] __x64_sys_openat+0x13f/0x1f0 [ 838.088418][T10881] ? __ia32_sys_open+0x1c0/0x1c0 [ 838.093341][T10881] ? ksys_write+0x1a5/0x250 [ 838.097817][T10881] ? lock_is_held_type+0xb0/0xe0 [ 838.102749][T10881] ? do_syscall_64+0x1c/0xe0 [ 838.107314][T10881] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 838.113277][T10881] do_syscall_64+0x60/0xe0 [ 838.117668][T10881] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 838.123531][T10881] RIP: 0033:0x45cba9 [ 838.127394][T10881] Code: Bad RIP value. [ 838.131430][T10881] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 838.139812][T10881] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 838.147757][T10881] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 838.155701][T10881] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 838.163644][T10881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 838.171588][T10881] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 [ 838.212243][ T2593] usb 1-1: USB disconnect, device number 108 03:38:52 executing program 0 (fault-call:2 fault-nth:16): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:38:52 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0xe) 03:38:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x2], 0x1c}, 0xd}, 0x1c) 03:38:52 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x5c1001, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04632540"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) r5 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0xc, 0x0, &(0x7f0000000300)=[@free_buffer={0x40086303, r5}], 0x0, 0x73b000, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x74, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x0, 0x1, 0xb}, @fd, @flat=@handle={0x73682a85, 0x10a, 0x1}}, &(0x7f0000000040)={0x0, 0x20, 0x38}}}, @decrefs={0x40046307, 0x2}, @free_buffer={0x40086303, r5}, @acquire={0x40046305, 0x1}, @dead_binder_done], 0x55, 0x0, &(0x7f0000000240)="7670721c5d698fb68503b6157c9ece7a900d624515cd64e052912caef4b21b13f5f3965185a471938ca4d28bd41f87b4de4b47b634130cbe0abf0b6d46a1041d73ccac1f755111eda3e352cb7a1416ca98e36bcfd1"}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000100001fa0004000200000000000000000ae01428f8dc8fa1c867b1126661331320839f6131cc9b0df2f9f4c76bcc14c85c8ec6d006c193aabe4385353386efae06bb6ae41e23f761a7da8264c72f3ce27dc306b0f55cd9d2bef793bc8e9378e8044b04a5c6", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=0x0, @ANYBLOB="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"/361], 0x3c}}, 0xc000) 03:38:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29434, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:52 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r3 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000400)=ANY=[@ANYRES16, @ANYRESHEX=r5], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r7}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000040)={r7, 0x6}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x7, 0xd24, 0x8de7, 0x7fff, 0x5, 0x46, 0x401, {r7, @in6={{0xa, 0x4e22, 0x7, @empty, 0x3}}, 0x1, 0x4, 0x5b91be6f, 0x6, 0x5}}, &(0x7f0000000000)=0xb0) 03:38:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x3], 0x1c}, 0xd}, 0x1c) [ 838.788848][T10993] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 838.803446][T10991] binder: 10987:10991 unknown command 1076192004 [ 838.839992][T10991] binder: 10987:10991 ioctl c0306201 20000200 returned -22 03:38:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x4], 0x1c}, 0xd}, 0x1c) 03:38:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x5], 0x1c}, 0xd}, 0x1c) [ 838.885918][T10993] 8021q: adding VLAN 0 to HW filter on device bond267 03:38:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x6], 0x1c}, 0xd}, 0x1c) [ 838.950342][T11016] bond267: (slave bridge458): making interface the new active one [ 839.006283][T11016] bond267: (slave bridge458): Enslaving as an active interface with an up link [ 839.018778][T11024] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 839.033577][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): bond267: link becomes ready [ 839.053105][T11024] binder: BINDER_SET_CONTEXT_MGR already set [ 839.065014][T11024] binder: 10987:11024 ioctl 40046207 0 returned -16 [ 839.081310][T11048] binder: BINDER_SET_CONTEXT_MGR already set [ 839.092531][T11016] bond267: (slave bridge459): Enslaving as an active interface with a down link 03:38:53 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0xf) 03:38:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x7], 0x1c}, 0xd}, 0x1c) [ 839.107340][T11048] binder: 10987:11048 ioctl 40046207 0 returned -16 [ 839.124522][T29962] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 839.149278][T10993] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 839.171640][T11053] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 839.414472][T29962] usb 1-1: Using ep0 maxpacket: 8 [ 839.537337][T29962] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 839.545404][T29962] usb 1-1: config 0 has no interface number 0 [ 839.551490][T29962] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 839.562882][T29962] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 839.573280][T29962] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 839.583039][T29962] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 839.594062][T29962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.608345][T29962] usb 1-1: config 0 descriptor?? [ 839.635169][T11030] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 839.642120][T11030] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 839.883944][T11030] FAULT_INJECTION: forcing a failure. [ 839.883944][T11030] name failslab, interval 1, probability 0, space 0, times 0 [ 839.903843][T11030] CPU: 1 PID: 11030 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 839.912541][T11030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 839.922596][T11030] Call Trace: [ 839.925893][T11030] dump_stack+0x18f/0x20d [ 839.930232][T11030] should_fail.cold+0x5/0x14 [ 839.934830][T11030] should_failslab+0x5/0xf [ 839.939253][T11030] kmem_cache_alloc_trace+0x240/0x2d0 [ 839.944621][T11030] snd_seq_oss_readq_new+0x46/0x2d0 [ 839.949794][T11030] snd_seq_oss_open+0x53a/0xa10 [ 839.954623][T11030] odev_open+0x6c/0x90 [ 839.958724][T11030] ? odev_release+0x70/0x70 [ 839.963204][T11030] soundcore_open+0x445/0x600 [ 839.967903][T11030] ? sound_devnode+0xf0/0xf0 [ 839.972552][T11030] chrdev_open+0x266/0x770 [ 839.976955][T11030] ? cdev_device_add+0x210/0x210 [ 839.981875][T11030] ? security_file_open+0x1f5/0x3f0 [ 839.987076][T11030] do_dentry_open+0x501/0x1290 [ 839.991822][T11030] ? cdev_device_add+0x210/0x210 [ 839.996741][T11030] path_openat+0x1bb9/0x2750 [ 840.001370][T11030] ? path_lookupat+0x830/0x830 [ 840.006122][T11030] ? __lockdep_free_key_range+0x110/0x110 [ 840.011816][T11030] ? lock_is_held_type+0xb0/0xe0 [ 840.016735][T11030] do_filp_open+0x17e/0x3c0 [ 840.021215][T11030] ? may_open_dev+0xf0/0xf0 [ 840.025699][T11030] ? do_raw_spin_lock+0x120/0x2b0 [ 840.030697][T11030] ? rwlock_bug.part.0+0x90/0x90 [ 840.035614][T11030] ? _raw_spin_unlock+0x24/0x40 [ 840.040437][T11030] ? __alloc_fd+0x28d/0x600 [ 840.044916][T11030] do_sys_openat2+0x16f/0x3b0 [ 840.049566][T11030] ? build_open_flags+0x650/0x650 [ 840.054568][T11030] ? __mutex_unlock_slowpath+0xe2/0x610 [ 840.060094][T11030] ? wait_for_completion+0x260/0x260 [ 840.065356][T11030] __x64_sys_openat+0x13f/0x1f0 [ 840.070180][T11030] ? __ia32_sys_open+0x1c0/0x1c0 [ 840.075092][T11030] ? ksys_write+0x1a5/0x250 [ 840.079567][T11030] ? lock_is_held_type+0xb0/0xe0 [ 840.084524][T11030] ? do_syscall_64+0x1c/0xe0 [ 840.089099][T11030] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 840.095058][T11030] do_syscall_64+0x60/0xe0 [ 840.099451][T11030] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 840.105315][T11030] RIP: 0033:0x45cba9 [ 840.109177][T11030] Code: Bad RIP value. [ 840.113216][T11030] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 840.121597][T11030] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 840.129543][T11030] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 840.137487][T11030] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 840.145431][T11030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 840.153378][T11030] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 [ 840.187710][T29962] usb 1-1: USB disconnect, device number 109 03:38:54 executing program 0 (fault-call:2 fault-nth:17): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:38:54 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0x10) 03:38:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x8], 0x1c}, 0xd}, 0x1c) 03:38:54 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000040)={0x0, 0x0, 0x80}) syz_open_procfs(0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069700100cf3173a6e18501f537245f66f2c91299e6132ae6fb6d0b4fd6e17c7f3d8ae4ef5b1bc586b2fb86d8193d2f1fdeeb079cfe1442c157413c62050ef4a7ce654dd6bb2839a9912865b21942bf87f271f43c3ba7524aa4f9a16166ae33fc4e808c4ef2f2716620a3965956059bcf27a543e33d13fd41434f4d0581758220f051765504656c0e66ef3506d84e814c64f68600d7174acd08d82c4dbb", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) 03:38:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29435, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:54 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r3 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_G_CTRL(r5, 0xc008561b, &(0x7f0000000000)={0x7, 0x7c}) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r3, 0x0) 03:38:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x9], 0x1c}, 0xd}, 0x1c) [ 840.742684][T11106] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 840.766557][T11110] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 840.831978][T11110] 8021q: adding VLAN 0 to HW filter on device bond268 [ 840.897161][T11118] bond268: (slave bridge460): making interface the new active one 03:38:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0xa], 0x1c}, 0xd}, 0x1c) [ 840.945250][T11118] bond268: (slave bridge460): Enslaving as an active interface with an up link [ 840.977699][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bond268: link becomes ready 03:38:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0xe], 0x1c}, 0xd}, 0x1c) 03:38:55 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0x60) [ 840.999464][T11106] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 841.022778][T11110] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 841.034587][ T3178] usb 1-1: new high-speed USB device number 110 using dummy_hcd 03:38:55 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000003100)=[{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000000)="2c9b7c014b379adf595b475cf2d46bb0f39f498e5c21cdc46c46eed501887b0b35b4634d41f3be79ce2c7c6e07ccbe323a72e3b01e5c63dd3349aa6908272902f3a94e20010ee4b49845373499ccecb516a757ec061e43125b9470216f7653", 0x5f}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000000c0)="16a16f66628803ef50bff9c266f5c89f9244eaab6641d0aa194efdc1c51adba0f0b68ab58af80ce4b0b2243e4ca5d465d6", 0x31}, {&(0x7f0000000100)="33fdec984354a10c23befcc4b65eefab", 0x10}, {&(0x7f00000011c0)="7bcef586316376f05353245165838f6cd8ef228aa5f07b15a14913f86fd7411f68f4e31430b3a2ace906eec0d3d3880153f01bf26fe2c1c9", 0x38}, {&(0x7f0000001200)="04e1693732272b694487e615ec15b28a5b4ffe280946f0aca118a69675a27434a48b07b88ef643fa12139af244395e808eb14e5eed9af717563006608563d04e91264b208560a2b77da99105663ef0b92cae3c153d8831db86e50644cd0b020d9481b08961477da7b213268862c17f392a964a0cc23d5148b0f810f148d17af5695d0de1497c339d2723479f3366d7ea29328130da9a3eac16d1466cfceadccee59f99d6a36c839693f4041ee6559066b12923b6bfaf740a7d10f4dfe8af9662c1bc1ae9bb241f5dbe739ea0a196eb1694f50135afcd4b271c81e5b894ded04e", 0xe0}, {&(0x7f0000001300)="e6ea1294cd2626fb6b19f09b72e11ba3ca544f4956b4fa1726f4c21ecf597e0cd3ef2e0cb04d1bb7f0", 0x29}, {&(0x7f0000001340)="be89acd70f0b37de0cd7feb561191e8b9e5d0c0d5c356414f4083b5de91049f307f42fe3aa5d11977c52dc1a484ef108f555b792", 0x34}, {&(0x7f0000001380)="143d465af658bf1f520dd9dcf2a932346b33591ba5e703be2f8cf50a27afd55eadfc46e09037cb66cd6202196ae0dd673315bff0e5c50209111410eb8c4b830a2aba1dadc1ca083da519808827693f4af6b3014ae7187b6adc83ca343a25fbc3b96f684252957d1d7e6b25fc9f5dcd94aaa684deb08ed811be288a45883a598fe2789ec688826af22d7c4cb2cfa42c460585d994b010d1b8375b7df77d0524ff8c45ea8276ad582722baf942a3f9910360928feb40d70c09a626286c14afae04016d94019feb8cca4b8ddf8c7bf86c3382aebd71dab4b5d153246902650f8ada2c653d3b74a5b46d42dc03e09c7a3425869e9af8b6", 0xf5}, {&(0x7f0000001480)}], 0xa, &(0x7f0000001580)=[@iv={0x18, 0x117, 0x2, 0x3, "1351f4"}, @assoc={0x18, 0x117, 0x4, 0x3ff}, @iv={0xe0, 0x117, 0x2, 0xc8, "293f930ea61006ad281cbf7697ff56ef421324d15e9db0ba3f3192fcb5498adbf43330f6c50a4e14ed7606da409a71ed09d2f9d7216246285ae229fe618a9fc55f497ae67b2281eb240e462ed88b373fcba8accae201745c924f4d576c230931064a78ae2c9f3f556f8720a17f2a13ecd58500a44a3b5cbaab661250574be8bfd5514a77aad79371afb7d154e5e797da5993182160e32da82134e477a8a2618dfe27589f63aba31730ef739834f5085a93184766149af486930a262c9d70584f4c23d45f230f7e7e"}, @op={0x18}, @op={0x18}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7f}], 0x188, 0x4}, {0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001740)="1e3e2dc7878cc9f3adc49664d06327cb3e081996c5525da7a8a6c42d728950243946d5fd2fc21b575e22641937b4ab558903c6511f5caf6a75ae70a14ab08853a697e85069940aba138a71d6864fce478fa0d1b42f0a6e9db52243a2311b0656e056581aff6ffab868dce17ccd6680e665133275dbe035155b90027a520c86f8191458b620d65b28e51fe5a752876ee22c2c56b56368d760fb4d9f70691c626c5bd44b21d454a265f440327abf0ef9fe671f02c3d3621714e47790", 0xbb}, {&(0x7f0000001800)="542c6c95c823231b58d314e66ac66d90169f1a04faf0e6dc11ba1ed23622e237eac5fb9dd7877c63429bae45070b4b7ac99f79bf189ea37c221169d5d26ce33482fc64df97705d136a1cebcb5dd0", 0x4e}], 0x2, &(0x7f00000018c0)=[@op={0x18}], 0x18, 0x200400d1}, {0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001900)="fc19cf0807cfbf8c68d5dcf98815a7b0221556b7f36457863462858e1ba8550b41e462e0acbabd5b11d4c880fe1a4abba109d486fbcf1f0a96ec29a67f016691f8a1f26465d6d5a7265646397ee5d09bc19476085511d40d4789ace5e1aa3cd295ec829322dfd036ff4f8d84ca1d885630c96ecaa70132bb1ec6074f762450194e79a8989a313e33c8ae8db5648c7076c7de901c725d5e73e040d14fbb9728846d8a67ecba2a8bf08afa9431186e74c93949733a83d384d0ee21fe263ad50c5dfcd85f31626079d35331c0035f50ba", 0xcf}, {&(0x7f0000001a00)="e48cd7e3896307ef10c1bf0d331cbad0688025ae9a4879298c6c25e1e116a32c9a0d4a639c40cff12868d9d349c58ace4bdc6be228fe3cf9ebf5f385eb71e1786370f0efe92ac47db3b3fbd1fbcaa42b99db7211a3844ebbef4e81c96deb6f124889abebc2d7f1d7262528a7c00ee9149225ab3416f408c6ae44fdde23caaa2f559ebaefd99cf945b2f6a4f493403c0c44ff5bfca9bd5eb01eb6a0f434aea91c3b50dab180a1ea2e5afb218040cbf861e5752088588a", 0xb6}], 0x2, 0x0, 0x0, 0x4008014}, {0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000001b00)="bf1c73f019eb17158c72b72900172c78a1b70e2bc012d6cfe756e2a6ee636c9113bb1439a266d5a6dea8d0f2c376a18b2f163fd7bce7592fc9807c972693d71744c74ac4ba0439b8447952872a0b6894d4f49de327617f1f40b3943860059e2744b31838856484d3450174c74b546a03871850d0d649147be4a2409ce0750e065c5bbddec5ade66c55ce809a22901dcfe79c599af05b3f1b287286aba646dcaa03627359dfec53d7a097dfa136a17bf0645107bea3516703affad8c27129f20e13ae20e379385c6d797b", 0xca}, {&(0x7f0000001c00)="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", 0x1000}, {&(0x7f0000002c00)="8b77c1971287685d3444bf22572bacd9651f93bf31af6be64d37ddee2e9c73a25cc5df3a26915e2fe9a24258eb81d76177ae4ef7441e74a2f14375cb4988c68041f32a736afd959968d5441102eac97840786a2ab94032e3f0f9e7f3e855a830fe23778da5b884ab9c073b393e5f41a5d54372b052e65bf0ee765296d1dea3aaeac23456390a67dd1ab13097e0be0eebb6ee312117acc445b56293c0fdefa47583d45afe9869ccf902dde4a3cfc7262d1c042627a443263c3a4e95977635a0b203c6775fee0d8b1b20ea025ca1af5eded47913a6bccce8c18837410ebf58d92910db8126bfb9ae2f49da9e5922d899e7e959864003844e17cf", 0xf9}, {&(0x7f0000002d00)="8e583565485cd243f3985bdc5e04fa4a67d7b74013a48399a064b373fec69c49b77fb803adec3ad8d0db800816cf0e02e97fe9f2a37e0408a89b0e046dfa8dfd664bec03eee3b4f1e4de66557b2659d024b4d7af5278f347a25678f79a68b24b806179fe5dad16c5efad086fc6a766f827e7da54", 0x74}, {&(0x7f0000002d80)="55c2362a7dafd9eada5fd0f6cc4bb4815ea8fbe892d140407c1ba1647b244b8687fdc456f9b6986aa36d5870010d54d57d0295c49836bfd2fd13ea2cdb7a7b07597bdc83c1134ae04ba492193d842db71f7321ce26adcdddea83044c58374d1230e0ad72e45e5207148de7db0999989b049a076d91f902bab198fcc15a65fac8ddc724377ffdc0a3016e4b0a41f92df9198c83ab3882bbc9fb5cd8746f0ef454a26429ab4d0d313b903a39dcbb2c5d6806b5fe4dd8cd93eca8af608c081ad32512f3133324b45edca7904ed4ce18adcec0", 0xd1}, {&(0x7f0000002e80)="a5411a9d2a764637a8b1a0711514a853a4ad24d8700ce5ae6326140f06ce0ab4ad3c598b0a762c3ade1ef16c47745a9455a6a49594959b89361ab530f7e72066141ff231d55c37326e7b99acc67d1d9edad6460b8a04e222a56f4fbff084935ebecefba96d8e37d0b179787e8fbd3579", 0x70}, {&(0x7f0000002f00)="b3bb53bb1b2afef208ad11008820c84e841fabe638ee81f6de0a06cf12", 0x1d}, {&(0x7f0000002f40)}], 0x8, &(0x7f0000003000)=[@assoc={0x18, 0x117, 0x4, 0x3}, @iv={0x50, 0x117, 0x2, 0x3a, "478a8d968feae7d29cd291f8cabab3b05f4c22f48cc2b8a03d71452fbff96047941d395ce26373c9957826461f559d5cb3c0e58618524030fc8b"}, @assoc={0x18, 0x117, 0x4, 0x8000}, @assoc={0x18, 0x117, 0x4, 0xffffffff}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1ff}], 0xe0, 0x200008d0}], 0x4, 0x1) [ 841.141595][T11118] bond268: (slave bridge461): Enslaving as an active interface with a down link 03:38:55 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0xf0) [ 841.289244][ T3178] usb 1-1: Using ep0 maxpacket: 8 [ 841.414031][ T3178] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 841.422046][ T3178] usb 1-1: config 0 has no interface number 0 [ 841.429409][ T3178] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 841.441541][ T3178] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 841.455104][ T3178] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 841.465834][ T3178] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 841.475504][ T3178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.485465][ T3178] usb 1-1: config 0 descriptor?? [ 841.503569][T11112] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 841.510705][T11112] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 841.744233][T11112] FAULT_INJECTION: forcing a failure. [ 841.744233][T11112] name failslab, interval 1, probability 0, space 0, times 0 [ 841.775210][T11112] CPU: 1 PID: 11112 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 841.784535][T11112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 841.794596][T11112] Call Trace: [ 841.797894][T11112] dump_stack+0x18f/0x20d [ 841.802235][T11112] should_fail.cold+0x5/0x14 [ 841.807454][T11112] ? snd_seq_oss_readq_new+0x94/0x2d0 [ 841.812829][T11112] should_failslab+0x5/0xf [ 841.817252][T11112] __kmalloc+0x27d/0x340 [ 841.821507][T11112] snd_seq_oss_readq_new+0x94/0x2d0 [ 841.826711][T11112] snd_seq_oss_open+0x53a/0xa10 [ 841.831830][T11112] odev_open+0x6c/0x90 [ 841.835901][T11112] ? odev_release+0x70/0x70 [ 841.840408][T11112] soundcore_open+0x445/0x600 [ 841.845102][T11112] ? sound_devnode+0xf0/0xf0 [ 841.849698][T11112] chrdev_open+0x266/0x770 [ 841.854124][T11112] ? cdev_device_add+0x210/0x210 [ 841.859071][T11112] ? security_file_open+0x1f5/0x3f0 [ 841.864280][T11112] do_dentry_open+0x501/0x1290 [ 841.869040][T11112] ? cdev_device_add+0x210/0x210 [ 841.873973][T11112] path_openat+0x1bb9/0x2750 [ 841.878561][T11112] ? path_lookupat+0x830/0x830 [ 841.883307][T11112] ? __lockdep_free_key_range+0x110/0x110 [ 841.889003][T11112] ? lock_is_held_type+0xb0/0xe0 [ 841.894015][T11112] do_filp_open+0x17e/0x3c0 [ 841.898496][T11112] ? may_open_dev+0xf0/0xf0 [ 841.902984][T11112] ? do_raw_spin_lock+0x120/0x2b0 [ 841.907992][T11112] ? rwlock_bug.part.0+0x90/0x90 [ 841.912910][T11112] ? _raw_spin_unlock+0x24/0x40 [ 841.917736][T11112] ? __alloc_fd+0x28d/0x600 [ 841.922220][T11112] do_sys_openat2+0x16f/0x3b0 [ 841.926881][T11112] ? build_open_flags+0x650/0x650 [ 841.931895][T11112] ? __mutex_unlock_slowpath+0xe2/0x610 [ 841.937418][T11112] ? wait_for_completion+0x260/0x260 [ 841.942680][T11112] __x64_sys_openat+0x13f/0x1f0 [ 841.947509][T11112] ? __ia32_sys_open+0x1c0/0x1c0 [ 841.952419][T11112] ? ksys_write+0x1a5/0x250 [ 841.956931][T11112] ? lock_is_held_type+0xb0/0xe0 [ 841.961871][T11112] ? do_syscall_64+0x1c/0xe0 [ 841.966454][T11112] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 841.972587][T11112] do_syscall_64+0x60/0xe0 [ 841.976979][T11112] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 841.982852][T11112] RIP: 0033:0x45cba9 [ 841.988031][T11112] Code: Bad RIP value. [ 841.992074][T11112] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 842.000457][T11112] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 842.008404][T11112] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 842.016354][T11112] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 842.024307][T11112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 842.032253][T11112] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 [ 842.067378][ T1236] usb 1-1: USB disconnect, device number 110 03:38:56 executing program 0 (fault-call:2 fault-nth:18): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:38:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x10], 0x1c}, 0xd}, 0x1c) 03:38:56 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0x1d8) 03:38:56 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) timerfd_gettime(r1, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x4}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x70bd2c, 0x25dfdbfe, {0x2, 0x20, 0x4, 0xfd, r5}, [@IFA_ADDRESS={0x8, 0x1, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x900000, 0x9, 0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00') r7 = socket$nl_audit(0x10, 0x3, 0x9) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) symlinkat(&(0x7f00000003c0)='./file0\x00', r8, &(0x7f0000000400)='./file0\x00') sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, r6, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x0) 03:38:56 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fstatfs(r1, &(0x7f0000000280)=""/4096) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000000)) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r4 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) getrandom(&(0x7f0000001280)=""/189, 0xbd, 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r4, 0x0) 03:38:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29436, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x48], 0x1c}, 0xd}, 0x1c) [ 842.647262][T11232] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x4c], 0x1c}, 0xd}, 0x1c) 03:38:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x50], 0x1c}, 0xd}, 0x1c) [ 842.807360][T11232] 8021q: adding VLAN 0 to HW filter on device bond269 [ 842.884480][T11245] bond269: (slave bridge462): making interface the new active one [ 842.918452][T11245] bond269: (slave bridge462): Enslaving as an active interface with an up link 03:38:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x64], 0x1c}, 0xd}, 0x1c) [ 842.943404][ T3178] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 842.969128][T29962] IPv6: ADDRCONF(NETDEV_CHANGE): bond269: link becomes ready 03:38:57 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0x300) [ 842.995818][T11232] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:57 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000000)={0xde3, "2af5218766e9ce438e80a87909c44fb22c42945800f0dc527b8f0733fc51941e", 0x2, 0xfffff42a, 0x2, 0x2, 0x1000924, 0x2}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, &(0x7f00000001c0)={0x0, 0x0, 0x102, 0x4, {0xdbf4, 0x1, 0x1000, 0xfd7}}) r5 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3ff, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000006000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) [ 843.071273][T11245] bond269: (slave bridge463): Enslaving as an active interface with a down link [ 843.203557][ T3178] usb 1-1: Using ep0 maxpacket: 8 [ 843.323190][ T3178] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 843.331204][ T3178] usb 1-1: config 0 has no interface number 0 [ 843.338970][ T3178] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 843.350728][ T3178] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 843.361368][ T3178] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 843.371986][ T3178] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 843.381699][ T3178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.393798][ T3178] usb 1-1: config 0 descriptor?? [ 843.419646][T11237] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 843.428609][T11237] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 843.661960][T11237] FAULT_INJECTION: forcing a failure. [ 843.661960][T11237] name failslab, interval 1, probability 0, space 0, times 0 [ 843.689269][T11237] CPU: 1 PID: 11237 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 843.698344][T11237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 843.708404][T11237] Call Trace: [ 843.711707][T11237] dump_stack+0x18f/0x20d [ 843.716054][T11237] should_fail.cold+0x5/0x14 [ 843.720654][T11237] ? snd_seq_oss_readq_new+0x94/0x2d0 [ 843.726027][T11237] should_failslab+0x5/0xf [ 843.730450][T11237] __kmalloc+0x27d/0x340 [ 843.734708][T11237] snd_seq_oss_readq_new+0x94/0x2d0 [ 843.739916][T11237] snd_seq_oss_open+0x53a/0xa10 [ 843.744865][T11237] odev_open+0x6c/0x90 [ 843.748934][T11237] ? odev_release+0x70/0x70 [ 843.753443][T11237] soundcore_open+0x445/0x600 [ 843.758127][T11237] ? sound_devnode+0xf0/0xf0 [ 843.762713][T11237] chrdev_open+0x266/0x770 [ 843.767141][T11237] ? cdev_device_add+0x210/0x210 [ 843.772090][T11237] ? security_file_open+0x1f5/0x3f0 [ 843.777297][T11237] do_dentry_open+0x501/0x1290 [ 843.782067][T11237] ? cdev_device_add+0x210/0x210 [ 843.787016][T11237] path_openat+0x1bb9/0x2750 [ 843.791624][T11237] ? path_lookupat+0x830/0x830 [ 843.796408][T11237] ? __lockdep_free_key_range+0x110/0x110 [ 843.802130][T11237] ? lock_is_held_type+0xb0/0xe0 [ 843.807066][T11237] do_filp_open+0x17e/0x3c0 [ 843.811547][T11237] ? may_open_dev+0xf0/0xf0 [ 843.816031][T11237] ? do_raw_spin_lock+0x120/0x2b0 [ 843.821029][T11237] ? rwlock_bug.part.0+0x90/0x90 [ 843.826054][T11237] ? _raw_spin_unlock+0x24/0x40 [ 843.830904][T11237] ? __alloc_fd+0x28d/0x600 [ 843.835388][T11237] do_sys_openat2+0x16f/0x3b0 [ 843.840041][T11237] ? build_open_flags+0x650/0x650 [ 843.845125][T11237] ? __mutex_unlock_slowpath+0xe2/0x610 [ 843.850663][T11237] ? wait_for_completion+0x260/0x260 [ 843.855931][T11237] __x64_sys_openat+0x13f/0x1f0 [ 843.860757][T11237] ? __ia32_sys_open+0x1c0/0x1c0 [ 843.865669][T11237] ? ksys_write+0x1a5/0x250 [ 843.870148][T11237] ? lock_is_held_type+0xb0/0xe0 [ 843.875063][T11237] ? do_syscall_64+0x1c/0xe0 [ 843.879631][T11237] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 843.885600][T11237] do_syscall_64+0x60/0xe0 [ 843.889995][T11237] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 843.895861][T11237] RIP: 0033:0x45cba9 [ 843.899724][T11237] Code: Bad RIP value. [ 843.903763][T11237] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 843.912145][T11237] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 843.920095][T11237] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 843.928046][T11237] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 843.936093][T11237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 843.944041][T11237] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 [ 843.979671][ T2593] usb 1-1: USB disconnect, device number 111 03:38:58 executing program 0 (fault-call:2 fault-nth:19): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:38:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x68], 0x1c}, 0xd}, 0x1c) 03:38:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29437, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:38:58 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0x337) 03:38:58 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x1b) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100697036677265000086d6f299947e980c00028008000100", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) 03:38:58 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x22000, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r4 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r4, 0x0) [ 844.519860][T11347] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x6c], 0x1c}, 0xd}, 0x1c) 03:38:58 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0x500) [ 844.595797][T11347] 8021q: adding VLAN 0 to HW filter on device bond270 [ 844.667152][T11353] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 03:38:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x74], 0x1c}, 0xd}, 0x1c) 03:38:58 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c00028008000100", @ANYRESHEX=r1, @ANYBLOB], 0x3c}}, 0x0) [ 844.769737][T11355] bond270: (slave bridge464): making interface the new active one [ 844.785682][T11355] bond270: (slave bridge464): Enslaving as an active interface with an up link [ 844.819785][ T2593] IPv6: ADDRCONF(NETDEV_CHANGE): bond270: link becomes ready [ 844.839749][T11347] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:38:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x7a], 0x1c}, 0xd}, 0x1c) [ 844.875588][ T12] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 844.891853][T11355] bond270: (slave bridge465): Enslaving as an active interface with a down link 03:38:59 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0x600) [ 844.927703][T11410] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 845.122978][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 845.253224][ T12] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 845.263664][ T12] usb 1-1: config 0 has no interface number 0 [ 845.275483][ T12] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 845.288456][ T12] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 845.299655][ T12] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 845.317926][ T12] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 845.331374][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.351373][ T12] usb 1-1: config 0 descriptor?? [ 845.393334][T11391] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 845.400372][T11391] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 845.634232][T11391] FAULT_INJECTION: forcing a failure. [ 845.634232][T11391] name failslab, interval 1, probability 0, space 0, times 0 [ 845.647999][T11391] CPU: 1 PID: 11391 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 845.656686][T11391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 845.666745][T11391] Call Trace: [ 845.670046][T11391] dump_stack+0x18f/0x20d [ 845.674390][T11391] should_fail.cold+0x5/0x14 [ 845.678994][T11391] should_failslab+0x5/0xf [ 845.683421][T11391] kmem_cache_alloc_trace+0x240/0x2d0 [ 845.688791][T11391] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 845.694770][T11391] snd_seq_port_connect+0x5d/0x520 [ 845.699887][T11391] ? _raw_read_unlock+0x24/0x40 [ 845.704749][T11391] ? check_subscription_permission.isra.0+0x16a/0x260 [ 845.711508][T11391] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 845.717380][T11391] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 845.723598][T11391] ? mark_held_locks+0x9f/0xe0 [ 845.728348][T11391] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 845.734129][T11391] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 845.740089][T11391] snd_seq_kernel_client_ctl+0xeb/0x130 [ 845.745620][T11391] snd_seq_oss_midi_open+0x466/0x6e0 [ 845.750881][T11391] ? snd_seq_oss_midi_setup+0x50/0x50 [ 845.756236][T11391] ? lock_is_held_type+0xb0/0xe0 [ 845.761162][T11391] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 845.767035][T11391] ? kmem_cache_alloc_trace+0x168/0x2d0 [ 845.772575][T11391] snd_seq_oss_open+0x87e/0xa10 [ 845.777402][T11391] odev_open+0x6c/0x90 [ 845.781443][T11391] ? odev_release+0x70/0x70 [ 845.785936][T11391] soundcore_open+0x445/0x600 [ 845.790617][T11391] ? sound_devnode+0xf0/0xf0 [ 845.795182][T11391] chrdev_open+0x266/0x770 [ 845.799585][T11391] ? cdev_device_add+0x210/0x210 [ 845.804501][T11391] ? security_file_open+0x1f5/0x3f0 [ 845.809675][T11391] do_dentry_open+0x501/0x1290 [ 845.814412][T11391] ? cdev_device_add+0x210/0x210 [ 845.819329][T11391] path_openat+0x1bb9/0x2750 [ 845.823897][T11391] ? path_lookupat+0x830/0x830 [ 845.828641][T11391] ? __lockdep_free_key_range+0x110/0x110 [ 845.834334][T11391] ? lock_is_held_type+0xb0/0xe0 [ 845.839247][T11391] do_filp_open+0x17e/0x3c0 [ 845.843729][T11391] ? may_open_dev+0xf0/0xf0 [ 845.848259][T11391] ? do_raw_spin_lock+0x120/0x2b0 [ 845.853259][T11391] ? rwlock_bug.part.0+0x90/0x90 [ 845.858195][T11391] ? _raw_spin_unlock+0x24/0x40 [ 845.863519][T11391] ? __alloc_fd+0x28d/0x600 [ 845.868004][T11391] do_sys_openat2+0x16f/0x3b0 [ 845.872839][T11391] ? build_open_flags+0x650/0x650 [ 845.878060][T11391] ? __mutex_unlock_slowpath+0xe2/0x610 [ 845.884226][T11391] ? wait_for_completion+0x260/0x260 [ 845.889496][T11391] __x64_sys_openat+0x13f/0x1f0 [ 845.894434][T11391] ? __ia32_sys_open+0x1c0/0x1c0 [ 845.899354][T11391] ? ksys_write+0x1a5/0x250 [ 845.903838][T11391] ? lock_is_held_type+0xb0/0xe0 [ 845.908763][T11391] ? do_syscall_64+0x1c/0xe0 [ 845.914730][T11391] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 845.920714][T11391] do_syscall_64+0x60/0xe0 [ 845.925145][T11391] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 845.931013][T11391] RIP: 0033:0x45cba9 [ 845.936180][T11391] Code: Bad RIP value. [ 845.940251][T11391] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 845.948825][T11391] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 845.957033][T11391] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 845.970145][T11391] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 845.978108][T11391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 845.986472][T11391] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 [ 846.023981][ T3178] usb 1-1: USB disconnect, device number 112 03:39:00 executing program 0 (fault-call:2 fault-nth:20): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:39:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29438, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:39:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:39:00 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0x900) 03:39:00 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x3c}}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e22, @empty}, {0x1, @random="841d035789a3"}, 0x20, {0x2, 0x4e22, @multicast2}, 'bridge0\x00'}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:39:00 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r4 = memfd_create(&(0x7f0000000280)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x14, r7, 0x309, 0x0, 0x0, {0x34}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000800)={0x1e8, r7, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x400c001}, 0x840) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x4}]}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', r8}) r9 = socket$nl_audit(0x10, 0x3, 0x9) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$NS_GET_USERNS(r10, 0xb701, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r4, 0x0) 03:39:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x2], 0x1c}, 0xd}, 0x1c) 03:39:00 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0xa00) [ 846.665640][T11472] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:39:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x3], 0x1c}, 0xd}, 0x1c) 03:39:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x2, 0x2, 0x73) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r0) connect(r0, &(0x7f0000000000)=@in={0x2, 0x0, @empty}, 0x80) epoll_create1(0x80000) sendmmsg(r0, &(0x7f0000001540), 0x553, 0x1100000000000000) [ 846.770208][T11472] 8021q: adding VLAN 0 to HW filter on device bond271 03:39:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x4], 0x1c}, 0xd}, 0x1c) [ 846.861392][T11483] bond271: (slave bridge466): making interface the new active one [ 846.892845][ T3178] usb 1-1: new high-speed USB device number 113 using dummy_hcd 03:39:01 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x126bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='syscall\x00') r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x5, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, r4, 0x0) r6 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)="b2094f7840a2189487fe279807e6be914747e6d13a9bd19abe6ee61e18136c726386b651981437891e7811dc889668718b4aca3ae04b75d8898c4176041e7fc1884cd4ac7eae03d1e8b2b782a063ec9d2cf6d43cecb0e1902a35589a70006d7ff737648f108011bd9e12e444bec2eef78fbdc23336aa7c7f3bd8c61ee3ff08148e33a23b2ec75a0bd264b8f3cd6c5f1a07d76ad4bfe8f91fe6e58ba1677ee7a1c285fef5077854aed602aa62bd032247156e72339ddc04488150a71a4d52bedcca0f1c750339c6f0151b947dca8489e9bf03b2e495d73102c6b912d2b26f63dc12163f8797caced45cc9eee98d09b108ba661300d8dec150508deec8df4999502cc1f0b6cea803455c4374e0740195e3640c4cb18427643afb93fc60eb7e2970aef7d7b582d65c687e64a2afbf705c38f80c2abf2342aeb2021659b38a14d371a0f229529078fd489b3fdc8284a4316a97b7fd155e6a73ce904b91337befb0e8be8068a57135cb97007959e3dfb7223caf7ca90c3ebf76fd849ac95dcf4ad5577e823a5b5025399170f9cea6827130e199eab42d11ca727bce9346edd861521cb192ee1fcd4580855c99c62ca24283df3e4b08c578185e8405650cf1f0a673e280b7cd5fd1aa15546111752408402c7b88ae81388128c5d1218f4df0df17f4c5d4ac9b42811b5f48e3a5d5d7efd605bdb29ca4449921f56a3c0cf1c8b86a2f597a047875be9bf63611fd95d3b225c551ee5b83d39a475f5b8e7ffd71857dad46cc4617be8c543527e8ffafb611fa2832d682e6ca64bbdd32eb75b3cfa36d1c9fa36fb87475c9abd2373ccc9404fb4ea42b03a9f6edb226e8cff41bc23d53cce474e62f3eb876fefacdb8e499193980f82fa552a34142cf8905e79872f74c2a86c366cd412176499476957651f337bb61a148bc1ba6c5fec31eb270d2c40132b82d6e9732db159c5b2d8616e751c4fe7f1285cfdad0afd5abbbb433372c0fc27a16a3da18458ad5fc96e9aacab3de9d039f43eb030a4d29502c282f59231055baae2ae9b000db339735da831a5c3f32fc9c3e815b2b7b3a462e6f463c55d678c742b091abbcedd0cc6ce66eafccdbb145c8ec371552c3e47786b917e226700290600ad0870c6038747722fdc7f50e676c497e2bac96be56fce1fad1622575d63b48150a7e95328f3afbd95f41d95575d705b76f90523719fb5f2604acde9d4b7a661bb9789ef0f8832b43d48fc3d33731f1c198b3651cb0fa8ec918cf1743a92eef075ad4799dab4eeda89657e254842392ed25f084cf284baacf490166c7a95b53ca9b4d93a30d9902fa34f477f66bc96f2b84f59d4fe42da7bfb991d602adbd007b2b41109c46d524149813ef4f4b71f6c0b019d8bc875a965f46791589351b85da9e3b2943df9a4afbceb1ca54f2efa46257fb7a7356012b7cc85b7caf5be38e8a5e4ea0ab0097dff49ce97fd8b5b6134b7609c31a72d53179d85e5540bd32fc954c08c067174589fcdd1f2352ec8a3ee14351afd2325a04c412dcdfead33b18e4c1acc7f5073aa1b6d2c0382b3289d7ed5aa4a08a9dcc46eda217ab08afefdb7e2d2e2c496d2af8f4f9b6d1a4ef39d6eaee53c0fd4c860329b55a0d70190478087f25079b4499f93e7f2aca407580b1d6d2be9057d096c3a1783ac5fff327924a629bb930a2608777644dfcb46cd45efdc088ffba8bdd8e1ebd724844dbe0b09e693d6c9c4ab1e58c58d3cb57fadd62521f6c83e0264cbcbc878f5f19d50ed7c402d2902151fdf00db13ab1d0ead66442f545012807fe4dbacd93b3fd0c1f5d3c95331016cf83874163191f7a2e6e695e652efd7557bb4c132cc9f84153cc5aee63bc94991708bedc438c3df3435d75e7995656eab7446db8560130780c9ab52892442ce369683487df6f1b11e66f799940ec28023b35a9e8f32797b0f375396898169270570ab2b49c6ff25d4e77dc13947ff110c1f4e410d61f27d4345044a671fbb4f872c4a900f0aa6874dc6383a3b416e35e972693cba0a5a0a07bbe96bc5467f12092cc7023e3528f3ad6f9de01dbb5d2d32b01868c2342eb482fd2ef18765f79f83eb72163ad80458075cca14952cf591d97d97bfe5c6f167586e9e4bd27990a2f2e13f553146ae3e33c68fcfdb486a2b96dfccd390e17025a2c3ea1ff8f89e80fc10af981ae45891fc67c4ae2323383f543764241d33a1bcd382eea949f75cb444b7bd0e4261b1844b24a8c0b083b781cf4ae6805555815720fc9381423c39a3685013f3c6a21552267b1fd0d240cb783e495e4fce35b1e77f575fad7e8e098289a1b2a45d272004d6706c0af725c31044589838b13f2afb08f4a0c281c54e609564af0c130fa71135e733288f821cde6527689bcddd0953cb0f54744507c0ceb9839dc668bd9d1d22952abf061f5f28eecd8b9123b8f5b3e2ab1780b3008fe40fe24f58042f5e6db8205bcde6b365dc67f41e0d6bdbbf05f84eed5216e5a6a9eb69017fa2926af8bf538c0b67bb7f0dac5f2b56e8ed969d70bceb35e986eb64419f57431870bcc6e2f8b3b62888f4474ec5028b6f4f78965ff761bb41f9ed0cda729029a159f9216aa9a8009012355f190083857748634ee538a0e8edd985dca19e4bb1a3f06290049730b2d5924eba135d2bc0dcf1e1e6242c5ed9341352387066cd6481602d64ce65ed35f06e656efe4e62e560ecab35319c2f4246b07f6480d0465c71750e5f30e0532a67e733f9d4dc40347c361727ead149bc4cc2504374e86fe682bf8e17bac298f8831787f47214222d08d238ac44763bb4406f36549989f8d56812eeca9b506c50c8a2118bf34e235cc9f6ac91b2bc6ac2eda202ecf8a2842d181262fcdc207928a3752b902c44a5bb7a0c9c72b498cf4151e6dd782a6351599c01d143fd1ead08e146b42e245a08197737353fb411fa3b1c10287822b0db4d6373a77ff32a0bf6d8379bc67a622285e0a2b1418008f57a7a20b528405855c4dc2586a70564f87c3157f51cbc7e61dca324261563eea739bb64234adab2f546b53593de4de8da820c7c42a67fd49aeaa8232d00e7bd0f373d5d22aa16bb5cb5571270e669ea6cdfc60e423eaf67609ba1f2cc3f4bc4619566919aac49f8d006e681883da2fab21c0d084a8e9cc3383e1c44a70d6f1a6017768c9a119634b88f4438d70f1cb08132da038f7abd21c2aa14931de7cf4c22fe161712b6f0a25a465c6117d288e5d4ea450a706814514e41fa11662dfc30a4ce206433d513ba1b0e791719cf17df47c560a11fcc45b604850281b5c3ef149f5009712ab40073a20c48c5a4ed501fefd0fe71ec906c30ce47191289afcee07c12ec8ed1773f8be1c5285bab70a50c046d35f93e51776baf4ea262b30753f09ae2032ccc36bc03b18a5d6feb091e27a4cfc2afab620fed4e54862ddbe3c5bf941c7bf9791d19100e4c34915487aa9fbd9f4962bc3baa9a40d3fdba61561f1ad35aa95beaf3cceb29049c1492d0d68c874737b55badf965c9bcf8c867bc6a01d3e62f5f40baf56a37b99e49a975635c506085dbeb9850091a297bff7e18ab4c02d7f35978005af38e341f12e24ed812668ae55a00e79330e6c67c7398f2b3c2a211aca55df5508437c101882920f0952937d5b868b5f945d723e0b1b36e454393983496f5a9563e8b6ca7e15c41145b7568022afd2df233d07c02e56757a9cad2dd72f16ed542f05dd6598c1f55c048092f98081efdcbd5475bd1b4ce5019645d6644037158c4d8c53b4073a6a01600f98c28b74af080b41d28c1929faf2b0862b0efeb27ce22eb2aa1d83d9dcf1dd1a67c5407bff38f3b95feeef5e2d480901a37cffe8afc84005f1cf9846176bb178704a29e6897623ec7dc28b23a06cf7dc632ab5af02660eebc7ee28c96b5953483d05261f5b09f8044efeccb4a912262838dcda8860253bcbe714becd5e7f3081bd8d645882777bb9f3026eb523e1349b7cd2c7ff64ae07347cd4804b14bed65deaf29f723eab898b24415b885983b60bcafb46fc9feeab1c52b5cb7b0c02ed6867d9bb411a2db18d89fffb5d92b8d47598b7f24d1fdc04c7a3cdd1ac7e04d8eb527d7f3697336814257e7bfaa0b9675063993dbed32b7d6e3c062fb83d63f6129be0753dfb70ec95dd7cd063795c4b56102fd536b4b7432b065fe667fffcf0ae95132cc7b840ee12233b451dd5caf89f482fb258eef8f6100be4a9a6687e094fd5030fe500268335ef18fac8bb56755f98a217ed5249b13c9253c13cb482e644d88e256cd0003af43429cbe706c652950ffc9db8f1ec09dcc79713142e530e001cce089e4309c9490bc2bbd32f4f2c652c524b139551290b03b44c9bc28caaa80ff72782dffb0aa203095bfb11b4dc15c0dfe7aa21944f042508dcf2df8f48bc1428ba00829f804db311adac05c1c31ae79c713b46ca6694ce7b2e204b14df3d23ee5800c652eb702f6a0760d7ba2efa051cd25e8ca076e4243d010d09aa0bfacdbe1fc81d6889f0ac4721669c929c2f96e550d0d25f59a3605b929475bf13a1d632dfa715d8f44aeb34b55ce29ca91d86c52a1a1ce846cb77bbfc3b7ad94b8a98c9b1a234ac4c6cce27318fa8fec4dfb4153a25714db2d7e9f75365ca1c660d222416c6f55d8a84c8ab7dbc2e64081253d740a24efeb2e411b703a8d8e3e0ba5a50789df0e4a669cbb6f5415d3854b27d1cb7b867840fbb18a309d23fe0c89db05639d48ab93da7ce8ed7ec07ba680ed3c5a72ae8eee7d1912cd2c65565fd191be7ff43b31a999d03f1bc850505b78099efb01a25be6b676271df0b2c364280a74bf4f3b3c18359973d3152017faf5c10ebedbdafcd866745b0b51b1fad1819eca58f110a152b9b2680c65b91c0b6d5f614bbbfb7c884dba577c22e6889fa030951276bfe83ede3a35cb9244d4a34ac59c880fe841aa09818bde03360ba87fc9b05fcc24d84fc6c49f3b69df4e12aae23d58785ceb21a8973fddf6ef29e1160bf2a5236965de38f54b95bccc21672763df75acb7e398990e3af137db81f129e25809ff9e33d11d62057d4d973d18329ea0da86695e7f5b24d745d5ebf668829b58c01b7deeab9ffd3136cc529b440613fc7438b1d3bf5d0fb90cb8c6feeff419cf831772a22e21bfb5d14d98ca8fb0d16b89ff02fbcf660351706ebd91306d44fa28df324ef07762a1d450e5a599c6ed3f25f8944dccd860de3d8f3deab27bf54376dccb9ba708a70a0acc7d0fbc2d9f8d44fb0a55a1a51a30272a5eada7dcafeb1143e5f381638ed5224c8ef2ca3e29f7a8d6d356417bb5ed17c04382d88589ab1c946516f8bd002201db7ee8fb48d186d648962c46921a94b01c04800dcf76d439ea5ed57a2c7d095637c008fcea84610fa2595ef0043ebe64ed08cd6b749a91d9f70a3738475c5990bf519623d98644f9abbe1290888921c924eb2bf5c1cf29bb0dd13e253c3d97e03065d84463c3fefb2720591c2a2f6267936e18fc26385568e38e9a8c0bd7b794dfaf078005218dc9a8075dd07f4d2fe06edbc6c62555d8e5690d5d626c1172b5863232ec683f0065af57734ab1f1933ef84ef23f64dc40dc7e94282849c15e5d0e0ae47b9fa84fb6155baa08c02b74366022cce15dec0f71702cb3ff81e42608877aba15a16b9aecb3afccaa078a9cc5e51ff32ac4a2e946e402fb9bdaef990247e84e8899843886f7914d8d7d080b83b3d6507a8a132a77e6f9f8e5f8fa170a69280fed5d30c2902566e7233483f93c4cc05fb93d7fa6d7bf9a882d3a3a0a40b9c1bc18211", 0x1000, r5) r7 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000001280)="5ccd0d34ee4d34870aaf2909c96a6b84588a10a94653342d84186a883e5e539672e0be0ce21f6292b01495bd570ff8e04da18658f3802b19baab144867b660a2c29e69d737b6b6dde83e466a3398bea9416c728ec12c0eacc99fe5caee56cd77128176d3700668ce13582c3d82ecfa75ada516003d73006b51bbf175b80a23ec630073420f06", 0x86, 0xfffffffffffffffc) r8 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r9 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000a40)='h', 0x1, r8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f00000000c0)='blacklist\x00', 0x0) keyctl$dh_compute(0x17, &(0x7f0000001340)={r6, r7, r9}, &(0x7f0000001380)=""/70, 0x46, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$VIDIOC_S_MODULATOR(r3, 0x40445637, &(0x7f0000000040)={0x400, "9d2ec2e3e478b6584823bafca509acb0e8e10a71dacf0dc3ad031bb9b10faa08", 0x100, 0x7, 0x30a0f3d2, 0x4, 0x5}) [ 846.911067][T11483] bond271: (slave bridge466): Enslaving as an active interface with an up link [ 846.945168][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bond271: link becomes ready [ 846.965987][T11472] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 847.030451][T11483] bond271: (slave bridge467): Enslaving as an active interface with a down link [ 847.156193][ T3178] usb 1-1: Using ep0 maxpacket: 8 [ 847.274230][ T3178] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 847.282521][ T3178] usb 1-1: config 0 has no interface number 0 [ 847.290519][ T3178] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 847.302538][ T3178] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 847.314105][ T3178] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 847.324316][ T3178] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 847.334775][ T3178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.344840][ T3178] usb 1-1: config 0 descriptor?? [ 847.363405][T11474] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 847.377609][T11474] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 847.619790][T11474] FAULT_INJECTION: forcing a failure. [ 847.619790][T11474] name failslab, interval 1, probability 0, space 0, times 0 [ 847.639421][T11474] CPU: 1 PID: 11474 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 847.648208][T11474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 847.658266][T11474] Call Trace: [ 847.661616][T11474] dump_stack+0x18f/0x20d [ 847.665961][T11474] should_fail.cold+0x5/0x14 [ 847.670746][T11474] should_failslab+0x5/0xf [ 847.675176][T11474] kmem_cache_alloc_trace+0x240/0x2d0 [ 847.680548][T11474] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 847.686539][T11474] snd_seq_port_connect+0x5d/0x520 [ 847.691670][T11474] ? _raw_read_unlock+0x24/0x40 [ 847.696538][T11474] ? check_subscription_permission.isra.0+0x16a/0x260 [ 847.703310][T11474] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 847.709476][T11474] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 847.715814][T11474] ? mark_held_locks+0x9f/0xe0 [ 847.720589][T11474] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 847.726412][T11474] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 847.732405][T11474] snd_seq_kernel_client_ctl+0xeb/0x130 [ 847.737964][T11474] snd_seq_oss_midi_open+0x466/0x6e0 [ 847.743262][T11474] ? snd_seq_oss_midi_setup+0x50/0x50 [ 847.748636][T11474] ? mark_held_locks+0x9f/0xe0 [ 847.753410][T11474] ? lockdep_hardirqs_on+0x6a/0xe0 [ 847.758519][T11474] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 847.764318][T11474] ? get_mdev+0x75/0x90 [ 847.768488][T11474] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 847.774379][T11474] snd_seq_oss_open+0x87e/0xa10 [ 847.779239][T11474] odev_open+0x6c/0x90 [ 847.783310][T11474] ? odev_release+0x70/0x70 [ 847.787922][T11474] soundcore_open+0x445/0x600 [ 847.792616][T11474] ? sound_devnode+0xf0/0xf0 [ 847.797193][T11474] chrdev_open+0x266/0x770 [ 847.801616][T11474] ? cdev_device_add+0x210/0x210 [ 847.806554][T11474] ? security_file_open+0x1f5/0x3f0 [ 847.811746][T11474] do_dentry_open+0x501/0x1290 [ 847.816511][T11474] ? cdev_device_add+0x210/0x210 [ 847.821431][T11474] path_openat+0x1bb9/0x2750 [ 847.826046][T11474] ? path_lookupat+0x830/0x830 [ 847.830812][T11474] ? __lockdep_free_key_range+0x110/0x110 [ 847.836527][T11474] ? lock_is_held_type+0xb0/0xe0 [ 847.841471][T11474] do_filp_open+0x17e/0x3c0 [ 847.845970][T11474] ? may_open_dev+0xf0/0xf0 [ 847.850471][T11474] ? do_raw_spin_lock+0x120/0x2b0 [ 847.855482][T11474] ? rwlock_bug.part.0+0x90/0x90 [ 847.860402][T11474] ? _raw_spin_unlock+0x24/0x40 [ 847.865241][T11474] ? __alloc_fd+0x28d/0x600 [ 847.869764][T11474] do_sys_openat2+0x16f/0x3b0 [ 847.874433][T11474] ? build_open_flags+0x650/0x650 [ 847.879552][T11474] ? __mutex_unlock_slowpath+0xe2/0x610 [ 847.885105][T11474] ? wait_for_completion+0x260/0x260 [ 847.890396][T11474] __x64_sys_openat+0x13f/0x1f0 [ 847.895678][T11474] ? __ia32_sys_open+0x1c0/0x1c0 [ 847.900847][T11474] ? ksys_write+0x1a5/0x250 [ 847.905440][T11474] ? lock_is_held_type+0xb0/0xe0 [ 847.910403][T11474] ? do_syscall_64+0x1c/0xe0 [ 847.915087][T11474] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 847.921130][T11474] do_syscall_64+0x60/0xe0 [ 847.925562][T11474] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 847.932419][T11474] RIP: 0033:0x45cba9 [ 847.936323][T11474] Code: Bad RIP value. [ 847.940381][T11474] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 847.948785][T11474] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 847.956941][T11474] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 847.964991][T11474] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 847.973483][T11474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 847.981461][T11474] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 [ 848.013417][ T3178] usb 1-1: USB disconnect, device number 113 03:39:02 executing program 0 (fault-call:2 fault-nth:21): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:39:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x5], 0x1c}, 0xd}, 0x1c) 03:39:02 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0xc00) 03:39:02 executing program 5: perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xab) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0xa0, 0xfffffffffffffff5, 0x5, {{0x0, 0x0, 0x0, 0x0, 0x101, 0x9, {0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x8, 0x0, 0x8}}, {0x0, 0x2}}}, 0xa0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 03:39:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29439, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:39:02 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x4c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040001}, 0x8000) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r3 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r3, 0x0) 03:39:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x6], 0x1c}, 0xd}, 0x1c) [ 848.591740][T11587] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:39:02 executing program 5: getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xab) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') setsockopt$inet_buf(r3, 0x0, 0x24, &(0x7f0000000040)="2c5dcd7d5f64e973c852639fd6", 0xd) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000080)=0x4, 0x4) process_vm_writev(r1, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/255, 0xff}, {&(0x7f0000000640)=""/269, 0x10d}, {&(0x7f00000003c0)=""/85, 0x55}], 0x3, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f00000000c0)={'vlan1\x00', 0x9}) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0xa0, 0xfffffffffffffff5, 0x5, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x9, {0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x7ff, 0x0, 0x9}}, {0x0, 0x2}}}, 0xa0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0xa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=ANY=[@ANYBLOB="3800000024800b0f00000000000000000000000066c201258e2cf3f3dec6e7af67fbe57521f5e80089a0c7dd298e6ce0d66d622c47291b25fcc9e75f1879401d056d52873018fc9bc7a45bf8c288f373c81ee7fe0aa6a0b6e39ff1ab064dd65c6965d016f388073cb3b8ce602476f2a862930ed1cc13272eb56d0276d4591a4e9f3427c86a17bc4f32e41c2e2dcaaeadc40a0b8a220f7b39e7b04d3c2490799728967e61dd6458115b3752ac8f50117ec04de6cf7021e47a4478e4bbf153e9d86ecfb09899c312a68e796cc10252cd3eee4314f084cb9744f81f81c3df6abff538ff3ca603fd0f256880a0c91326d442000000000000000000", @ANYRES32=r6, @ANYBLOB="00000000ffff0dc61e00000007000100e67100000c0002000800040000000000186b2dc55e909b31e25ea5fde5c066abb3bdc0070d9dc0b0a3bdaa5c500139be04d9cb90a2b30edd"], 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6gre0\x00', r6, 0x2f, 0x0, 0x7, 0x0, 0x0, @remote, @remote, 0x7800, 0x8000, 0x6, 0x4}}) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xc2) 03:39:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x7], 0x1c}, 0xd}, 0x1c) [ 848.852203][T11587] 8021q: adding VLAN 0 to HW filter on device bond272 03:39:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x8], 0x1c}, 0xd}, 0x1c) [ 848.921931][T11593] bond272: (slave bridge468): making interface the new active one [ 848.934169][ T3182] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 848.952289][T11593] bond272: (slave bridge468): Enslaving as an active interface with an up link 03:39:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x9], 0x1c}, 0xd}, 0x1c) [ 848.999260][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bond272: link becomes ready 03:39:03 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0xe00) [ 849.042856][T11587] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 849.084752][T11593] bond272: (slave bridge469): Enslaving as an active interface with a down link [ 849.202634][ T3182] usb 1-1: Using ep0 maxpacket: 8 [ 849.343382][ T3182] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 849.351421][ T3182] usb 1-1: config 0 has no interface number 0 [ 849.373453][ T3182] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 849.385553][ T3182] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 849.397357][ T3182] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 849.411940][ T3182] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 849.421583][ T3182] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.431947][ T3182] usb 1-1: config 0 descriptor?? [ 849.453078][T11594] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 849.462873][T11594] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 849.710621][T11594] FAULT_INJECTION: forcing a failure. [ 849.710621][T11594] name failslab, interval 1, probability 0, space 0, times 0 [ 849.731304][T11594] CPU: 1 PID: 11594 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 849.740009][T11594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 849.750070][T11594] Call Trace: [ 849.753454][T11594] dump_stack+0x18f/0x20d [ 849.767430][T11594] should_fail.cold+0x5/0x14 [ 849.772014][T11594] should_failslab+0x5/0xf [ 849.776417][T11594] kmem_cache_alloc_trace+0x240/0x2d0 [ 849.781858][T11594] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 849.787823][T11594] snd_seq_port_connect+0x5d/0x520 [ 849.792917][T11594] ? _raw_read_unlock+0x24/0x40 [ 849.797834][T11594] ? check_subscription_permission.isra.0+0x16a/0x260 [ 849.804577][T11594] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 849.810453][T11594] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 849.816766][T11594] ? mark_held_locks+0x9f/0xe0 [ 849.821530][T11594] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 849.827344][T11594] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 849.833313][T11594] snd_seq_kernel_client_ctl+0xeb/0x130 [ 849.838860][T11594] snd_seq_oss_midi_open+0x466/0x6e0 [ 849.844130][T11594] ? snd_seq_oss_midi_setup+0x50/0x50 [ 849.849535][T11594] ? mark_held_locks+0x9f/0xe0 [ 849.854299][T11594] ? lockdep_hardirqs_on+0x6a/0xe0 [ 849.859398][T11594] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 849.865330][T11594] ? get_mdev+0x75/0x90 [ 849.869491][T11594] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 849.875487][T11594] snd_seq_oss_open+0x87e/0xa10 [ 849.880351][T11594] odev_open+0x6c/0x90 [ 849.885307][T11594] ? odev_release+0x70/0x70 [ 849.890982][T11594] soundcore_open+0x445/0x600 [ 849.895659][T11594] ? sound_devnode+0xf0/0xf0 [ 849.900238][T11594] chrdev_open+0x266/0x770 [ 849.904641][T11594] ? cdev_device_add+0x210/0x210 [ 849.909581][T11594] ? security_file_open+0x1f5/0x3f0 [ 849.929631][T11594] do_dentry_open+0x501/0x1290 [ 849.934381][T11594] ? cdev_device_add+0x210/0x210 [ 849.939304][T11594] path_openat+0x1bb9/0x2750 [ 850.058639][T11594] ? lockdep_hardirqs_on_prepare+0x320/0x590 [ 850.064615][T11594] ? path_lookupat+0x830/0x830 [ 850.069368][T11594] ? __lockdep_free_key_range+0x110/0x110 [ 850.075084][T11594] ? lock_is_held_type+0xb0/0xe0 [ 850.090610][T11594] do_filp_open+0x17e/0x3c0 [ 850.095097][T11594] ? may_open_dev+0xf0/0xf0 [ 850.099694][T11594] ? do_raw_spin_lock+0x120/0x2b0 [ 850.104803][T11594] ? rwlock_bug.part.0+0x90/0x90 [ 850.110454][T11594] ? _raw_spin_unlock+0x24/0x40 [ 850.115313][T11594] ? __alloc_fd+0x28d/0x600 [ 850.119810][T11594] do_sys_openat2+0x16f/0x3b0 [ 850.124562][T11594] ? build_open_flags+0x650/0x650 [ 850.129583][T11594] ? clockevents_program_event+0x12b/0x350 [ 850.135375][T11594] ? hrtimer_interrupt+0x6ea/0x930 [ 850.140468][T11594] __x64_sys_openat+0x13f/0x1f0 [ 850.145320][T11594] ? __ia32_sys_open+0x1c0/0x1c0 [ 850.150241][T11594] ? sched_clock_cpu+0x18/0x1b0 [ 850.155451][T11594] ? lock_is_held_type+0xb0/0xe0 [ 850.160371][T11594] ? do_syscall_64+0x1c/0xe0 [ 850.164944][T11594] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 850.170909][T11594] do_syscall_64+0x60/0xe0 [ 850.175310][T11594] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 850.181181][T11594] RIP: 0033:0x45cba9 [ 850.185145][T11594] Code: Bad RIP value. [ 850.189189][T11594] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 850.197580][T11594] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 850.205531][T11594] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 850.213482][T11594] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 850.221432][T11594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 850.229495][T11594] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 [ 850.305259][ T1236] usb 1-1: USB disconnect, device number 114 03:39:04 executing program 0 (fault-call:2 fault-nth:22): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:39:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0xa], 0x1c}, 0xd}, 0x1c) 03:39:04 executing program 5: getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xab) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') setsockopt$inet_buf(r3, 0x0, 0x24, &(0x7f0000000040)="2c5dcd7d5f64e973c852639fd6", 0xd) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000080)=0x4, 0x4) process_vm_writev(r1, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/255, 0xff}, {&(0x7f0000000640)=""/269, 0x10d}, {&(0x7f00000003c0)=""/85, 0x55}], 0x3, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f00000000c0)={'vlan1\x00', 0x9}) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0xa0, 0xfffffffffffffff5, 0x5, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x9, {0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x7ff, 0x0, 0x9}}, {0x0, 0x2}}}, 0xa0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0xa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=ANY=[@ANYBLOB="3800000024800b0f00000000000000000000000066c201258e2cf3f3dec6e7af67fbe57521f5e80089a0c7dd298e6ce0d66d622c47291b25fcc9e75f1879401d056d52873018fc9bc7a45bf8c288f373c81ee7fe0aa6a0b6e39ff1ab064dd65c6965d016f388073cb3b8ce602476f2a862930ed1cc13272eb56d0276d4591a4e9f3427c86a17bc4f32e41c2e2dcaaeadc40a0b8a220f7b39e7b04d3c2490799728967e61dd6458115b3752ac8f50117ec04de6cf7021e47a4478e4bbf153e9d86ecfb09899c312a68e796cc10252cd3eee4314f084cb9744f81f81c3df6abff538ff3ca603fd0f256880a0c91326d442000000000000000000", @ANYRES32=r6, @ANYBLOB="00000000ffff0dc61e00000007000100e67100000c0002000800040000000000186b2dc55e909b31e25ea5fde5c066abb3bdc0070d9dc0b0a3bdaa5c500139be04d9cb90a2b30edd"], 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6gre0\x00', r6, 0x2f, 0x0, 0x7, 0x0, 0x0, @remote, @remote, 0x7800, 0x8000, 0x6, 0x4}}) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xc2) 03:39:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2943a, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:39:04 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0xf00) 03:39:04 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x40}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x5, @mcast1, 0xffff7fff}}, 0xf7, 0x101}, &(0x7f0000000180)=0x90) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = syz_open_dev$vcsn(&(0x7f0000000480)='/dev/vcs#\x00', 0x0, 0x200) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x20, 0x5, 0x40, 0x4, 0x0, 0x400, 0x100, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_config_ext={0xfffffffffffffff9, 0xffffffffffff8001}, 0x4, 0x4, 0x3, 0x5, 0x10001, 0x9, 0x1}, 0x0, 0x6, r5, 0x1) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x40000, 0x0) ioctl$TCGETS2(r6, 0x802c542a, &(0x7f00000003c0)) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000340)={0x0, r0+30000000}, 0x0) r7 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) openat$cgroup_ro(r8, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) 03:39:05 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r3 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cpuinfo\x00', 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r5, &(0x7f00000017c0), 0x2d, 0x0) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_DECODER_CMD(r6, 0xc0485660, &(0x7f00000000c0)={0x1, 0x1, @stop_pts=0x2d}) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r3, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x680a4ed99ca74d70) fsetxattr(r7, &(0x7f0000000000)=@known='trusted.overlay.impure\x00', &(0x7f0000000040)='&\x8f\x00', 0x3, 0x1) [ 850.868949][T11706] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 850.906304][T11706] 8021q: adding VLAN 0 to HW filter on device bond273 [ 850.987813][T11744] bond273: (slave bridge470): making interface the new active one [ 850.999631][T11744] bond273: (slave bridge470): Enslaving as an active interface with an up link [ 851.009688][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): bond273: link becomes ready [ 851.023950][T11706] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:39:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0xe], 0x1c}, 0xd}, 0x1c) 03:39:05 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0x3703) [ 851.049391][T11744] bond273: (slave bridge471): Enslaving as an active interface with a down link 03:39:05 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f00000002c0)='GPL\x00', 0x5, 0xb9, &(0x7f0000000300)=""/185, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0xf, 0x0, 0x1}, 0x10}, 0x78) 03:39:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2943b, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:39:05 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0x3f00) [ 851.232731][ T1236] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 851.307472][T11766] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 851.368816][T11766] 8021q: adding VLAN 0 to HW filter on device bond274 [ 851.393528][T11787] bond274: (slave bridge472): making interface the new active one [ 851.404436][T11787] bond274: (slave bridge472): Enslaving as an active interface with an up link [ 851.414307][T29962] IPv6: ADDRCONF(NETDEV_CHANGE): bond274: link becomes ready [ 851.429989][T11766] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 851.456822][T11787] bond274: (slave bridge473): Enslaving as an active interface with a down link [ 851.482540][ T1236] usb 1-1: Using ep0 maxpacket: 8 [ 851.612797][ T1236] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 851.620815][ T1236] usb 1-1: config 0 has no interface number 0 [ 851.627400][ T1236] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 851.638793][ T1236] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 851.649215][ T1236] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 851.659108][ T1236] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 851.668245][ T1236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.680798][ T1236] usb 1-1: config 0 descriptor?? [ 851.704226][T11721] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 851.711804][T11721] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 851.948809][T11721] FAULT_INJECTION: forcing a failure. [ 851.948809][T11721] name failslab, interval 1, probability 0, space 0, times 0 [ 851.961905][T11721] CPU: 1 PID: 11721 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 851.970590][T11721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 851.980737][T11721] Call Trace: [ 851.984038][T11721] dump_stack+0x18f/0x20d [ 851.988385][T11721] should_fail.cold+0x5/0x14 [ 851.992992][T11721] should_failslab+0x5/0xf [ 851.997417][T11721] kmem_cache_alloc_trace+0x240/0x2d0 [ 852.002795][T11721] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 852.008785][T11721] snd_seq_port_connect+0x5d/0x520 [ 852.013905][T11721] ? _raw_read_unlock+0x24/0x40 [ 852.018762][T11721] ? check_subscription_permission.isra.0+0x16a/0x260 [ 852.025537][T11721] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 852.031427][T11721] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 852.037664][T11721] ? mark_held_locks+0x9f/0xe0 [ 852.042437][T11721] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 852.048250][T11721] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 852.054244][T11721] snd_seq_kernel_client_ctl+0xeb/0x130 [ 852.059896][T11721] snd_seq_oss_midi_open+0x466/0x6e0 [ 852.065263][T11721] ? snd_seq_oss_midi_setup+0x50/0x50 [ 852.070627][T11721] ? mark_held_locks+0x9f/0xe0 [ 852.075378][T11721] ? lockdep_hardirqs_on+0x6a/0xe0 [ 852.080734][T11721] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 852.086533][T11721] ? get_mdev+0x75/0x90 [ 852.090684][T11721] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 852.096602][T11721] snd_seq_oss_open+0x87e/0xa10 [ 852.101437][T11721] odev_open+0x6c/0x90 [ 852.105590][T11721] ? odev_release+0x70/0x70 [ 852.110105][T11721] soundcore_open+0x445/0x600 [ 852.114794][T11721] ? sound_devnode+0xf0/0xf0 [ 852.119374][T11721] chrdev_open+0x266/0x770 [ 852.123807][T11721] ? cdev_device_add+0x210/0x210 [ 852.128770][T11721] ? security_file_open+0x1f5/0x3f0 [ 852.134036][T11721] do_dentry_open+0x501/0x1290 [ 852.138797][T11721] ? cdev_device_add+0x210/0x210 [ 852.143822][T11721] path_openat+0x1bb9/0x2750 [ 852.148445][T11721] ? path_lookupat+0x830/0x830 [ 852.153221][T11721] ? __lockdep_free_key_range+0x110/0x110 [ 852.158956][T11721] ? lock_is_held_type+0xb0/0xe0 [ 852.163891][T11721] do_filp_open+0x17e/0x3c0 [ 852.168396][T11721] ? may_open_dev+0xf0/0xf0 [ 852.172911][T11721] ? do_raw_spin_lock+0x120/0x2b0 [ 852.177924][T11721] ? rwlock_bug.part.0+0x90/0x90 [ 852.182870][T11721] ? _raw_spin_unlock+0x24/0x40 [ 852.187711][T11721] ? __alloc_fd+0x28d/0x600 [ 852.192199][T11721] do_sys_openat2+0x16f/0x3b0 [ 852.196859][T11721] ? build_open_flags+0x650/0x650 [ 852.201864][T11721] ? __mutex_unlock_slowpath+0xe2/0x610 [ 852.207406][T11721] ? wait_for_completion+0x260/0x260 [ 852.212701][T11721] __x64_sys_openat+0x13f/0x1f0 [ 852.217546][T11721] ? __ia32_sys_open+0x1c0/0x1c0 [ 852.222468][T11721] ? ksys_write+0x1a5/0x250 [ 852.227060][T11721] ? lock_is_held_type+0xb0/0xe0 [ 852.232009][T11721] ? do_syscall_64+0x1c/0xe0 [ 852.236593][T11721] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 852.242586][T11721] do_syscall_64+0x60/0xe0 [ 852.247009][T11721] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 852.252901][T11721] RIP: 0033:0x45cba9 [ 852.256787][T11721] Code: Bad RIP value. [ 852.260852][T11721] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 852.269255][T11721] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 852.277221][T11721] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 852.285185][T11721] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 852.293156][T11721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 852.301119][T11721] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 [ 852.326104][ T1236] usb 1-1: USB disconnect, device number 115 03:39:06 executing program 0 (fault-call:2 fault-nth:23): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:39:06 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r3}, 0x8) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r4 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCCBRK(r6, 0x5428) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r4, 0x0) 03:39:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, 0x1c}}, 0x80) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) gettid() setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1b08}], 0x1) 03:39:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x10], 0x1c}, 0xd}, 0x1c) 03:39:06 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0x4000) 03:39:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2943c, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 852.899954][T11857] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:39:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x48], 0x1c}, 0xd}, 0x1c) [ 853.041466][T11857] 8021q: adding VLAN 0 to HW filter on device bond275 [ 853.119972][T11866] bond275: (slave bridge474): making interface the new active one [ 853.150153][T11866] bond275: (slave bridge474): Enslaving as an active interface with an up link 03:39:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x4c], 0x1c}, 0xd}, 0x1c) 03:39:07 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0x5865) [ 853.182730][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): bond275: link becomes ready [ 853.202624][ T1236] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 853.212171][T11857] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 853.264417][T11866] bond275: (slave bridge475): Enslaving as an active interface with a down link 03:39:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x50], 0x1c}, 0xd}, 0x1c) 03:39:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2943d, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:39:07 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0x6000) [ 853.442960][ T1236] usb 1-1: Using ep0 maxpacket: 8 [ 853.489863][T11920] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 853.562859][ T1236] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 853.577012][T11920] 8021q: adding VLAN 0 to HW filter on device bond276 [ 853.589338][ T1236] usb 1-1: config 0 has no interface number 0 [ 853.602219][ T1236] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 853.620740][ T1236] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 853.627781][T11947] bond276: (slave bridge476): making interface the new active one [ 853.631136][ T1236] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 853.645047][T11947] bond276: (slave bridge476): Enslaving as an active interface with an up link [ 853.656268][ T1236] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 853.662861][T29962] IPv6: ADDRCONF(NETDEV_CHANGE): bond276: link becomes ready [ 853.667523][ T1236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.684273][ T1236] usb 1-1: config 0 descriptor?? [ 853.712832][T11862] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 853.719816][T11862] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 853.729381][T11920] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 853.820008][T11947] bond276: (slave bridge477): Enslaving as an active interface with a down link [ 854.057356][T11862] FAULT_INJECTION: forcing a failure. [ 854.057356][T11862] name failslab, interval 1, probability 0, space 0, times 0 [ 854.109664][T11862] CPU: 1 PID: 11862 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 854.118485][T11862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 854.128544][T11862] Call Trace: [ 854.131851][T11862] dump_stack+0x18f/0x20d [ 854.136206][T11862] should_fail.cold+0x5/0x14 [ 854.140808][T11862] should_failslab+0x5/0xf [ 854.145275][T11862] kmem_cache_alloc_trace+0x240/0x2d0 [ 854.150749][T11862] snd_seq_port_connect+0x5d/0x520 [ 854.156059][T11862] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 854.161963][T11862] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 854.168213][T11862] ? mark_held_locks+0x9f/0xe0 [ 854.172987][T11862] ? sched_clock+0x2a/0x40 [ 854.177470][T11862] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 854.183384][T11862] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 854.189469][T11862] snd_seq_kernel_client_ctl+0xeb/0x130 [ 854.195035][T11862] snd_seq_oss_midi_open+0x466/0x6e0 [ 854.200331][T11862] ? snd_seq_oss_midi_setup+0x50/0x50 [ 854.205760][T11862] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 854.211578][T11862] ? get_mdev+0x75/0x90 [ 854.215747][T11862] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 854.221662][T11862] snd_seq_oss_open+0x87e/0xa10 [ 854.226523][T11862] odev_open+0x6c/0x90 [ 854.230597][T11862] ? odev_release+0x70/0x70 [ 854.235105][T11862] soundcore_open+0x445/0x600 [ 854.239815][T11862] ? sound_devnode+0xf0/0xf0 [ 854.244407][T11862] chrdev_open+0x266/0x770 [ 854.248825][T11862] ? cdev_device_add+0x210/0x210 [ 854.253951][T11862] ? security_file_open+0x1f5/0x3f0 [ 854.259157][T11862] do_dentry_open+0x501/0x1290 [ 854.263928][T11862] ? cdev_device_add+0x210/0x210 [ 854.269317][T11862] path_openat+0x1bb9/0x2750 [ 854.274032][T11862] ? path_lookupat+0x830/0x830 [ 854.278903][T11862] ? __lockdep_free_key_range+0x110/0x110 [ 854.284627][T11862] ? kvm_sched_clock_read+0x14/0x40 [ 854.289877][T11862] ? sched_clock+0x2a/0x40 [ 854.294409][T11862] do_filp_open+0x17e/0x3c0 [ 854.298919][T11862] ? may_open_dev+0xf0/0xf0 [ 854.303452][T11862] ? _raw_spin_unlock+0x24/0x40 [ 854.308307][T11862] ? __alloc_fd+0x28d/0x600 [ 854.312996][T11862] do_sys_openat2+0x16f/0x3b0 [ 854.317677][T11862] ? build_open_flags+0x650/0x650 [ 854.323004][T11862] ? clockevents_program_event+0x12b/0x350 [ 854.328821][T11862] ? hrtimer_interrupt+0x6ea/0x930 [ 854.333948][T11862] __x64_sys_openat+0x13f/0x1f0 [ 854.338913][T11862] ? __ia32_sys_open+0x1c0/0x1c0 [ 854.343877][T11862] ? sched_clock_cpu+0x18/0x1b0 [ 854.348775][T11862] ? lock_is_held_type+0xb0/0xe0 [ 854.353940][T11862] ? do_syscall_64+0x1c/0xe0 [ 854.358566][T11862] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 854.364554][T11862] do_syscall_64+0x60/0xe0 [ 854.368975][T11862] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 854.374877][T11862] RIP: 0033:0x45cba9 [ 854.378763][T11862] Code: Bad RIP value. [ 854.383177][T11862] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 854.391675][T11862] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 854.399646][T11862] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 854.407625][T11862] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 854.415702][T11862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 854.423790][T11862] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 [ 854.709979][ T1236] usb 1-1: USB disconnect, device number 116 03:39:09 executing program 0 (fault-call:2 fault-nth:24): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:39:09 executing program 5: socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x278801, 0x0) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000040)) 03:39:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x64], 0x1c}, 0xd}, 0x1c) 03:39:09 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0x6558) 03:39:09 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000009140)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r4, 0x390c179b360adb45}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r4, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r5}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r6) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0x5, 0xbf, 0xd, 0x40, 0x0, 0xa6e, 0x120c8, 0x9, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x1, 0x1}, 0x40000, 0x7f, 0x2fd, 0x6, 0x8, 0x0, 0x345}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x14001) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r9 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r9, 0x0) 03:39:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2943e, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:39:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x68], 0x1c}, 0xd}, 0x1c) [ 855.298922][T12012] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 855.367460][T12012] 8021q: adding VLAN 0 to HW filter on device bond277 [ 855.398471][T12020] bond277: (slave bridge478): making interface the new active one [ 855.410244][T12020] bond277: (slave bridge478): Enslaving as an active interface with an up link [ 855.420958][T29962] IPv6: ADDRCONF(NETDEV_CHANGE): bond277: link becomes ready [ 855.431935][T12020] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 855.499680][T12063] bond277: (slave bridge479): Enslaving as an active interface with a down link 03:39:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2943f, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:39:09 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0x8100) 03:39:09 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000002180), 0x3c3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x8, 0x5f, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) keyctl$reject(0x13, 0x0, 0x81, 0x4, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="844b0146df6284fce3d0d2d2f6b35075e8676fc1f1b4ad26987e9fc56d4bf6713fde2f74f1b611a8eaab26fe799d70f37f7c25bf2fc436bb685c2ba7eaec35170eba361033b9b672214f6245f34bdf0c149d6d92a8d06229a5f2642d643e00000000a1da9faaa4393b801366be17aedc64857a906870e319ffef22d32cbc122cd2e6c7544202019893b90bc806e23f487209a0009f9749edd23520b924260d89759c6857a36021d8498a5e17c6193265ab69c1ac4024ec85b2b983a5c18f3fd8026f8a933f2b0e6d55cb73141037bea7ae94e7109d8ae14dc56fa9ade6faa5ce437abbc1", @ANYRES64, @ANYRES64=r1, @ANYBLOB="9a6d6d914deae00cf393389db0537538627f15d04c61b4503b7c9e38a255cda556cb565047b8880a811977cee76302dba87d68f7a47195f6d59c935caa3e0491d95a51fe6247f8271b6aa3a44262ef2fb2"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="acfb287a8daf49d78420408126bf4a4e", 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000100), 0x4) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000000)) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) [ 855.555255][ T1236] usb 1-1: new high-speed USB device number 117 using dummy_hcd 03:39:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x6c], 0x1c}, 0xd}, 0x1c) 03:39:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x74], 0x1c}, 0xd}, 0x1c) [ 855.798623][T12076] 8021q: adding VLAN 0 to HW filter on device bond278 [ 855.806196][ T1236] usb 1-1: Using ep0 maxpacket: 8 [ 855.933861][ T1236] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 855.942068][ T1236] usb 1-1: config 0 has no interface number 0 [ 855.998098][T12100] bond278: (slave bridge480): making interface the new active one [ 856.001765][ T1236] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 856.053775][T12100] bond278: (slave bridge480): Enslaving as an active interface with an up link [ 856.084837][T29962] IPv6: ADDRCONF(NETDEV_CHANGE): bond278: link becomes ready [ 856.092006][ T1236] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 856.160592][T12100] bond278: (slave bridge481): Enslaving as an active interface with a down link [ 856.190893][T12076] validate_nla: 1 callbacks suppressed [ 856.190903][T12076] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 856.205881][ T1236] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 856.230275][ T1236] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 856.251122][ T1236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.261193][ T1236] usb 1-1: config 0 descriptor?? [ 856.292812][T12011] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 856.299762][T12011] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 856.518499][T12011] FAULT_INJECTION: forcing a failure. [ 856.518499][T12011] name failslab, interval 1, probability 0, space 0, times 0 [ 856.536057][T12011] CPU: 1 PID: 12011 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 856.544751][T12011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 856.554805][T12011] Call Trace: [ 856.558107][T12011] dump_stack+0x18f/0x20d [ 856.562458][T12011] should_fail.cold+0x5/0x14 [ 856.567072][T12011] should_failslab+0x5/0xf [ 856.571498][T12011] kmem_cache_alloc_trace+0x240/0x2d0 [ 856.576877][T12011] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 856.583165][T12011] snd_seq_port_connect+0x5d/0x520 [ 856.588457][T12011] ? _raw_read_unlock+0x24/0x40 [ 856.593317][T12011] ? check_subscription_permission.isra.0+0x16a/0x260 [ 856.600431][T12011] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 856.606336][T12011] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 856.612669][T12011] ? mark_held_locks+0x9f/0xe0 [ 856.617455][T12011] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 856.623267][T12011] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 856.629356][T12011] snd_seq_kernel_client_ctl+0xeb/0x130 [ 856.634999][T12011] snd_seq_oss_midi_open+0x466/0x6e0 [ 856.640296][T12011] ? snd_seq_oss_midi_setup+0x50/0x50 [ 856.645689][T12011] ? mark_held_locks+0x9f/0xe0 [ 856.650559][T12011] ? lockdep_hardirqs_on+0x6a/0xe0 [ 856.655676][T12011] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 856.661491][T12011] ? get_mdev+0x75/0x90 [ 856.665658][T12011] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 856.671572][T12011] snd_seq_oss_open+0x87e/0xa10 [ 856.676438][T12011] odev_open+0x6c/0x90 [ 856.680714][T12011] ? odev_release+0x70/0x70 [ 856.685230][T12011] soundcore_open+0x445/0x600 [ 856.689916][T12011] ? sound_devnode+0xf0/0xf0 [ 856.694535][T12011] chrdev_open+0x266/0x770 [ 856.698955][T12011] ? cdev_device_add+0x210/0x210 [ 856.703901][T12011] ? security_file_open+0x1f5/0x3f0 [ 856.709114][T12011] do_dentry_open+0x501/0x1290 [ 856.713998][T12011] ? cdev_device_add+0x210/0x210 [ 856.718959][T12011] path_openat+0x1bb9/0x2750 [ 856.723567][T12011] ? path_lookupat+0x830/0x830 [ 856.728344][T12011] ? __lockdep_free_key_range+0x110/0x110 [ 856.734066][T12011] ? lock_is_held_type+0xb0/0xe0 [ 856.739014][T12011] do_filp_open+0x17e/0x3c0 [ 856.743524][T12011] ? may_open_dev+0xf0/0xf0 [ 856.748037][T12011] ? do_raw_spin_lock+0x120/0x2b0 [ 856.753126][T12011] ? rwlock_bug.part.0+0x90/0x90 [ 856.758077][T12011] ? _raw_spin_unlock+0x24/0x40 [ 856.762927][T12011] ? __alloc_fd+0x28d/0x600 [ 856.767444][T12011] do_sys_openat2+0x16f/0x3b0 [ 856.772124][T12011] ? build_open_flags+0x650/0x650 [ 856.777166][T12011] ? __mutex_unlock_slowpath+0xe2/0x610 [ 856.782747][T12011] ? wait_for_completion+0x260/0x260 [ 856.788029][T12011] __x64_sys_openat+0x13f/0x1f0 [ 856.792865][T12011] ? __ia32_sys_open+0x1c0/0x1c0 [ 856.797832][T12011] ? ksys_write+0x1a5/0x250 [ 856.802329][T12011] ? lock_is_held_type+0xb0/0xe0 [ 856.807253][T12011] ? do_syscall_64+0x1c/0xe0 [ 856.811826][T12011] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 856.817787][T12011] do_syscall_64+0x60/0xe0 [ 856.822183][T12011] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 856.828055][T12011] RIP: 0033:0x45cba9 [ 856.831949][T12011] Code: Bad RIP value. [ 856.836008][T12011] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 856.844591][T12011] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 856.852593][T12011] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 856.860545][T12011] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 856.868498][T12011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 856.876460][T12011] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 [ 856.912516][ T3178] usb 1-1: USB disconnect, device number 117 03:39:11 executing program 0 (fault-call:2 fault-nth:25): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:39:11 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0xd801) 03:39:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x7a], 0x1c}, 0xd}, 0x1c) 03:39:11 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = fspick(r3, &(0x7f0000000000)='./file0\x00', 0x1) r5 = fcntl$dupfd(r1, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r6, 0x0) 03:39:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29440, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:39:11 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000200)={0x22135181, 0x7ff}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x18, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x4080) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e002a000000e8bd6efb250314000e000100240248ff050005001201", 0x2e}], 0x1, 0x0, 0x0, 0xfcffffff}, 0x0) 03:39:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:39:11 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0xf000) [ 857.501733][T12178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 857.528846][T12178] device batadv_slave_0 entered promiscuous mode 03:39:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x2], 0x1c}, 0xd}, 0x1c) [ 857.713207][T12179] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:39:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x3], 0x1c}, 0xd}, 0x1c) [ 857.786351][T12179] 8021q: adding VLAN 0 to HW filter on device bond279 [ 857.803181][ T3178] usb 1-1: new high-speed USB device number 118 using dummy_hcd 03:39:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x4], 0x1c}, 0xd}, 0x1c) 03:39:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x5], 0x1c}, 0xd}, 0x1c) [ 858.070462][ T3178] usb 1-1: Using ep0 maxpacket: 8 [ 858.090136][T12187] bond279: (slave bridge482): making interface the new active one [ 858.106947][T12187] bond279: (slave bridge482): Enslaving as an active interface with an up link [ 858.151936][T12179] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 858.172513][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bond279: link becomes ready [ 858.202432][ T3178] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 858.211587][ T3178] usb 1-1: config 0 has no interface number 0 [ 858.243928][T12187] bond279: (slave bridge483): Enslaving as an active interface with a down link [ 858.255017][ T3178] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 858.306328][ T3178] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 858.324271][ T3178] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 858.341847][ T3178] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 858.356856][ T3178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.376984][ T3178] usb 1-1: config 0 descriptor?? [ 858.403280][T12184] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 858.410419][T12184] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 858.706654][T12184] FAULT_INJECTION: forcing a failure. [ 858.706654][T12184] name failslab, interval 1, probability 0, space 0, times 0 [ 858.733491][T12184] CPU: 0 PID: 12184 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 858.742199][T12184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 858.752250][T12184] Call Trace: [ 858.755568][T12184] dump_stack+0x18f/0x20d [ 858.759882][T12184] should_fail.cold+0x5/0x14 [ 858.764456][T12184] should_failslab+0x5/0xf [ 858.768855][T12184] kmem_cache_alloc_node_trace+0x27d/0x400 [ 858.774654][T12184] __kmalloc_node+0x38/0x60 [ 858.779156][T12184] kvmalloc_node+0x61/0xf0 [ 858.783572][T12184] open_substream+0x33d/0x880 [ 858.788237][T12184] rawmidi_open_priv+0x519/0x6f0 [ 858.793244][T12184] snd_rawmidi_kernel_open+0x1b5/0x270 [ 858.798741][T12184] ? midisynth_use+0x250/0x250 [ 858.803498][T12184] midisynth_subscribe+0xf2/0x350 [ 858.808512][T12184] ? midisynth_use+0x250/0x250 [ 858.813253][T12184] ? down_write+0xbc/0x150 [ 858.817645][T12184] ? down_write+0xdb/0x150 [ 858.822043][T12184] ? down_write_killable+0x170/0x170 [ 858.827307][T12184] ? trace_hardirqs_on+0x5f/0x220 [ 858.832325][T12184] ? midisynth_use+0x250/0x250 [ 858.837185][T12184] check_and_subscribe_port+0x89a/0xb80 [ 858.842728][T12184] snd_seq_port_connect+0x2e6/0x520 [ 858.847916][T12184] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 858.853800][T12184] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 858.860031][T12184] snd_seq_kernel_client_ctl+0xeb/0x130 [ 858.865557][T12184] snd_seq_oss_midi_open+0x466/0x6e0 [ 858.870823][T12184] ? snd_seq_oss_midi_setup+0x50/0x50 [ 858.876175][T12184] ? mark_held_locks+0x9f/0xe0 [ 858.880927][T12184] ? lockdep_hardirqs_on+0x6a/0xe0 [ 858.886019][T12184] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 858.891812][T12184] ? get_mdev+0x75/0x90 [ 858.896035][T12184] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 858.901923][T12184] snd_seq_oss_open+0x87e/0xa10 [ 858.906757][T12184] odev_open+0x6c/0x90 [ 858.910802][T12184] ? odev_release+0x70/0x70 [ 858.915284][T12184] soundcore_open+0x445/0x600 [ 858.919943][T12184] ? sound_devnode+0xf0/0xf0 [ 858.924515][T12184] chrdev_open+0x266/0x770 [ 858.928915][T12184] ? cdev_device_add+0x210/0x210 [ 858.933843][T12184] ? security_file_open+0x1f5/0x3f0 [ 858.939035][T12184] do_dentry_open+0x501/0x1290 [ 858.943790][T12184] ? cdev_device_add+0x210/0x210 [ 858.948725][T12184] path_openat+0x1bb9/0x2750 [ 858.953316][T12184] ? path_lookupat+0x830/0x830 [ 858.958144][T12184] ? sched_clock+0x2a/0x40 [ 858.962706][T12184] ? __lockdep_free_key_range+0x110/0x110 [ 858.968409][T12184] ? kvm_sched_clock_read+0x14/0x40 [ 858.973773][T12184] ? sched_clock+0x2a/0x40 [ 858.978175][T12184] do_filp_open+0x17e/0x3c0 [ 858.982659][T12184] ? may_open_dev+0xf0/0xf0 [ 858.987157][T12184] ? _raw_spin_unlock+0x24/0x40 [ 858.991988][T12184] ? __alloc_fd+0x28d/0x600 [ 858.996495][T12184] do_sys_openat2+0x16f/0x3b0 [ 859.001438][T12184] ? build_open_flags+0x650/0x650 [ 859.006451][T12184] ? clockevents_program_event+0x12b/0x350 [ 859.012245][T12184] ? hrtimer_interrupt+0x6ea/0x930 [ 859.017350][T12184] __x64_sys_openat+0x13f/0x1f0 [ 859.022190][T12184] ? __ia32_sys_open+0x1c0/0x1c0 [ 859.027111][T12184] ? sched_clock_cpu+0x18/0x1b0 [ 859.031944][T12184] ? lock_is_held_type+0xb0/0xe0 [ 859.036863][T12184] ? do_syscall_64+0x1c/0xe0 [ 859.041433][T12184] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 859.047393][T12184] do_syscall_64+0x60/0xe0 [ 859.051791][T12184] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 859.057661][T12184] RIP: 0033:0x45cba9 [ 859.061529][T12184] Code: Bad RIP value. [ 859.065575][T12184] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 859.073963][T12184] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 859.081924][T12184] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 859.089889][T12184] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 859.097840][T12184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 859.105790][T12184] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 [ 859.154804][ T12] usb 1-1: USB disconnect, device number 118 03:39:13 executing program 0 (fault-call:2 fault-nth:26): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:39:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29441, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:39:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x6], 0x1c}, 0xd}, 0x1c) 03:39:13 executing program 5: r0 = epoll_create(0x7fffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x6}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="780000000083e769f712f19492f95ead9e2163ffbefab2d993b8115d3bfbd92f6f1e7afd0000", @ANYRES32=0x0, @ANYBLOB="000000000000000050001280080001006772650044000280080014000a010102050008008000000006000e000300000008000100", @ANYRES32=r2, @ANYBLOB="050009007f000000060002000300000006000f0000000000060002000400000008000a00", @ANYRES32=r2, @ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x45}, 0x0) 03:39:13 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x100, &(0x7f0000000580)="4f3f9e966550f7a4c0e1841ac95629d74c505e8d11dca50d5e0bcfe47bf070") r4 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@x25, &(0x7f0000000540)=0xfffffffffffffe94) r5 = geteuid() fsetxattr$system_posix_acl(r4, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB='\b\x00'/12, @ANYRES16, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="a45cddb69ce73002f9439329c3bb92960ac3cdc687bdbaee1434d5828b7d0eb1bc40704145d352365744e385e54d992f72bbddd49fb3cbb833786fb5443ca098f13673b206ef25311d7c512fe52d9cb8569867b9f9a0492f9bb9920dea2c40f304b797cce0a17db6ab8989ef2bdc7607de18fe9c96e5a59c06000000000000007544435397fc5c312daafc6269e4cc5184b55435a638ad0112aa4c07630f28331768317dffbffc7f8c86cbfedbb32b303c10a7bcf337fe5c73a7ecaf451b66cbf3899fa53fa59a9bd515e67866a7124fcac2c880be4e8d776b65b595eef53a005d4efd3686883ab50deeea652d66afc15d500c8698d48b1d53c8137b348e229ded6afa85da8f7d5cd537486bc2c356c0dbcb6611628aa2251463bb09fcba0fa3a75da1d37b9a94749e26545aae7b7fe6023517e9c23ff80c64aa350220b177911be2302e7afacc6e55bec3d96ae84d4de579967984bd33700aa8b23898588907273dce76541926043134ee9715b19c3ea3cde5784fc10a26bb47519bf03933a09276601fc055dcdad603e530945deddeca00"/436, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES64=r3, @ANYRESDEC, @ANYRES32], 0x7, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8910, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x2f, 0xf3, 0x1, 0x5, 0x15, @private0={0xfc, 0x0, [], 0x1}, @dev={0xfe, 0x80, [], 0x3f}, 0x0, 0x1, 0x2, 0x5}}) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001a0000042bbd7000fbdbdf250a80203f00010008000c000008001900", @ANYRES32=r5, @ANYBLOB="08001000ffffff7f0c00f0f8be002000", @ANYRES32=r7, @ANYBLOB="050014000800000008000600cb720000"], 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) r8 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r9 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r9, 0x0) 03:39:13 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0xfeff) 03:39:13 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0xff0f) 03:39:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x7], 0x1c}, 0xd}, 0x1c) 03:39:13 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0xffffffe0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) write(r1, &(0x7f0000000340)="240000001e005f0214ffffffef81254d230fa0515e00000000000000000000009e000000", 0x24) [ 859.746836][T12296] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:39:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x8], 0x1c}, 0xd}, 0x1c) 03:39:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x9], 0x1c}, 0xd}, 0x1c) [ 859.907913][T12296] 8021q: adding VLAN 0 to HW filter on device bond280 03:39:14 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0xfffe) [ 860.004097][T12300] bond280: (slave bridge484): making interface the new active one [ 860.032297][T12300] bond280: (slave bridge484): Enslaving as an active interface with an up link [ 860.041753][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bond280: link becomes ready [ 860.072166][ T12] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 860.099920][T12296] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 860.136471][T12356] bond280: (slave bridge485): Enslaving as an active interface with a down link [ 860.322063][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 860.452285][ T12] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 860.460487][ T12] usb 1-1: config 0 has no interface number 0 [ 860.468273][ T12] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 860.480085][ T12] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 860.490650][ T12] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 860.508487][ T12] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 860.518109][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.528243][ T12] usb 1-1: config 0 descriptor?? [ 860.562423][T12298] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 860.569354][T12298] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 860.821141][T12298] FAULT_INJECTION: forcing a failure. [ 860.821141][T12298] name failslab, interval 1, probability 0, space 0, times 0 [ 860.863100][T12298] CPU: 1 PID: 12298 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 860.871799][T12298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 860.881944][T12298] Call Trace: [ 860.885245][T12298] dump_stack+0x18f/0x20d [ 860.889605][T12298] should_fail.cold+0x5/0x14 [ 860.894296][T12298] should_failslab+0x5/0xf [ 860.898719][T12298] kmem_cache_alloc_trace+0x240/0x2d0 [ 860.904099][T12298] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 860.910093][T12298] snd_seq_port_connect+0x5d/0x520 [ 860.915213][T12298] ? _raw_read_unlock+0x24/0x40 [ 860.920076][T12298] ? check_subscription_permission.isra.0+0x16a/0x260 [ 860.927105][T12298] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 860.933007][T12298] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 860.939252][T12298] ? mark_held_locks+0x9f/0xe0 [ 860.944022][T12298] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 860.949836][T12298] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 860.955829][T12298] snd_seq_kernel_client_ctl+0xeb/0x130 [ 860.961398][T12298] snd_seq_oss_midi_open+0x466/0x6e0 [ 860.966688][T12298] ? snd_seq_oss_midi_setup+0x50/0x50 [ 860.972066][T12298] ? mark_held_locks+0x9f/0xe0 [ 860.976840][T12298] ? lockdep_hardirqs_on+0x6a/0xe0 [ 860.981954][T12298] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 860.987849][T12298] ? get_mdev+0x75/0x90 [ 860.992015][T12298] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 860.997918][T12298] snd_seq_oss_open+0x87e/0xa10 [ 861.002773][T12298] odev_open+0x6c/0x90 [ 861.006842][T12298] ? odev_release+0x70/0x70 [ 861.011345][T12298] soundcore_open+0x445/0x600 [ 861.016025][T12298] ? sound_devnode+0xf0/0xf0 [ 861.020618][T12298] chrdev_open+0x266/0x770 [ 861.025032][T12298] ? cdev_device_add+0x210/0x210 [ 861.030004][T12298] ? security_file_open+0x1f5/0x3f0 [ 861.035205][T12298] do_dentry_open+0x501/0x1290 [ 861.039968][T12298] ? cdev_device_add+0x210/0x210 [ 861.044912][T12298] path_openat+0x1bb9/0x2750 [ 861.049512][T12298] ? path_lookupat+0x830/0x830 [ 861.054286][T12298] ? __lockdep_free_key_range+0x110/0x110 [ 861.060006][T12298] ? lock_is_held_type+0xb0/0xe0 [ 861.064950][T12298] do_filp_open+0x17e/0x3c0 [ 861.069456][T12298] ? may_open_dev+0xf0/0xf0 [ 861.073968][T12298] ? do_raw_spin_lock+0x120/0x2b0 [ 861.078994][T12298] ? rwlock_bug.part.0+0x90/0x90 [ 861.083938][T12298] ? _raw_spin_unlock+0x24/0x40 [ 861.088787][T12298] ? __alloc_fd+0x28d/0x600 [ 861.093301][T12298] do_sys_openat2+0x16f/0x3b0 [ 861.097977][T12298] ? build_open_flags+0x650/0x650 [ 861.103002][T12298] ? __mutex_unlock_slowpath+0xe2/0x610 [ 861.108557][T12298] ? wait_for_completion+0x260/0x260 [ 861.113852][T12298] __x64_sys_openat+0x13f/0x1f0 [ 861.118706][T12298] ? __ia32_sys_open+0x1c0/0x1c0 [ 861.123652][T12298] ? ksys_write+0x1a5/0x250 [ 861.128158][T12298] ? lock_is_held_type+0xb0/0xe0 [ 861.133099][T12298] ? do_syscall_64+0x1c/0xe0 [ 861.137692][T12298] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 861.143677][T12298] do_syscall_64+0x60/0xe0 [ 861.148096][T12298] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 861.153985][T12298] RIP: 0033:0x45cba9 [ 861.157870][T12298] Code: Bad RIP value. [ 861.161934][T12298] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 861.170343][T12298] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 861.178313][T12298] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 861.186296][T12298] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 861.194265][T12298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 861.202237][T12298] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 [ 861.318617][ T12] usb 1-1: USB disconnect, device number 119 03:39:15 executing program 0 (fault-call:2 fault-nth:27): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:39:15 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfe35, &(0x7f0000000340)}, 0x48014) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x10000000}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r1, 0x2, 0x7}, 0x8) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000280)={'veth0_to_bond\x00', 0x7}) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') accept$alg(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x800, 0x10000) 03:39:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xa], 0x1c}, 0xd}, 0x1c) 03:39:15 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0x34000) 03:39:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29442, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 861.974437][T12404] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:39:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xe], 0x1c}, 0xd}, 0x1c) [ 862.106383][T12404] 8021q: adding VLAN 0 to HW filter on device bond281 03:39:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x10], 0x1c}, 0xd}, 0x1c) 03:39:16 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0x400300) [ 862.233012][T29962] usb 1-1: new high-speed USB device number 120 using dummy_hcd 03:39:16 executing program 5: socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='htcp\x00', 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000040)=0x1c) r1 = dup(0xffffffffffffffff) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000000c0)=0x78) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) timerfd_create(0x0, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 862.290801][T12413] bond281: (slave bridge486): making interface the new active one 03:39:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x48], 0x1c}, 0xd}, 0x1c) [ 862.344863][T12413] bond281: (slave bridge486): Enslaving as an active interface with an up link [ 862.375486][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond281: link becomes ready [ 862.393351][T12404] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 862.460777][T12413] bond281: (slave bridge487): Enslaving as an active interface with a down link [ 862.481980][T29962] usb 1-1: Using ep0 maxpacket: 8 03:39:16 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0xf0ffff) 03:39:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x4c], 0x1c}, 0xd}, 0x1c) [ 862.602156][T29962] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 862.617083][T29962] usb 1-1: config 0 has no interface number 0 [ 862.642670][T29962] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 862.698039][T29962] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 862.721974][T29962] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 862.731748][T29962] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 862.759777][T29962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.769747][T29962] usb 1-1: config 0 descriptor?? [ 862.792914][T12408] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 862.800307][T12408] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 863.098194][T12408] FAULT_INJECTION: forcing a failure. [ 863.098194][T12408] name failslab, interval 1, probability 0, space 0, times 0 [ 863.119107][T12408] CPU: 0 PID: 12408 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 863.127814][T12408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 863.137872][T12408] Call Trace: [ 863.141177][T12408] dump_stack+0x18f/0x20d [ 863.145520][T12408] should_fail.cold+0x5/0x14 [ 863.150121][T12408] should_failslab+0x5/0xf [ 863.154545][T12408] kmem_cache_alloc_node_trace+0x27d/0x400 [ 863.160375][T12408] __kmalloc_node+0x38/0x60 [ 863.164886][T12408] kvmalloc_node+0x61/0xf0 [ 863.169327][T12408] open_substream+0x33d/0x880 [ 863.174017][T12408] rawmidi_open_priv+0x519/0x6f0 [ 863.178963][T12408] snd_rawmidi_kernel_open+0x1b5/0x270 [ 863.184438][T12408] ? midisynth_use+0x250/0x250 [ 863.189217][T12408] midisynth_subscribe+0xf2/0x350 [ 863.194253][T12408] ? midisynth_use+0x250/0x250 [ 863.199025][T12408] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 863.205193][T12408] ? check_and_subscribe_port+0xbd/0xb80 [ 863.210832][T12408] ? midisynth_use+0x250/0x250 [ 863.215601][T12408] check_and_subscribe_port+0x89a/0xb80 [ 863.221161][T12408] snd_seq_port_connect+0x2e6/0x520 [ 863.226395][T12408] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 863.232300][T12408] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 863.238544][T12408] ? mark_held_locks+0x9f/0xe0 [ 863.243309][T12408] ? sched_clock+0x2a/0x40 [ 863.247729][T12408] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 863.253691][T12408] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 863.259678][T12408] snd_seq_kernel_client_ctl+0xeb/0x130 [ 863.265229][T12408] snd_seq_oss_midi_open+0x466/0x6e0 [ 863.270517][T12408] ? snd_seq_oss_midi_setup+0x50/0x50 [ 863.275908][T12408] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 863.281802][T12408] ? get_mdev+0x75/0x90 [ 863.285968][T12408] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 863.291869][T12408] snd_seq_oss_open+0x87e/0xa10 [ 863.296726][T12408] odev_open+0x6c/0x90 [ 863.300796][T12408] ? odev_release+0x70/0x70 [ 863.305304][T12408] soundcore_open+0x445/0x600 [ 863.309991][T12408] ? sound_devnode+0xf0/0xf0 [ 863.314587][T12408] chrdev_open+0x266/0x770 [ 863.319004][T12408] ? cdev_device_add+0x210/0x210 [ 863.323952][T12408] ? security_file_open+0x1f5/0x3f0 [ 863.329156][T12408] do_dentry_open+0x501/0x1290 [ 863.333931][T12408] ? cdev_device_add+0x210/0x210 [ 863.338879][T12408] path_openat+0x1bb9/0x2750 [ 863.343482][T12408] ? path_lookupat+0x830/0x830 [ 863.348255][T12408] ? __lockdep_free_key_range+0x110/0x110 [ 863.353974][T12408] ? lock_is_held_type+0xb0/0xe0 [ 863.358916][T12408] do_filp_open+0x17e/0x3c0 [ 863.363425][T12408] ? may_open_dev+0xf0/0xf0 [ 863.367939][T12408] ? do_raw_spin_lock+0x120/0x2b0 [ 863.372969][T12408] ? rwlock_bug.part.0+0x90/0x90 [ 863.377910][T12408] ? write_comp_data+0x78/0x80 [ 863.382680][T12408] ? _raw_spin_unlock+0x24/0x40 [ 863.387531][T12408] ? __alloc_fd+0x28d/0x600 [ 863.392047][T12408] do_sys_openat2+0x16f/0x3b0 [ 863.396727][T12408] ? build_open_flags+0x650/0x650 [ 863.401749][T12408] ? clockevents_program_event+0x12b/0x350 [ 863.407564][T12408] ? hrtimer_interrupt+0x6ea/0x930 [ 863.412682][T12408] __x64_sys_openat+0x13f/0x1f0 [ 863.417532][T12408] ? __ia32_sys_open+0x1c0/0x1c0 [ 863.422471][T12408] ? sched_clock_cpu+0x18/0x1b0 [ 863.427324][T12408] ? lock_is_held_type+0xb0/0xe0 [ 863.432272][T12408] ? do_syscall_64+0x1c/0xe0 [ 863.436867][T12408] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 863.442865][T12408] do_syscall_64+0x60/0xe0 [ 863.447286][T12408] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 863.453174][T12408] RIP: 0033:0x45cba9 [ 863.457052][T12408] Code: Bad RIP value. [ 863.461112][T12408] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 863.469521][T12408] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 863.477488][T12408] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 863.485459][T12408] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 863.493428][T12408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 863.501397][T12408] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 [ 863.546097][ T12] usb 1-1: USB disconnect, device number 120 03:39:18 executing program 0 (fault-call:2 fault-nth:28): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:39:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3ffff, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:39:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xea) ftruncate(r4, 0x200004) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000080)) socket$nl_audit(0x10, 0x3, 0x9) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = gettid() tkill(r6, 0x1000000000016) write$cgroup_pid(r5, &(0x7f0000000040)=r6, 0x12) sendfile(r2, r4, 0x0, 0x80001d00c0d0) 03:39:18 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0x1000000) 03:39:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x50], 0x1c}, 0xd}, 0x1c) 03:39:18 executing program 3: fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000003e80)=ANY=[@ANYBLOB='\b\x00'/12, @ANYRES16, @ANYBLOB="3779f46ca60598cd4080da", @ANYRES32, @ANYBLOB="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"/436, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES64, @ANYRESDEC, @ANYRES32], 0x7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setregid(0x0, r0) r1 = gettid() tkill(r1, 0x1000000000016) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x100, &(0x7f0000000580)="4f3f9e966550f7a4c0e1841ac95629d74c505e8d11dca50d5e0bcfe47bf070") r3 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@x25, &(0x7f0000000540)=0xfffffffffffffe94) r4 = geteuid() fsetxattr$system_posix_acl(r3, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB='\b\x00'/12, @ANYRES16, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"/436, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES64=r2, @ANYRESDEC, @ANYRES32], 0x7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setregid(0x0, r5) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000d3c0)=[{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000280)="f6f69c5409776291b5e146c2dad4af542d03c0504e1acd45b7a9dc9fdd65ae9ce2283ce8548af566760e9b50450207d3d4d4fccceacc4ab10708aa150178ddbf21d850f9e79a6dff67306178d8a2b299bf9d41c3a60fc151762bcfa2e17447a6f9d6443ad1c9d1af6c5879d9bae338fc54e280a4f93c33287a46acb9a98985632b21e7ecb7589f111d8b5cfafd620a0c89d0ea7a5233d04aaa2492c111a1ca8edfbf1247e928f23e6294edd48b7bf0e1b11be8f3bc490929ddc7321690afa2f6a2726904cb65aa7eb10e0c2131b6edd4c9b7e21c864d242069062adca1d95edba45940678487f97de5544afd24c4c7", 0xef}, {&(0x7f0000000380)="4e0fe17f75e8e2d0bd38dab7da3f7dc74e3534598a691f460d606c46ec9b524fd57aeffb71c5a579147735dabd3d89d0d4bf897fd467a851905fcd4ad332ff4b01839d215cc75a5afafd3241e10761dba7508ddbf6882ce8d57d718cda364a2d90a5942d1775838fe50dc19f978819936d93dfd41bf71fa94c705a23e2971f80986b95f2", 0x84}, {&(0x7f0000000440)="e28d7ebc7d6c23b6a73dcc6b3473b752b37d0523827e0a1dd9c0786b253a74588c60749980b979d1063e879721a7b62363746161a6052fb7663ab854e4aab298dd986068beb89b8fc49a33508f97be51f80009517beefb0cdc54ffc87ef8bb0300dbf4cf8765072820151640a927205daf19193309728260ad1b5caea6e8d2dbdc53f2519e1ca0a4e940572a30753f3c61d8a287af0330e36957befcf12e4413f1863c28ad60997c3767bc71be06d5c72873dfe0e689473b68ed7d36ade9485e", 0xc0}, {&(0x7f0000000040)="a157201943e4b71fe16f8a49a8d3c46eaf071f648420bb022461dc1395cc9929c6b27cd12ce7819a1df7bfcc57ca51c0e271f3c58bdae3", 0x37}, {&(0x7f0000000500)="19d385fb482ad509c0c5c05c68edf68b5843c75b33d281c35040f7b2742898b6e57bc1fcc87e7d00419fe36ed3a713d825a1a4b90538174b1a791612c9e59759721de2f20655d6a94cff05fca00c812594160a32b65344a1bb0d7e0f68946f83b71105fdb2aa92d6de1a1cf4c80c58678f154760fad956d994eed8129a684a11f4d244ef7035bafd97514272f50485a0e44a67c8b1df6e4280cebc8dddfda0345953076f77685129a5a6a34c", 0xac}, {&(0x7f0000000180)="a770df531f13b7f316812a505f53ed0996df70dcf20514b93ec22ea17cd07104302ace9c", 0x24}], 0x6, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8, 0x4010}, {&(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000900)="069e4ffe1201132815c8938cf3d75dcbc78008f77e42cacc886265c5ac07190255871502d01488afccb9bbb1ed29d9dbb2037dae8076ac87019376079037a474debd52ef611c71d9", 0x48}, {&(0x7f0000000980)="4cfce40a48f3036399ee9091df9b9626ce933bd83966f1f58b0ed9515d681822ccc871b199285671eebe71ab965adceaa699b94b65185b7a0e8572419b71a8053cb75a533e4b9b4582a551c28ef0918380c0d4b2637d63f470", 0x59}, {&(0x7f0000000a00)="d3aae65ae6850ead6266e2bc49371b41081659ee49cc88e8d0db3c9241ab2c10c8b6f474f6a7adea05a0c79c0aa41c934a2b4031a51307aecd81abf69de7b827f369a69684152e85d9659a12fa3a32c61434404d31d729a276a6b9a3642dcb531a2d66c80f51b404faaa5bd763cb3616cf9f7e9a83656214361ab991f53a2208913539cc294335272430e798cac1bb4f19018330bc29", 0x96}], 0x3, &(0x7f0000000d80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x4000001}, {&(0x7f0000000e00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000e80)="c9b2", 0x2}, {&(0x7f0000000ec0)="bbef9a25ac59d20a49371943dc78b68a8d87af9e1369d9eb81be580733cd9198783e687054221f8a887252a00dad249ab4", 0x31}, {&(0x7f0000000f00)="23ac8ef9df3c8044b0", 0x9}, {&(0x7f0000000f40)="91d715013943dbd65f04fd91e5e4a3c1196eeb697f7b9b2ca038c9cd9904f363550ad4480bfa46d2101fc245576e983aa9e4dc4123b0407e1813faa93c6565dcac54d7d174153a7dba4a0260d87a4a86218c6e9cf07f36a559a688e994415933a5ce53", 0x63}], 0x4, 0x0, 0x0, 0x200100c0}, {&(0x7f0000001000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002580)=[{&(0x7f0000001080)="5f835b5d2dc4fd8d7f1e37c4697af5fb7421301121cd9e11720d6cbd43f3933295ef4e8231d5f34abd44a0d93e9452cbeb756b7c012a4e2367c71a63231bb215483754ac27108ec6f41d6b80ef7a95ac28fbf5cc522cce3da33a8e015d12e10bf84a98309771d2d3c488fbefc76090ffba88b5eba9080ee0bf38c724b9d3beca9d8c58bb", 0x84}, {&(0x7f0000001140)="59e40aabb514305559c26efccdb9fa57745afeef7249f14cc97fa74a2d8b9ed4df7324fcbd8c40f596ff181c44c873cb0d312679db1f2fd278c7a8e7fa1fb62bd6a34b7c11e25cbb58404ff53d89c120e8c5cac7ca9a9c611ba8f6ba103c18a7cd6f5fe2e8d815fd38d187b9d857faa0ae096ff378ae35bc8e36d06bc68a49a48d13c09fca0cdc4fcaf7bc74f38c6143871def6b5a63a173560defd328a70c74aa123c15c1562916e8503502f7097b2a94ff4ed3d8a2f6f46135d08ad884dcf5aa084e541216622373a93c934d89daf81ebcab75ddaf6c9d", 0xd8}, {&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000002240)="de34e3152e6d9d258184c4d933da08906e2234d053d900b1d302c340f4171858c2544e3fc9c945ed121e739695c0dd6b89a7563ec57f862d3c7431695d99d29c4f60ef8cf56f04c64702a64477fb8358c89b0343925be580569b99c7a589d0c3e596e7f2eb5245bf07b881c21677", 0x6e}, {&(0x7f00000022c0)}, {&(0x7f0000002300)="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", 0xfd}, {&(0x7f0000002400)="f42a4c80e78fbaa35973d8c1498738ba657a70e1966eb3bb890ce9883ee81cc073048101face97b64fbc1ea2680a7c39b701a6d3989ecd57b13c85956130342b40416acedf1d7322f527b8d0086be83a7e892bdddb26ead9ba80615afc0ffe0d8795af13b5c0ebfe087bf501204eed6100f76429fa6de5df9f559a0cf281887204c562afbaf55d2d88739a697ac7a1d36a2d936b43292f200191be5f314c61fb415062c5b0e1c0de0e019f250ff33656b93ed771fee25afe247b5970acc05511202f6f04faa6b65d8ddae624279c500df1635fc50aeb217c338696d5b3a9ba", 0xdf}, {&(0x7f0000002500)="a494e5f875f9b8868cc468e362212c1dd31830fbc8e29e185bbd5ae3b7d8810ab1da25582c0565edbbbad430f307a93a185f9f5b254f6436de6168a0c6fe39eca7ac", 0x42}], 0x8, 0x0, 0x0, 0x4000}, {&(0x7f0000002600)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003dc0)=[{&(0x7f0000002680)="4d0e949c81fc6f326672e082ff6a2b48231f7e8500718760e0899a7fe20b9958684a9b3a26203ccc661d6e0d3efca61b004f22e1dc3b50185d7b3c777d50d4ca81d6aee5b589ce5e40b99c88bf6518e0bf3a4ae98346c8e4edde3822e6c2f3ef1b1a412593f8e44d8a0ad1", 0x6b}, {&(0x7f0000002700)="873de6707a21c11efdd51f0dc9cff8c456234b9ea43533237450766ccdf3eb68ada4525f2bf6c60d1fe508fa2b75186529f0447a211abed8bc1ca0af7f0f25a96159d307b2e380b40b1bc809e4ee19e6b95a9a45f011f39b7256dcdf48e3078049118fe81e0ec5cc0f8ba95650d032ed5820a28c9509ad2dff99ed7e21d1d8be26ac44ba87651444", 0x88}, {&(0x7f00000027c0)="cc2f3c90a985daedf4bfc72301b7b36522d9000ac3cfc313570e9bbf16e880803bd6d801e21f69281849ca06e801410439fc72412b92d112cec40c1bbd8ff087f02a58957de4c2dc7454a4e3d709e7cead375a1ae65a500338d755b94d279cb5f1f5221e21964d0cff7cb4b863633b07e305f0f3ef2edc299aa36c036e1fce27458b32b08198854b6e05293576dee9d32788bfd0181344844b95095f2d915a2f16c168ffdde9351656258ea580027c12906ec5de932dcbc3aea7", 0xba}, {&(0x7f0000002880)="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", 0x1000}, {&(0x7f0000003880)="6cf1ddf95c1a2c7552091c67fd153fe3eaa0bacc5ba4464cf087352f6a691122d7c5acc2cb69a2f419dcfd4694a333dc2cc1a80e17ace70529461a705d2274b33cd1569d13a6ad14e7b48a65692e70205120104fce8be85d359a9a7903ab970a01d161893e68defc84122cdbcba285c8a7675410b7c686faabe88b9f4d283ec0f5f21e92effbfb3b372217c1733aec499277d0d867a4b6dc3ab966482a8db533684dfdb12b434cfdaeaf3e604101329bb589e836262667ad50d4c5f5a1d9b00a73dfc379717555928d88b9ea51ba9f106db1e7558c2c55132d092a8a09c0d202748e8239440479aa5489556e19e6477fc476", 0xf2}, {&(0x7f0000003980)="41ad0c759d9970598e30ee6a178c0c7f93352c6c59edcf0b66f520adcd28d1d7ead9935266e78e90dedc062ddba10c5e1e11ca0c65b2e385cd953aac8e83bd07086a01971b98b5f521671197ed71df6720b207a9f9961083c37c428d1e80e84b1c54aeb33d20e92ad8cc1b93237a56fc540a55fe363a82195a8b67e0c9f6af6958a5b098fcc4be4a6291f0d107b929f678bf569f688dcbaff1fc3987dd0dc5e28854a1201b1d1fa79029d8cfed30dd9fcf3d89c65b9e2f6eaa410d163dd39e95adec43d7a2d39b29a9fc646a3cb524ff057e491521af51143d089860ad181d2fe80ae31964dc0c5481", 0xe9}, {&(0x7f0000003a80)="0b0f89b01734d52c879816e0e8ef26385adbb607ce74819043984b77ecb163379adf80be66c760427c9cb50aad1a841b1ac500555962fe6aa3299352de42135eef43f21e3ecb132529ad7b6a009d40bbe4eb9672120c99d551f37dcf696f2e9bb74f369161e429a4599f6476ca3b5af9a3fd25333c3ac0062e17f9aaa1b6e9346b17dc027891a7b8cfa41efe69bcb6bb4df0d5fa43a0fbdc3465a5ec2a7c622d8c8cc2180b4cbe8d954359627e3fbeb1", 0xb0}, {&(0x7f0000003b40)="d5de7de89dbad9eaed24a4390bdd7b216c8f9d3c55aa80864e17b17af8df3cff69882d722360d5a2db05b442df77c6120673a97155047d9f3eae72a3ccbf4d6cea86ff2932a1c0fc7a53fdfd8a7e3f07182a2441053025504640cad63780e4772efb0c73506f01959c961b5873350b07fa53cb2230cfa4da4da98766ec1fd106a62613173507713e8fbbb78e63de933776abecf087248e7a4ef2eeafc54545cf1e7451f81c4fb3b63b3d0211cf3e1d309aecbc61222bbf0c6316e834a46bd338773e6e5ac63dc9f8f2a7b8a57286af7cb8", 0xd1}, {&(0x7f0000003c40)="1af4fe22609fc263b75c3ceec6db0ce40ea05e35fdda6fea915d5a4ef40b0eac608f17ea72826529f0b14a93ca830de3d9264b387aca8fd6ab23597df288e627e234ca5dae6a6631578cc5c73dc03e50797693aa5f1a32449e7235395374dd2ca85ee3eefc676d950bd626306bab24426e19c3c702cf9f43ab85e843e5a9dc9f91bf6c70ed768d85db984421906ccb445c234fcce06f199ac4685e84476b84d2cfef9f7040dd", 0xa6}, {&(0x7f0000003d00)="47d4a0b4e796a2c4046bcd83490df1a3a243d00c25702939e459867c9853173b7cfbc21f808f05546430e2fb91b29ebbd4cf8900580b5bb2885e949f2a633b6baaf524fe0e6e4da5bb7736f8157a1fce84ec929f3f9fb0d663f3d4a60c2bd3bf378705d61a67d34a43875000a2b32052fa4e5b2d92ee310dbb1bc9369a1b2bce7df3cd6100a5e3fd530ce654e2b000e040e7dbf5af", 0x95}], 0xa, &(0x7f0000004300)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}, {&(0x7f0000004400)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004bc0)=[{&(0x7f0000004480)="341d9211d913180ab82dc8e0eaa352fbc967bf25bc923732c59591e825de2ced4bd1ae3e7252a05ef978d87ed1540bfb96c044870a557ab2364f848a8b6e3de8f4395d5569b2d313e699202dfc66c36396abc87496911aee2b7cb3d9041264141dca85f555ac8cd46a9fea743c2186d96ff98b2de3a85653ecd6350331a8b850c8f881717076aa9740b1cfe348fcd410d7aef7cebac3b45c29c28f5b1864d531fc4ce72098c70026ff84408e1f2b7e539b3f37f23e3b1dcd4012629e8ca566ccfd09e5e8af3262", 0xc7}, {&(0x7f0000004580)="4315f8ca5caa017c4b004feff2c470f4a287ea1e34855d1f20ac5960cac9714f6c8f7189e665c01045804d0f2ad2965ca9f220af2c65898bf7e7f117d801f5aa7821ea8e37d4d14abb53e9cf487ff634159b999b8d5c49186d6296f5", 0x5c}, {&(0x7f0000004600)="bf7f1a74736e836d308618121e7f779a8b1cfd933e0c0f2e4eee4df454de8e3a6e487f90ef641c75d988170376f43c6bcb443c746284b815ff5bc138bcccfee3b981bd943194628dfdf1161398d7f07e48d3d7649ecffe78f99a7ca031feddb36518a1799a3aad4c6b66a9de780a7823005c165658ccb4382c6c0be9e8b636e4cdb90e9c9da6b50377c1e28e09c9d0a8caf2b48d8632b8308f0f4995f86a2f52edee539cf3", 0xa5}, {&(0x7f00000046c0)="9ff5188e5cc73fc1b1866eb50eeb2b5fb36574c0c98cd1d78a2d6f60967cb057c9c4282a00ba95631156592da79a25eae0ddc7fa64da4962f40e28f442387c82d2749503cc9325564af0bbf514c84defe3e0544752132b270fa7d061f5c4ef27ffc44424b667fb80101a06354569be0c2e1da34a4c66a642e2b1c87e41ed175070138c3610be260b1523149105b6993907ea622a1c81ac6934ab2fdfc65e4e1fd42417536fef929474a2a69bc01edf333c3b6468b3f6d16856c6a52c709a65bebc80a4d11be3352d38efa30fb7822ee6a9c1cf5bb28bf112442e587c1abb636000a1039c03d6", 0xe6}, {&(0x7f00000047c0)="a6be2001b2c47f886d178f1bdd336f933e2ed51460a2b1bbbcf3f1ec4c570588f120fc54440df36710658f38f408f09194ce6b8a1fc2da57811f377426b69366e545d336c778fd3eea5df02b27ba1aa39f7585abfb356422d31c0218321a5bc4929acd5a0e368668ba24c7662c59819a5fe88651bfcaca3ae32f433a16841fca9692ef957b220e47ac1da5ef80d84beca08b901baa29cf52", 0x98}, {&(0x7f0000004880)="741ffd03ebd5d278aba677a3475704a40f12b3d184370da3c8da88e3f55ad432739b77e17ed045cb6d23a7668c37bb0da7839451148f161a09448c0fb9554e82e72b905c84545ae3397fc9b3ac0975f9b0aa1da375b7809273d3f8076fc1c5464feef7bc5680a2ba01d2d062bbc1d9bf6902ba9b34553aefb46340c1709f80af670b5c7c436ba2cda512d99c4b375d24efc9ffbc1d296aba360290795a10efdd9ab117084ca7eb27383e57ee46626b08eeaa", 0xb2}, {&(0x7f0000004940)="7482e37aebcbf0bf217866bafbd0840c572cfcb7642cc5746b68156d4784084a182f8e1255f4d57b8149808ea5ed0b070815f7717d1f7e2fafa4f9cf0ced0f4c39f7286b46d2ebd370d71e6084", 0x4d}, {&(0x7f00000049c0)="46cd332a41950aac19a9cf8dbe81f11114c914b028294a17dc5bd1383468fdc13f2c226c16ca6bc449a226469ec387894f313b8f5c4aa72ad15c7174a203a56c1bc45c83c850ba2c5d9f9ae98e6d730e4dd39bd150cf39c7394086b7d6b533c78a4986490d0d00f2d2ebe1c7fc582c688660691950f1a587d31549affc972e3ddaf1fb0e94977cfcd50733a63874b243e89712670ad0961def09780825f737acc0", 0xa1}, {&(0x7f0000004a80)="64e83a3b296ca1698bc35c36a42405e29b9f579049fe6fdecf5da32a0b9584953e6a545dd6b19344ed6b63c33a2d405d5a15e882685c5561c54d0df96a", 0x3d}, {&(0x7f0000004ac0)="20495ce5e111817596967e9fd6749f16345776ff4fe7181f869f54f5910d2df0e44311d5306102461b9f868816cb792f60a6b7ddc91cc201a7194684ace12422e6ae92053ba4c1fd91b6035da9c57ee136e1054ff38cdd3ccabe8d1d1b3ec7b6b16b925448774bf24cedef45f8abe006ac97a369961014bae6915949e0c67e4249f31690cbdd4f986aa73a6ad42d1261d1f1025bc7045f7c3fded7fcad51cd8cc0b67edc42e0bccc434eacbe54f5fa3f9aa351d14a58ef5e3795f9079dccd09230be7da093e8b92326c96def2d53acf5356c", 0xd2}], 0xa, &(0x7f0000004d40)=[@cred={{0x1c}}], 0x20, 0x4040}, {&(0x7f0000004d80)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000004e40)=[{&(0x7f0000004e00)="e35ac774103cc7b2b3e5fc9623d76e899c8552080516cad4b025209cbd6db17c52189373e78eae22af589e44d4b389bed1365670353cce1897a5afb384e6", 0x3e}], 0x1, &(0x7f0000005800)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70, 0x40}, {&(0x7f0000005880)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000005940)=[{&(0x7f0000005900)="87d3bb1c5cb95db2574fde", 0xb}], 0x1, &(0x7f0000005ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x20040}, {&(0x7f0000005f40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000073c0)=[{&(0x7f0000005fc0)="fb3b360c80027aeaeaf6f5e7a4407eb2c9b625bf8fb3f93018d997403ddddd16041455424c41b4a6c7c5d70b8087685519a79ef3ba7f44e06af4eda635fe4ab0215e82bce9a806f9db9931d948086e91e59af073412df09e5ea2db5576d7d5ff62e81e2b5791c6f1023df9c27a8261f7f9c27d47d4c6e46433ff250dd38629ae61a45d8cbffc59808db6c39f2e6912463696837c5f2f189e0a65bd35f533823ae317618eee57be460a8c9d81f49e632e595e3bec9e97d8d787df03417746dbd679e9bfdd71c85f6ec9039680f4a69b4fec9ca6532f6a4dca8a052df045755514c4019e88f8b5dbcfb03877e1f162c3521f49bf78", 0xf4}, {&(0x7f00000060c0)="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", 0x1000}, {&(0x7f00000070c0)="d106e2909735d4b3632a94f9d35b274efa55b76fd0e20b20086eac14da946277d579b665249b2655c13617116838a41a8299a526ead755a6037c622ef6ce767679541898cb322d2f5fd59f9e78789e13abda59c709e9a967cef4825b39f49aa91f68159cd425e521969ece5700581de13d08d022ddf1b757ccaf643d350ab53c0b4561c168612f9e3a3a0bf61044ca8e4bad37957a7abc69a9f187cdb4498e3acf59d54aff272d883bebc965ab9f4d10469db3a673351bda", 0xb8}, {&(0x7f0000007180)="3445e32cca2a06785aa5a0c41b236c68411e354377dd98a2174a3a7b00b4fba7f6e8db7958f0c397fa7a8a36cb34e4138791eb95a60e81881c5d3efc0f7df0973935ca1e6abd77fbe4cd99401e1c7c34dc4cd535ffb4cb5ea30e865d73cc812f1ce7d3082d5109d958c91f7faf744d9550abcfa2b1c7610b6fe0e53db46f5b2fd50debd5156226ba1af3db66204a6084cb4992ae61dda88e46c34907930309b6ce170bd0cc5d796557d3cba4083f5702ae59e64dcd3f8eb656b0c3f4849c57d073404f8dac333a0287d331d8c68e64eee104ab6bb83c8454f2f0944295f605c79cbf42d736b1d5ea8ad6c45f79b10f9f322c6631d46e", 0xf6}, {&(0x7f0000007280)="b084bdfa23acc5b5e92336dbea56fb4812ef71d57131af0761b0804abec21f7a7053f3d45f6c71236a38530e7ee996e032830d6e9c639c5f775a4f974f7a37615d107b", 0x43}, {&(0x7f0000007300)="44a62b9e38c15861b4a8c238a7efac806436855cb65412e703a30f4f84fa73b53ca9c92f02e1b52a18c40157d0e9bde6c854f10988d8465ad370223d4d1a9ecb61703c7fda1bc34b55e33581c25f855310c6dc4c9375ea2c2b255f12f1757ba5fdef721d4b7f67bf39257c97fd6abe97028a2a3e5acb2214e93539dfecad77ec6bdd42bb5e2347f5f3da", 0x8a}], 0x6, &(0x7f000000c0c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001b000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}, {&(0x7f000000c200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000d340)=[{&(0x7f000000c280)="d6d88117b87c9db86624eea99f4d4cbd30fce75b156249973a76882dd01df3fa6b84bd8aa75f2f1f34362b0a6072c1dbbd63bcb33ebd2a85bcfd7b682155ad4a367131e5e8ade07d53e1c30dd622222092334aa6f5f98fa6585af71ab2cf778f1c52559ea6e4e3fc0102dc51187e726d7ed8d5695bac0c43aca095f167a41beb49812917c00693a5689208936a66ba48a2dd83d8294c454b5e6b679a2685", 0x9e}, {&(0x7f000000c340)="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", 0x1000}], 0x2, &(0x7f000000d380)=[@cred={{0x1c, 0x1, 0x2, {r1, r4, r5}}}], 0x20, 0x4000800}], 0xa, 0x40) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r6+30000000}, 0x0) r9 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r9, 0x0) [ 864.106279][T12520] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:39:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x64], 0x1c}, 0xd}, 0x1c) [ 864.182156][T12520] 8021q: adding VLAN 0 to HW filter on device bond282 03:39:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x68], 0x1c}, 0xd}, 0x1c) 03:39:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x6c], 0x1c}, 0xd}, 0x1c) [ 864.250078][T12557] bond282: (slave bridge488): making interface the new active one [ 864.260997][T12557] bond282: (slave bridge488): Enslaving as an active interface with an up link [ 864.282485][T29962] IPv6: ADDRCONF(NETDEV_CHANGE): bond282: link becomes ready 03:39:18 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0x2000000) [ 864.306345][T12520] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 864.339754][T12557] bond282: (slave bridge489): Enslaving as an active interface with a down link 03:39:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x74], 0x1c}, 0xd}, 0x1c) 03:39:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x40000, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 864.421972][ T1236] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 864.440298][T12583] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 864.501374][T12583] 8021q: adding VLAN 0 to HW filter on device bond283 [ 864.524244][T12596] bond283: (slave bridge490): making interface the new active one [ 864.536610][T12596] bond283: (slave bridge490): Enslaving as an active interface with an up link [ 864.547460][ T3180] IPv6: ADDRCONF(NETDEV_CHANGE): bond283: link becomes ready [ 864.560638][T12583] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 864.589448][T12596] bond283: (slave bridge491): Enslaving as an active interface with a down link [ 864.672140][ T1236] usb 1-1: Using ep0 maxpacket: 8 [ 864.795216][ T1236] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 864.803359][ T1236] usb 1-1: config 0 has no interface number 0 [ 864.809526][ T1236] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 864.821010][ T1236] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 864.831025][ T1236] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 864.841128][ T1236] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 864.850356][ T1236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.864144][ T1236] usb 1-1: config 0 descriptor?? [ 864.882142][T12551] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 864.889284][T12551] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 865.114768][T12551] FAULT_INJECTION: forcing a failure. [ 865.114768][T12551] name failslab, interval 1, probability 0, space 0, times 0 [ 865.151805][T12551] CPU: 1 PID: 12551 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 865.160509][T12551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 865.170719][T12551] Call Trace: [ 865.173994][T12551] dump_stack+0x18f/0x20d [ 865.178325][T12551] should_fail.cold+0x5/0x14 [ 865.182901][T12551] should_failslab+0x5/0xf [ 865.187297][T12551] kmem_cache_alloc_trace+0x240/0x2d0 [ 865.192738][T12551] dummy_urb_enqueue+0x80/0x890 [ 865.197592][T12551] usb_hcd_submit_urb+0x2ad/0x2220 [ 865.202686][T12551] ? save_stack+0x32/0x40 [ 865.206996][T12551] ? save_stack+0x1b/0x40 [ 865.211317][T12551] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 865.217103][T12551] ? kvmalloc_node+0x61/0xf0 [ 865.221682][T12551] ? lock_is_held_type+0xb0/0xe0 [ 865.226600][T12551] ? usb_add_hcd+0x2c0/0x2c0 [ 865.238120][T12551] ? __mutex_lock+0x626/0x10d0 [ 865.242880][T12551] ? lock_release+0x8d0/0x8d0 [ 865.247537][T12551] ? do_syscall_64+0x60/0xe0 [ 865.252159][T12551] ? substream_open.isra.0+0xab/0xc10 [ 865.257551][T12551] usb_submit_urb+0xb4e/0x1320 [ 865.262306][T12551] snd_usbmidi_input_start.part.0+0x101/0x200 [ 865.268358][T12551] substream_open.isra.0+0x82c/0xc10 [ 865.273715][T12551] open_substream+0x42e/0x880 [ 865.278392][T12551] rawmidi_open_priv+0x519/0x6f0 [ 865.283312][T12551] snd_rawmidi_kernel_open+0x1b5/0x270 [ 865.288753][T12551] ? midisynth_use+0x250/0x250 [ 865.293500][T12551] midisynth_subscribe+0xf2/0x350 [ 865.298515][T12551] ? midisynth_use+0x250/0x250 [ 865.303260][T12551] ? down_write+0xdb/0x150 [ 865.307653][T12551] ? down_write_killable+0x170/0x170 [ 865.312922][T12551] ? midisynth_use+0x250/0x250 [ 865.317676][T12551] check_and_subscribe_port+0x89a/0xb80 [ 865.323210][T12551] snd_seq_port_connect+0x2e6/0x520 [ 865.328392][T12551] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 865.334281][T12551] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 865.340501][T12551] ? mark_held_locks+0x9f/0xe0 [ 865.345251][T12551] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 865.351034][T12551] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 865.357000][T12551] snd_seq_kernel_client_ctl+0xeb/0x130 [ 865.362532][T12551] snd_seq_oss_midi_open+0x466/0x6e0 [ 865.367803][T12551] ? snd_seq_oss_midi_setup+0x50/0x50 [ 865.373166][T12551] ? mark_held_locks+0x9f/0xe0 [ 865.377916][T12551] ? lockdep_hardirqs_on+0x6a/0xe0 [ 865.383016][T12551] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 865.388809][T12551] ? get_mdev+0x75/0x90 [ 865.393296][T12551] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 865.399172][T12551] snd_seq_oss_open+0x87e/0xa10 [ 865.404007][T12551] odev_open+0x6c/0x90 [ 865.408056][T12551] ? odev_release+0x70/0x70 [ 865.412540][T12551] soundcore_open+0x445/0x600 [ 865.417201][T12551] ? sound_devnode+0xf0/0xf0 [ 865.421770][T12551] chrdev_open+0x266/0x770 [ 865.426163][T12551] ? cdev_device_add+0x210/0x210 [ 865.431082][T12551] ? security_file_open+0x1f5/0x3f0 [ 865.436260][T12551] do_dentry_open+0x501/0x1290 [ 865.441003][T12551] ? cdev_device_add+0x210/0x210 [ 865.445925][T12551] path_openat+0x1bb9/0x2750 [ 865.450503][T12551] ? path_lookupat+0x830/0x830 [ 865.455602][T12551] ? __lockdep_free_key_range+0x110/0x110 [ 865.461305][T12551] ? lock_is_held_type+0xb0/0xe0 [ 865.466224][T12551] do_filp_open+0x17e/0x3c0 [ 865.470711][T12551] ? may_open_dev+0xf0/0xf0 [ 865.475198][T12551] ? do_raw_spin_lock+0x120/0x2b0 [ 865.480203][T12551] ? rwlock_bug.part.0+0x90/0x90 [ 865.485126][T12551] ? _raw_spin_unlock+0x24/0x40 [ 865.489952][T12551] ? __alloc_fd+0x28d/0x600 [ 865.494440][T12551] do_sys_openat2+0x16f/0x3b0 [ 865.499097][T12551] ? build_open_flags+0x650/0x650 [ 865.504100][T12551] ? __mutex_unlock_slowpath+0xe2/0x610 [ 865.509627][T12551] ? wait_for_completion+0x260/0x260 [ 865.514895][T12551] __x64_sys_openat+0x13f/0x1f0 [ 865.519729][T12551] ? __ia32_sys_open+0x1c0/0x1c0 [ 865.524643][T12551] ? ksys_write+0x1a5/0x250 [ 865.529139][T12551] ? lock_is_held_type+0xb0/0xe0 [ 865.534059][T12551] ? do_syscall_64+0x1c/0xe0 [ 865.538627][T12551] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 865.544589][T12551] do_syscall_64+0x60/0xe0 [ 865.548984][T12551] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 865.554853][T12551] RIP: 0033:0x45cba9 [ 865.558720][T12551] Code: Bad RIP value. [ 865.562778][T12551] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 865.571166][T12551] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 865.579116][T12551] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 865.587063][T12551] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 865.595035][T12551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 865.602988][T12551] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 [ 865.695657][T12551] usb 1-1: usb_submit_urb: -12 [ 865.710839][ T3180] usb 1-1: USB disconnect, device number 121 03:39:20 executing program 0 (fault-call:2 fault-nth:29): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:39:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x7a], 0x1c}, 0xd}, 0x1c) [ 866.511796][ T3180] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 866.751939][ T3180] usb 1-1: Using ep0 maxpacket: 8 [ 866.872021][ T3180] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 866.880120][ T3180] usb 1-1: config 0 has no interface number 0 [ 866.887599][ T3180] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 866.899447][ T3180] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 866.910021][ T3180] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 866.920458][ T3180] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 866.930096][ T3180] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.940127][ T3180] usb 1-1: config 0 descriptor?? [ 866.962270][T12675] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 866.969217][T12675] raw-gadget gadget: fail, usb_ep_enable returned -22 03:39:21 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'vxcan1\x00'}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000407d1e242c40000000000109022400010000000009040000fe0301000009210000000122010009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\"s'], 0x0}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000002c0)={0x1, [0x0, 0x0, 0x0]}, &(0x7f000095dffc)=0x3) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={r4, 0x6}, &(0x7f0000000080)=0xc) ioctl$KDSKBLED(r0, 0x4b65, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={r4, 0x90, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0xb17, @mcast1, 0xb5b}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e24, 0x6a66809c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xf02b}, @in6={0xa, 0x4e23, 0x9, @remote, 0x7}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e24, 0x0, @local}]}, &(0x7f0000000180)=0x10) 03:39:21 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0x3000000) 03:39:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 03:39:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x200000, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:39:21 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r3 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r3, 0x0) [ 867.195261][T12675] FAULT_INJECTION: forcing a failure. [ 867.195261][T12675] name failslab, interval 1, probability 0, space 0, times 0 [ 867.206974][T12702] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 867.248107][T12675] CPU: 1 PID: 12675 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 867.256812][T12675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 867.266871][T12675] Call Trace: [ 867.270173][T12675] dump_stack+0x18f/0x20d [ 867.274521][T12675] should_fail.cold+0x5/0x14 [ 867.279123][T12675] should_failslab+0x5/0xf [ 867.283549][T12675] kmem_cache_alloc_trace+0x240/0x2d0 [ 867.288936][T12675] dummy_urb_enqueue+0x80/0x890 [ 867.293807][T12675] usb_hcd_submit_urb+0x2ad/0x2220 [ 867.299044][T12675] ? save_stack+0x32/0x40 [ 867.303376][T12675] ? save_stack+0x1b/0x40 [ 867.307710][T12675] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 867.313516][T12675] ? kvmalloc_node+0x61/0xf0 [ 867.318205][T12675] ? lock_is_held_type+0xb0/0xe0 [ 867.323151][T12675] ? usb_add_hcd+0x2c0/0x2c0 [ 867.327630][T12702] 8021q: adding VLAN 0 to HW filter on device bond284 [ 867.327748][T12675] ? __mutex_lock+0x626/0x10d0 [ 867.339246][T12675] ? lock_release+0x8d0/0x8d0 [ 867.343927][T12675] ? do_syscall_64+0x60/0xe0 [ 867.348525][T12675] ? substream_open.isra.0+0xab/0xc10 [ 867.353905][T12675] usb_submit_urb+0xb4e/0x1320 [ 867.355919][T12706] bond284: (slave bridge492): making interface the new active one [ 867.358672][T12675] snd_usbmidi_input_start.part.0+0x101/0x200 [ 867.358698][T12675] substream_open.isra.0+0x82c/0xc10 [ 867.372328][T12706] bond284: (slave bridge492): Enslaving as an active interface with an up link [ 867.372533][T12675] open_substream+0x42e/0x880 [ 867.378235][T29962] IPv6: ADDRCONF(NETDEV_CHANGE): bond284: link becomes ready [ 867.386707][T12675] rawmidi_open_priv+0x519/0x6f0 [ 867.386729][T12675] snd_rawmidi_kernel_open+0x1b5/0x270 [ 867.386749][T12675] ? midisynth_use+0x250/0x250 [ 867.386764][T12675] midisynth_subscribe+0xf2/0x350 [ 867.386782][T12675] ? midisynth_use+0x250/0x250 [ 867.400270][T12702] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 867.403704][T12675] ? down_write+0xdb/0x150 [ 867.403720][T12675] ? down_write_killable+0x170/0x170 [ 867.403743][T12675] ? midisynth_use+0x250/0x250 [ 867.403758][T12675] check_and_subscribe_port+0x89a/0xb80 [ 867.403785][T12675] snd_seq_port_connect+0x2e6/0x520 [ 867.423548][T12706] bond284: (slave bridge493): Enslaving as an active interface with a down link [ 867.423718][T12675] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 867.471752][T12675] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 867.478000][T12675] ? mark_held_locks+0x9f/0xe0 [ 867.482772][T12675] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 867.488617][T12675] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 867.494609][T12675] snd_seq_kernel_client_ctl+0xeb/0x130 [ 867.500161][T12675] snd_seq_oss_midi_open+0x466/0x6e0 [ 867.505454][T12675] ? snd_seq_oss_midi_setup+0x50/0x50 [ 867.510834][T12675] ? mark_held_locks+0x9f/0xe0 [ 867.515609][T12675] ? lockdep_hardirqs_on+0x6a/0xe0 [ 867.520726][T12675] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 867.526535][T12675] ? get_mdev+0x75/0x90 [ 867.530701][T12675] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 867.536603][T12675] snd_seq_oss_open+0x87e/0xa10 [ 867.541469][T12675] odev_open+0x6c/0x90 [ 867.545541][T12675] ? odev_release+0x70/0x70 [ 867.550060][T12675] soundcore_open+0x445/0x600 [ 867.554748][T12675] ? sound_devnode+0xf0/0xf0 [ 867.559342][T12675] chrdev_open+0x266/0x770 [ 867.563763][T12675] ? cdev_device_add+0x210/0x210 [ 867.568705][T12675] ? security_file_open+0x1f5/0x3f0 [ 867.573908][T12675] do_dentry_open+0x501/0x1290 [ 867.578674][T12675] ? cdev_device_add+0x210/0x210 [ 867.583624][T12675] path_openat+0x1bb9/0x2750 [ 867.588228][T12675] ? path_lookupat+0x830/0x830 [ 867.593005][T12675] ? __lockdep_free_key_range+0x110/0x110 03:39:21 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0x4000000) [ 867.598726][T12675] ? lock_is_held_type+0xb0/0xe0 [ 867.603672][T12675] do_filp_open+0x17e/0x3c0 [ 867.608175][T12675] ? may_open_dev+0xf0/0xf0 [ 867.612688][T12675] ? do_raw_spin_lock+0x120/0x2b0 [ 867.617718][T12675] ? rwlock_bug.part.0+0x90/0x90 [ 867.622670][T12675] ? _raw_spin_unlock+0x24/0x40 [ 867.627523][T12675] ? __alloc_fd+0x28d/0x600 [ 867.632038][T12675] do_sys_openat2+0x16f/0x3b0 [ 867.636721][T12675] ? build_open_flags+0x650/0x650 [ 867.641748][T12675] ? __mutex_unlock_slowpath+0xe2/0x610 [ 867.647293][T12675] ? wait_for_completion+0x260/0x260 [ 867.652579][T12675] __x64_sys_openat+0x13f/0x1f0 [ 867.657422][T12675] ? __ia32_sys_open+0x1c0/0x1c0 [ 867.662337][T12675] ? ksys_write+0x1a5/0x250 [ 867.666831][T12675] ? lock_is_held_type+0xb0/0xe0 [ 867.671762][T12675] ? do_syscall_64+0x1c/0xe0 [ 867.676343][T12675] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 867.682935][T12675] do_syscall_64+0x60/0xe0 [ 867.687343][T12675] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 867.693215][T12675] RIP: 0033:0x45cba9 [ 867.697083][T12675] Code: Bad RIP value. [ 867.701125][T12675] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 867.709511][T12675] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 867.717469][T12675] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 867.725420][T12675] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 867.733390][T12675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 867.741361][T12675] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 03:39:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x2], 0x1c}, 0xd}, 0x1c) 03:39:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x940200, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:39:21 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r3 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r3, 0x0) chroot(&(0x7f0000000000)='./file0\x00') [ 867.807897][T12675] usb 1-1: usb_submit_urb: -12 03:39:21 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0x5000000) [ 867.846703][ T3180] usb 1-1: USB disconnect, device number 122 [ 867.871214][T12765] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 867.932413][ T12] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 867.967708][T12765] 8021q: adding VLAN 0 to HW filter on device bond285 [ 867.995996][T12775] bond285: (slave bridge494): making interface the new active one [ 868.017575][T12775] bond285: (slave bridge494): Enslaving as an active interface with an up link [ 868.031741][T12765] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 868.053114][T12765] bond285: (slave bridge495): Enslaving as an active interface with a down link [ 868.062948][T12757] IPv6: ADDRCONF(NETDEV_CHANGE): bond285: link becomes ready [ 868.291999][ T12] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 868.304794][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.317010][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.327534][ T12] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 03:39:22 executing program 0 (fault-call:2 fault-nth:30): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 03:39:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x3], 0x1c}, 0xd}, 0x1c) [ 868.343418][ T12] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.40 [ 868.353649][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.367362][ T12] usb 6-1: config 0 descriptor?? [ 868.681786][ T1236] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 868.853006][ T12] pyra 0003:1E7D:2C24.0007: unknown main item tag 0x0 [ 868.870397][ T12] pyra 0003:1E7D:2C24.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.5-1/input0 [ 868.931729][ T1236] usb 1-1: Using ep0 maxpacket: 8 [ 869.051752][ T1236] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 869.059863][ T1236] usb 1-1: config 0 has no interface number 0 [ 869.066908][ T8302] usb 6-1: USB disconnect, device number 10 [ 869.085752][ T1236] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 869.098969][ T1236] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 869.110004][ T1236] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 869.131912][ T1236] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 869.140949][ T1236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.154787][ T1236] usb 1-1: config 0 descriptor?? [ 869.172022][T12833] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 869.178961][T12833] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 869.403200][T12833] FAULT_INJECTION: forcing a failure. [ 869.403200][T12833] name failslab, interval 1, probability 0, space 0, times 0 [ 869.424976][T12833] CPU: 1 PID: 12833 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 869.433670][T12833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 869.443728][T12833] Call Trace: [ 869.447028][T12833] dump_stack+0x18f/0x20d [ 869.451358][T12833] should_fail.cold+0x5/0x14 [ 869.455990][T12833] should_failslab+0x5/0xf [ 869.460422][T12833] kmem_cache_alloc_trace+0x240/0x2d0 [ 869.465774][T12833] dummy_urb_enqueue+0x80/0x890 [ 869.470643][T12833] usb_hcd_submit_urb+0x2ad/0x2220 [ 869.475777][T12833] ? save_stack+0x32/0x40 [ 869.480081][T12833] ? save_stack+0x1b/0x40 [ 869.484392][T12833] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 869.490170][T12833] ? kvmalloc_node+0x61/0xf0 [ 869.494783][T12833] ? lock_is_held_type+0xb0/0xe0 [ 869.499696][T12833] ? usb_add_hcd+0x2c0/0x2c0 [ 869.504265][T12833] ? __mutex_lock+0x626/0x10d0 [ 869.509002][T12833] ? lock_release+0x8d0/0x8d0 [ 869.513651][T12833] ? do_syscall_64+0x60/0xe0 [ 869.518216][T12833] ? substream_open.isra.0+0xab/0xc10 [ 869.523570][T12833] usb_submit_urb+0xb4e/0x1320 [ 869.528316][T12833] snd_usbmidi_input_start.part.0+0x101/0x200 [ 869.534364][T12833] substream_open.isra.0+0x82c/0xc10 [ 869.539628][T12833] open_substream+0x42e/0x880 [ 869.544281][T12833] rawmidi_open_priv+0x519/0x6f0 [ 869.549195][T12833] snd_rawmidi_kernel_open+0x1b5/0x270 [ 869.554636][T12833] ? midisynth_use+0x250/0x250 [ 869.559377][T12833] midisynth_subscribe+0xf2/0x350 [ 869.564377][T12833] ? midisynth_use+0x250/0x250 [ 869.569113][T12833] ? down_write+0xdb/0x150 [ 869.573507][T12833] ? down_write_killable+0x170/0x170 [ 869.578769][T12833] ? midisynth_use+0x250/0x250 [ 869.583510][T12833] check_and_subscribe_port+0x89a/0xb80 [ 869.589037][T12833] snd_seq_port_connect+0x2e6/0x520 [ 869.594212][T12833] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 869.600093][T12833] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 869.606307][T12833] ? mark_held_locks+0x9f/0xe0 [ 869.611048][T12833] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 869.616828][T12833] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 869.622785][T12833] snd_seq_kernel_client_ctl+0xeb/0x130 [ 869.628315][T12833] snd_seq_oss_midi_open+0x466/0x6e0 [ 869.633590][T12833] ? snd_seq_oss_midi_setup+0x50/0x50 [ 869.638933][T12833] ? mark_held_locks+0x9f/0xe0 [ 869.643676][T12833] ? lockdep_hardirqs_on+0x6a/0xe0 [ 869.648760][T12833] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 869.654560][T12833] ? get_mdev+0x75/0x90 [ 869.658702][T12833] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 869.664748][T12833] snd_seq_oss_open+0x87e/0xa10 [ 869.669576][T12833] odev_open+0x6c/0x90 [ 869.673619][T12833] ? odev_release+0x70/0x70 [ 869.678118][T12833] soundcore_open+0x445/0x600 [ 869.682772][T12833] ? sound_devnode+0xf0/0xf0 [ 869.687334][T12833] chrdev_open+0x266/0x770 [ 869.691724][T12833] ? cdev_device_add+0x210/0x210 [ 869.696653][T12833] ? security_file_open+0x1f5/0x3f0 [ 869.701828][T12833] do_dentry_open+0x501/0x1290 [ 869.706566][T12833] ? cdev_device_add+0x210/0x210 [ 869.711483][T12833] path_openat+0x1bb9/0x2750 [ 869.716055][T12833] ? path_lookupat+0x830/0x830 [ 869.720798][T12833] ? __lockdep_free_key_range+0x110/0x110 [ 869.726492][T12833] ? lock_is_held_type+0xb0/0xe0 [ 869.731420][T12833] do_filp_open+0x17e/0x3c0 [ 869.735911][T12833] ? may_open_dev+0xf0/0xf0 [ 869.740393][T12833] ? do_raw_spin_lock+0x120/0x2b0 [ 869.745392][T12833] ? rwlock_bug.part.0+0x90/0x90 [ 869.750306][T12833] ? _raw_spin_unlock+0x24/0x40 [ 869.755132][T12833] ? __alloc_fd+0x28d/0x600 [ 869.759625][T12833] do_sys_openat2+0x16f/0x3b0 [ 869.764281][T12833] ? build_open_flags+0x650/0x650 [ 869.769283][T12833] ? __mutex_unlock_slowpath+0xe2/0x610 [ 869.774804][T12833] ? wait_for_completion+0x260/0x260 [ 869.780067][T12833] __x64_sys_openat+0x13f/0x1f0 [ 869.784891][T12833] ? __ia32_sys_open+0x1c0/0x1c0 [ 869.789799][T12833] ? ksys_write+0x1a5/0x250 [ 869.794278][T12833] ? lock_is_held_type+0xb0/0xe0 [ 869.799189][T12833] ? do_syscall_64+0x1c/0xe0 [ 869.803762][T12833] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 869.809717][T12833] do_syscall_64+0x60/0xe0 [ 869.814112][T12833] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 869.819976][T12833] RIP: 0033:0x45cba9 [ 869.823839][T12833] Code: Bad RIP value. [ 869.827877][T12833] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 869.836271][T12833] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 869.844217][T12833] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 869.852169][T12833] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 869.860121][T12833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 869.868102][T12833] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 [ 869.889992][T12833] usb 1-1: usb_submit_urb: -12 [ 869.898351][T12833] ------------[ cut here ]------------ [ 869.904048][T12833] URB 0000000006d06c8f submitted while active [ 869.910615][T12833] WARNING: CPU: 1 PID: 12833 at drivers/usb/core/urb.c:363 usb_submit_urb+0x112f/0x1320 [ 869.945949][T12833] Kernel panic - not syncing: panic_on_warn set ... [ 869.952559][T12833] CPU: 1 PID: 12833 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 869.961205][T12833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 869.971235][T12833] Call Trace: [ 869.974506][T12833] dump_stack+0x18f/0x20d [ 869.978831][T12833] panic+0x2e3/0x75c [ 869.982717][T12833] ? __warn_printk+0xf3/0xf3 [ 869.987286][T12833] ? console_unlock+0x7f0/0xf30 [ 869.992112][T12833] ? __warn.cold+0x5/0x45 [ 869.996430][T12833] ? usb_submit_urb+0x112f/0x1320 [ 870.001443][T12833] __warn.cold+0x20/0x45 [ 870.005688][T12833] ? usb_submit_urb+0x112f/0x1320 [ 870.010719][T12833] report_bug+0x1bd/0x210 [ 870.015066][T12833] handle_bug+0x38/0x90 [ 870.019238][T12833] ? __warn_printk+0xc6/0xf3 [ 870.023834][T12833] exc_invalid_op+0x13/0x40 [ 870.028342][T12833] asm_exc_invalid_op+0x12/0x20 [ 870.033189][T12833] RIP: 0010:usb_submit_urb+0x112f/0x1320 [ 870.038797][T12833] Code: 89 de e8 24 01 5f fc 84 db 0f 85 3d fa ff ff e8 d7 04 5f fc 4c 89 fe 48 c7 c7 c0 04 cd 88 c6 05 3b 37 95 05 01 e8 23 45 30 fc <0f> 0b e9 1b fa ff ff c7 44 24 14 01 00 00 00 e9 3e f5 ff ff 41 bd [ 870.058558][T12833] RSP: 0000:ffffc900165872a0 EFLAGS: 00010282 [ 870.064605][T12833] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 870.072556][T12833] RDX: 0000000000040000 RSI: ffffffff815d4f87 RDI: fffff52002cb0e46 [ 870.080507][T12833] RBP: ffff888037f86400 R08: 0000000000000001 R09: ffff8880ae720fcb [ 870.089237][T12833] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 870.097188][T12833] R13: 00000000fffffff0 R14: ffff88802f7c5b00 R15: ffff88802f7c5b00 [ 870.105153][T12833] ? vprintk_func+0x97/0x1a6 [ 870.109734][T12833] snd_usbmidi_input_start.part.0+0x101/0x200 [ 870.115784][T12833] substream_open.isra.0+0x82c/0xc10 [ 870.121054][T12833] open_substream+0x42e/0x880 [ 870.125713][T12833] rawmidi_open_priv+0x519/0x6f0 [ 870.130633][T12833] snd_rawmidi_kernel_open+0x1b5/0x270 [ 870.136083][T12833] ? midisynth_use+0x250/0x250 [ 870.140837][T12833] midisynth_subscribe+0xf2/0x350 [ 870.145862][T12833] ? midisynth_use+0x250/0x250 [ 870.150609][T12833] ? down_write+0xdb/0x150 [ 870.155022][T12833] ? down_write_killable+0x170/0x170 [ 870.160305][T12833] ? midisynth_use+0x250/0x250 [ 870.165054][T12833] check_and_subscribe_port+0x89a/0xb80 [ 870.170590][T12833] snd_seq_port_connect+0x2e6/0x520 [ 870.175795][T12833] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 870.181676][T12833] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 870.187896][T12833] ? mark_held_locks+0x9f/0xe0 [ 870.192640][T12833] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 870.198429][T12833] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 870.204390][T12833] snd_seq_kernel_client_ctl+0xeb/0x130 [ 870.209916][T12833] snd_seq_oss_midi_open+0x466/0x6e0 [ 870.215178][T12833] ? snd_seq_oss_midi_setup+0x50/0x50 [ 870.220527][T12833] ? mark_held_locks+0x9f/0xe0 [ 870.225325][T12833] ? lockdep_hardirqs_on+0x6a/0xe0 [ 870.230414][T12833] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 870.236199][T12833] ? get_mdev+0x75/0x90 [ 870.240333][T12833] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 870.246208][T12833] snd_seq_oss_open+0x87e/0xa10 [ 870.251096][T12833] odev_open+0x6c/0x90 [ 870.255154][T12833] ? odev_release+0x70/0x70 [ 870.259680][T12833] soundcore_open+0x445/0x600 [ 870.264350][T12833] ? sound_devnode+0xf0/0xf0 [ 870.268923][T12833] chrdev_open+0x266/0x770 [ 870.273316][T12833] ? cdev_device_add+0x210/0x210 [ 870.278235][T12833] ? security_file_open+0x1f5/0x3f0 [ 870.285460][T12833] do_dentry_open+0x501/0x1290 [ 870.290272][T12833] ? cdev_device_add+0x210/0x210 [ 870.295205][T12833] path_openat+0x1bb9/0x2750 [ 870.299829][T12833] ? path_lookupat+0x830/0x830 [ 870.304574][T12833] ? __lockdep_free_key_range+0x110/0x110 [ 870.310270][T12833] ? lock_is_held_type+0xb0/0xe0 [ 870.315231][T12833] do_filp_open+0x17e/0x3c0 [ 870.319711][T12833] ? may_open_dev+0xf0/0xf0 [ 870.324199][T12833] ? do_raw_spin_lock+0x120/0x2b0 [ 870.329212][T12833] ? rwlock_bug.part.0+0x90/0x90 [ 870.334222][T12833] ? _raw_spin_unlock+0x24/0x40 [ 870.339052][T12833] ? __alloc_fd+0x28d/0x600 [ 870.343552][T12833] do_sys_openat2+0x16f/0x3b0 [ 870.348206][T12833] ? build_open_flags+0x650/0x650 [ 870.353205][T12833] ? __mutex_unlock_slowpath+0xe2/0x610 [ 870.358734][T12833] ? wait_for_completion+0x260/0x260 [ 870.363999][T12833] __x64_sys_openat+0x13f/0x1f0 [ 870.368833][T12833] ? __ia32_sys_open+0x1c0/0x1c0 [ 870.373753][T12833] ? ksys_write+0x1a5/0x250 [ 870.378249][T12833] ? lock_is_held_type+0xb0/0xe0 [ 870.383189][T12833] ? do_syscall_64+0x1c/0xe0 [ 870.387776][T12833] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 870.393765][T12833] do_syscall_64+0x60/0xe0 03:39:24 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x401}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in=@loopback}}, 0xe8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x1000, 0x0, 0x0, 0x200, 0x0, 0x0, 0xc5b]}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f00000000c0)=0x6b) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20021, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:24 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}}, 0x6000000) 03:39:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf0ffff, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:39:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x4], 0x1c}, 0xd}, 0x1c) 03:39:24 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="8bebff0f", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={r4, 0x6}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000000)={r4, 0x2, 0x3f}, 0x8) r5 = memfd_create(&(0x7f00000001c0)='$\xbbet\t\x00\x00\x00\x00\x00\x00\x00\x00e\x83\xfdr\xdaz!\xcf\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x1614(s\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a,K4b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xd8\xed\xe2\xcb8U\xca\xaaIf\xcb\x05\xb0:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd36\x85\xac\xb5*\xf9\x80\x0e\x7f\xc0\x10;\x10\xe2\xc5\xe2b\x1b\xcb\n', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r5, 0x0) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f00000000c0), &(0x7f0000000280)=0x4) [ 870.398184][T12833] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 870.404077][T12833] RIP: 0033:0x45cba9 [ 870.407960][T12833] Code: Bad RIP value. [ 870.412026][T12833] RSP: 002b:00007fa7b3918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 870.420440][T12833] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 870.429279][T12833] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 870.437247][T12833] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 03:39:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x5], 0x1c}, 0xd}, 0x1c) [ 870.445220][T12833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 870.453192][T12833] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fa7b39196d4 [ 870.463122][T12833] Kernel Offset: disabled [ 870.467596][T12833] Rebooting in 86400 seconds..