24 bytes leftover after parsing attributes in process `syz-executor.1'. 04:09:57 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:09:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x5, 0x3d0, 0x0, 0x180, 0xffffffff, 0xd8, 0x0, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_team\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @rand_addr, @broadcast, @icmp_id, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @rand_addr, @port, @gre_key}}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'ipvlan0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ip={@remote, @rand_addr, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@socket0={{0x20}}, @common=@set={{0x40}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @loopback, @private, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f00000000c0)) [ 725.544506][ T3063] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 04:09:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x10000}) [ 725.677250][ T3098] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:09:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x600}) [ 725.751883][ T3114] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not nat [ 725.817615][ T3113] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:09:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, &(0x7f0000000380)=""/201, 0x26, 0xc9, 0x1}, 0x20) 04:09:57 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xb}]}]}}, &(0x7f0000000380)=""/201, 0x2e, 0xc9, 0x1}, 0x20) 04:09:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000001c0)={0x20, r0}, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x0, 0x10000]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x2}) 04:09:57 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:09:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x5, 0xffe, 0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x3e, 0x0) write$nbd(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="04400b963fa6933dd05951957d115ed7e38b5e73eb37dcdca48a"], 0x68) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0xfffffdfd}) 04:09:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x700}) [ 726.147753][ T3151] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:09:58 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) 04:09:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0), 0x10) [ 726.304238][ T3160] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:09:58 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) 04:09:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x74, 0x0, [0x400, 0x40, 0x6, 0xa8]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0xfffffdfd}) ioctl$FIOCLEX(r0, 0x5451) 04:09:58 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x2, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:09:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0xff00}) 04:09:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffd}, 0x0) [ 726.593323][ T3194] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:09:58 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x64, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x2c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x64}}, 0x0) 04:09:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f00000001c0)) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r1, 0xf505, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000180)={0x0, 0xe000}) 04:09:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x48}, 0x0) 04:09:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000180)={0xfffffdfd, 0x0, 0x1, 0x0, 0x1}) 04:09:58 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x3, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:09:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x80ffff}) 04:09:58 executing program 0: socketpair(0x4d2f96dab465136, 0x0, 0x0, &(0x7f0000000040)) 04:09:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_mreq(r0, 0x29, 0x673225224eb88f2e, 0x0, &(0x7f0000000140)) 04:09:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x0, 0x6]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000002c0)={0x7, 0x0, [{0xdd, 0x4, 0x0, 0x0, @msi={0x3, 0x5, 0x800, 0x8}}, {0xd7a1, 0x2, 0x0, 0x0, @adapter={0x7c1, 0x5, 0x1, 0x3ff, 0x89}}, {0xffff, 0x0, 0x0, 0x0, @irqchip={0x1, 0x800}}, {0x7, 0x3, 0x0, 0x0, @sint={0x7, 0x4}}, {0xeaa40, 0x1, 0x0, 0x0, @msi={0x101, 0x1, 0x3, 0x9}}, {0x5, 0x1, 0x0, 0x0, @adapter={0x4950, 0xc7d, 0x2, 0xb5, 0x427a}}, {0x2, 0x1, 0x0, 0x0, @irqchip={0x81, 0x8}}]}) r2 = socket$rds(0x15, 0x5, 0x0) splice(r2, &(0x7f0000000240)=0x7fffffff, r0, &(0x7f0000000280)=0x8, 0x2, 0x2) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0xfffffdfd}) 04:09:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 04:09:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@rand_addr=' \x01\x00', @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in6=@remote, 0x0, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4}}, 0xe8) 04:09:59 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x4, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:09:59 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r0, &(0x7f0000000040)=""/4096, 0x1000) 04:09:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x1000000}) 04:09:59 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xb}, {0x3}, {0xb, 0x3}]}, @restrict]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000380)=""/201, 0x4c, 0xc9, 0x1}, 0x20) 04:09:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000240)={0xa, 0x0, [{0x6, 0x4, 0x0, 0x0, @sint={0x7, 0xa5f}}, {0x81, 0x3, 0x0, 0x0, @sint={0x0, 0x6}}, {0xb7, 0x1, 0x0, 0x0, @adapter={0x0, 0x7f, 0x4, 0x8, 0x7}}, {0x3, 0x4, 0x0, 0x0, @irqchip={0x9, 0x20}}, {0x2, 0x2, 0x0, 0x0, @sint={0x6, 0x5}}, {0xcf67, 0x1, 0x0, 0x0, @adapter={0x2000, 0x5, 0x7, 0x2cf2b889, 0xffff969a}}, {0x3, 0x4, 0x0, 0x0, @sint={0x401, 0x690}}, {0x1000, 0x1, 0x0, 0x0, @msi={0x92c, 0x1, 0x40}}, {0x8001, 0x3, 0x0, 0x0, @irqchip={0x5bce, 0x1}}, {0xc2, 0x2, 0x0, 0x0, @irqchip={0x3, 0x9}}]}) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r2, &(0x7f0000000200)='./file0\x00', 0x40080, 0x39) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x266001, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f00000000c0)={0xfffffdfd, 0x4000, 0x0, 0x334ffba9, 0xfffffffd}) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0x6cfc) 04:09:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x51b502) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, [0x4, 0x0, 0x1000000002]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) 04:09:59 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x5, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:09:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x2000000}) 04:09:59 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000005680)) 04:09:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x4) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x1, 0x0, 0x2, 0xffffffffffff8000]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) r4 = gettid() r5 = getpid() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000240)) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r1, &(0x7f0000000200)={r2, r3, 0xfff}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000040)={{0x2, 0x0, @remote}, {0x0, @dev}, 0x0, {0x2, 0x0, @local}, 'veth1_vlan\x00'}) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) sendmsg$can_j1939(r7, &(0x7f0000000a40)={&(0x7f0000000900)={0x1d, 0x0, 0x3, {0x1, 0x1, 0x3}, 0xfe}, 0x18, &(0x7f0000000a00)={&(0x7f0000000940)="93d9b9d3e6d1e8449c6cb12a854f1ac6a4dcf0b0a19bbaceffde5e65a1a78f01e15e31c8ac90da1721dd7866fabd637d29c03ba7ebe2e934e29fe18c4c60bc283c1f5f9459a4d21722e351740cfe51325f9d152f3553b9da505314d494ae57b7425f48a95116db8ffcf85b3e402c0820fe665fffd8e9187f77ee70f194c8f3b40ef980c993ef0dd64eeba1bc6e1f3feef7edbfdfd7a3b79f34b3908ef16f86d3aea1df2e054abea05cdb2307e5", 0xad}, 0x1, 0x0, 0x0, 0x40c1}, 0x4004000) open_tree(r2, &(0x7f0000000180)='./file0\x00', 0x8000) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000001c0)={0x945111b84ba79343, 0x10e000}) 04:09:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0xfffffdfd}) 04:10:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x3000000}) 04:10:00 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x6, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000240)={'raw\x00', 0x4, "a80beb6d"}, &(0x7f0000000080)=0x28) 04:10:00 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x0, 0x250, 0x320, 0xffffffff, 0xffffffff, 0x3f0, 0x3f0, 0x3f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "e3822215bd80f563db5488f3ab8ce7179efd597ea003133192d6a11f931bbb983af691ae8c48b66466fb7d99412bac8d62b0e13dc7608a598060a5c99f808fc3"}}}, {{@ipv6={@remote, @dev, [], [], 'veth0_virt_wifi\x00', 'hsr0\x00', {}, {}, 0x0, 0x0, 0x77e0f0073d1033f2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 04:10:00 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x7, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 04:10:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x4000000}) 04:10:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2801, 0x50) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000240)={0x2000, 0x3000, 0xca14000, 0x2}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f00000001c0)={0x0, 0x0, 0x2b9, 0x1}) 04:10:00 executing program 1: socket$inet6_sctp(0xa, 0x0, 0x84) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0xa, 0x4e22, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x22b}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000001c0)="cd8ca2993acea20d54bd5924183e2d4edc242f7f3bdde827dcf1b0", 0x1b}, {0x0}], 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB='P\x00'], 0x50}, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) 04:10:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000100)={0x0, @remote, 0x4e24, 0x4, 'dh\x00', 0x24, 0x0, 0x33}, 0x2c) 04:10:00 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x8, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:00 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@rand_addr=' \x01\x00', @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x0, 0x0, 0x7}}, 0xe8) 04:10:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x5000000}) [ 728.949179][ T3435] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 04:10:00 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000001b80)={&(0x7f00000002c0), 0xc, &(0x7f0000001b40)={&(0x7f0000001d80)=ANY=[@ANYBLOB="e0170000", @ANYRES16=r1, @ANYBLOB="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"], 0x17e0}, 0x1, 0x0, 0x0, 0x8004}, 0x44) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000001d40)={&(0x7f0000001bc0), 0xc, &(0x7f0000001d00)={&(0x7f0000001c40)={0xac, r3, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80, 0x7b}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}, @NL80211_ATTR_BSS_BASIC_RATES={0x13, 0x24, [{0x36, 0x1}, {0xc, 0x1}, {0x41, 0x1}, {0x48}, {0x36}, {0x4}, {0x0, 0x1}, {0x60, 0x1}, {0x6c}, {0x5}, {0x60, 0x1}, {0x12, 0x1}, {0x36}, {0x3}, {0x24, 0x1}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff2f}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff79}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x6}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x4}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_MAX_RETRIES={0x5}]}, @NL80211_ATTR_MESH_SETUP={0x18, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r5, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r5, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) r6 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x4, 0x2) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000001c0)="0f01c8f30f5862272e660f38815691b8008000000f23d80f21f835800000600f23f80fc75cf000b87cfe00000f23d80f21f835c00000000f23f864650fc77600f20f78e50004b805000000b9004000000f01d9f30f1ef8", 0x57}], 0x1, 0x25, &(0x7f0000000280)=[@cstype3={0x5, 0x4}, @dstype0={0x6, 0x9}], 0x2) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r5, 0x4020aea5, &(0x7f00000000c0)) 04:10:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) 04:10:01 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x9, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000700)=0x98) 04:10:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x6000000}) 04:10:01 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {0x3}, {}]}]}}, &(0x7f0000000380)=""/201, 0x3e, 0xc9, 0x1}, 0x20) 04:10:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x1, 0x70bd2a}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) 04:10:01 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000), &(0x7f0000000100)=0x8) 04:10:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="b92e030000b872090000ba000000000f30c481fc10c5470f69d80f01cfc402353a57820f20d835080000000f22d866430f21bc263e66410f3adfacf4000000000a66b8af000f00d065660f38808171cb4cac", 0x52}], 0x1, 0x10, &(0x7f0000000240), 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, [0xfffffffffffffffd, 0x1, 0x3]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000240)=""/150) 04:10:01 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0xa, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'filter\x00'}, &(0x7f0000000280)=0x78) 04:10:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x7000000}) 04:10:01 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f00000001c0)={'IDLETIMER\x00'}, &(0x7f0000000200)=0x1e) [ 729.879969][ T3502] __nla_validate_parse: 15 callbacks suppressed [ 729.879987][ T3502] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:01 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0), 0x8) 04:10:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_0\x00'}) 04:10:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:10:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x8000000}) [ 730.109530][ T3502] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:02 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0xb, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000180)={0xd6}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 04:10:02 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x660, 0x470, 0x140, 0x470, 0x330, 0x140, 0x590, 0x590, 0x590, 0x590, 0x590, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @common=@inet=@SET1={0x28}}, {{@ipv6={@mcast1, @private0, [], [], 'macvlan0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@inet=@length={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ipv6={@local, @loopback, [], [], 'bond0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c0) 04:10:02 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=@srh, 0x8) 04:10:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x660, 0x470, 0x140, 0x470, 0x330, 0x140, 0x590, 0x590, 0x590, 0x590, 0x590, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, 0x10, 0x5, 0x20}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @common=@inet=@SET1={0x28}}, {{@ipv6={@mcast1, @private0, [], [], 'macvlan0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}, {0x30}}, @common=@inet=@length={{0x28}, {0x0, 0x0, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ipv6={@local, @loopback, [], [], 'bond0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c0) [ 730.457718][ T3543] x_tables: duplicate underflow at hook 1 [ 730.467689][ T3545] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0xff000000}) 04:10:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @broadcast, {[@noop]}}}}}) [ 730.592918][ T3545] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:02 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000880)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) [ 730.638153][ T3562] x_tables: duplicate underflow at hook 1 04:10:02 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0xc, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:02 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600), 0x10}, 0x78) 04:10:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000200)={0x0, 0xe7, "415cba6900782ea633fd6f07e70820c8a92224b0f4af54c35860d9a752f4856eace6f6f5d7d72c3e63aef0f78a2c0db8a10d6229c8caaae4b3533288b151ff78cd806eef5f743ea5f1fe7dc94f29e3be2a6425fb0bcdd07b6272a507aa3b1497010f1caa5d888f98ca0e9fa95d00c737633cd223a558c6ae474cc8945c97dcfc52522f54b402b8924b2b1d96efd951787a05314b81259881b5784fe542d10bc9cc091fe3cce113d1a91da12d2808ba31b6bc7b67a2e59b46fd3047ed311067bee95cbff8a0c5de72e470fedad85d6bd97bd66b10f1e2bd21b8ee99553ab6363b3d6f617da7561f"}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x9, 0x9b7f, 0x20, 0x1, 0x9, 0x1, 0x20, 0x20, 0x3e, 0x7, 0x1, 0x3f, 0xf2}, {0x0, 0x8, 0x91, 0x0, 0x81, 0x6, 0x5, 0x6f, 0x3e, 0x1, 0x3f, 0x3f}, {0x0, 0x3, 0x2, 0x33, 0x3d, 0x40, 0x40, 0x6, 0x50, 0x5c, 0x2f, 0x7f, 0x8001}], 0x3}) 04:10:02 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x23, 0x805, 0x0) listen(r1, 0x0) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x1) 04:10:02 executing program 4: socket(0x63e2c093cad9a883, 0x0, 0x0) 04:10:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0xffff8000}) [ 730.977500][ T3589] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:03 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4, "7b89948a"}, &(0x7f0000000100)=0x28) [ 731.102795][ T3589] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:03 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000005c0), 0x8) 04:10:03 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x23, 0x805, 0x0) listen(r1, 0x0) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x1) 04:10:03 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0xe, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) 04:10:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000000200)={0x1, 0x9, 0x8}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) fstat(r3, &(0x7f0000000180)) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2000, 0x0, 0x3}) 04:10:03 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x54f90fa004248db5, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 04:10:03 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000040), &(0x7f0000000100)=0x8) 04:10:03 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x23, 0x805, 0x0) listen(r1, 0x0) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x1) [ 731.441298][ T3625] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 731.544727][ T3630] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:03 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00'}, 0x10) 04:10:03 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000001c0)="cd", 0x1}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB='P'], 0x50}, 0x0) 04:10:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x2}) 04:10:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/233, 0xe9}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/55, 0x37}], 0x3, 0x4, 0x8) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="8fa97c80a89300000066ba4300edc7442400f5000000c744240200a00000ff2c24b9d00900000f32b9800000c00f3235002000000f30c461b9f612c483855fac8e91d60000afb98b0a0000b877000000ba000000000f303ef30fc730c442b5bcaaf0980000", 0x65}], 0x1, 0x3d, &(0x7f0000000400)=[@cstype3={0x5, 0x9}, @vmwrite={0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], 0x2) 04:10:03 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0xf, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:03 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x23, 0x805, 0x0) listen(r1, 0x0) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x1) 04:10:03 executing program 1: socketpair(0x1d, 0x0, 0x0, &(0x7f0000000300)) [ 731.920628][ T3667] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 732.056862][ T3674] can: request_module (can-proto-0) failed. 04:10:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x3}) [ 732.118807][ T3674] can: request_module (can-proto-0) failed. 04:10:04 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x10, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:04 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000380), &(0x7f0000000bc0)=0x4) 04:10:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x660, 0x470, 0x140, 0x470, 0x330, 0x140, 0x590, 0x590, 0x590, 0x590, 0x590, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, 0x10, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x23b2c07e094f0a47}}, @common=@eui64={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}, {{@ipv6={@mcast1, @private0, [], [], 'macvlan0\x00', 'ip6gre0\x00', {}, {}, 0x67, 0x1, 0x2}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}, {0x30, 0x10}}, @common=@inet=@length={{0x28}, {0x0, 0x0, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ipv6={@local, @loopback, [], [], 'bond0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c0) 04:10:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = dup2(r1, r1) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) [ 732.306928][ T3693] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 732.383322][ T3700] sctp: [Deprecated]: syz-executor.0 (pid 3700) Use of int in maxseg socket option. [ 732.383322][ T3700] Use struct sctp_assoc_value instead [ 732.431259][ T3707] x_tables: duplicate underflow at hook 1 04:10:04 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x11, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:04 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 04:10:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x4}) 04:10:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001680)=@newtfilter={0xec4, 0x2c, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0xe98, 0x2, [@TCA_U32_ACT={0xe94, 0x7, [@m_connmark={0x40, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0xd, 0x6, "95974f267a46d76754"}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x0, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xec4}}, 0x0) 04:10:04 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x0, 0x3}]}]}}, &(0x7f0000000380)=""/201, 0x36, 0xc9, 0x1}, 0x20) 04:10:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x8000, 0x30, 0x2}, 0x18) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000180)={0x3, 0x0, [{0xffffff60, 0x4, 0x0, 0x0, @sint={0x8001, 0x7fff}}, {0x3, 0x4, 0x0, 0x0, @adapter={0x1f, 0x1, 0x200000000000000, 0x2e76, 0x5}}, {0xffffff81, 0x4, 0x0, 0x0, @sint={0x80, 0xb2}}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000240)={0xe43f, 0x0, 0x2, 0x200}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) 04:10:04 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x60, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:04 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) 04:10:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x20) 04:10:05 executing program 2: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x7) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202eaf66696c6530202f6465762f6b766d0020000ad4fcc68f0a1762c0e7a2d7ba33bdedefef593abb68fc62598ac76cefb43969005397b099d4eb17c2fa673833fd880c8facde9390"], 0x4b) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f00000000c0)) 04:10:05 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:05 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x520, 0x470, 0x140, 0x470, 0x330, 0x140, 0x590, 0x590, 0x590, 0x590, 0x590, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@mcast1, @private0, [], [], 'macvlan0\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ipv6={@local, @loopback, [], [], 'bond0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) 04:10:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001680)=@newtfilter={0xee4, 0x2c, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0xeb8, 0x2, [@TCA_U32_ACT={0xeb4, 0x7, [@m_connmark={0x48, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x18, 0x6, "95974f267a46d7675443212f5efd667af4f0675a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0xe68, 0x0, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{}, 0x0, 0x0, [{}]}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffffa5}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xee4}}, 0x0) 04:10:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x5}) 04:10:05 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, &(0x7f0000000bc0)) 04:10:05 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000280), &(0x7f0000000300)=0x8) 04:10:05 executing program 0: pipe(&(0x7f0000000480)) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 04:10:05 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x2, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x6}) 04:10:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x3000, 0x2}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x101200, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 04:10:05 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000380)=""/201, 0x2e, 0xc9, 0x1}, 0x20) 04:10:05 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) [ 733.555745][ T2973] Bluetooth: hci0: command 0x0406 tx timeout 04:10:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x22, 0x0, &(0x7f0000000140)) 04:10:05 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x12, r0, 0x0) 04:10:05 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f0000000040)) 04:10:05 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000440)) 04:10:05 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x3, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x212, 0x100, 0x8, 0x8000, 0x8, 0x7ff, 0x5, 0x7, 0x9, 0x3, 0x71b, 0x1, 0x9, 0x100000000, 0x7fff, 0xfffffffffffffff9], 0x0, 0x200000}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x3e, 0x0) write$nbd(r3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x68) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) 04:10:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x7}) 04:10:06 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) readv(r0, &(0x7f0000001500)=[{&(0x7f0000001480)=""/52, 0x34}], 0x1) 04:10:06 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x7a, 0x0, &(0x7f0000000040)) 04:10:06 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@dev, @local}, 0xc) 04:10:06 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$P9_RATTACH(r0, 0x0, 0xfffffffffffffe26) 04:10:06 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x4, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8}) 04:10:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x4800, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 04:10:06 executing program 0: r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000002180)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x80) 04:10:06 executing program 4: setrlimit(0x7, &(0x7f0000000040)) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 04:10:06 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x5, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:06 executing program 0: timer_create(0x0, &(0x7f00000002c0), 0x0) 04:10:06 executing program 4: setrlimit(0x7, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) [ 734.927302][ T3899] __nla_validate_parse: 13 callbacks suppressed [ 734.927321][ T3899] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 735.035100][ T3899] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:07 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$eventfd(r0, 0x0, 0x0) 04:10:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x300}) 04:10:07 executing program 0: statx(0xffffffffffffff9c, &(0x7f00000015c0)='./file1\x00', 0x0, 0x0, 0x0) 04:10:07 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x3e, 0x0) write$nbd(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="69be4ee477ff4207840f36b75ef57c29b33c422b8bccebac45b71ebb790717d89e34f3eeea6c4316018755a3399ddced91f6fe4f9ae323e2ef3f2400a104f94e3ccead6b09b687dbccf1004556fb4b2eb7c558f10d897a0e40b6352bdd0e9bd790d3251ee06274a6c01ae7d38960c3d0ed35b4a7df9d6020"], 0x68) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000340)=[0x8, 0x2, 0xcffb, 0x9, 0xffc], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0xfff, 0xeeeeeeee}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="660fdc7e32660fc73266baf80cb814d0ce8cef66bafc0ced0f08c4c2791c993c7c95aa66baf80cb88cbce380ef66bafc0cecb924090000b8a0d80000ba000000000f30260fc7ad00000000f381655c008000000f32", 0x55}], 0x1, 0x20, &(0x7f0000000240)=[@cstype0={0x4, 0xb}, @cr4={0x1, 0x400}], 0x2) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pipe2(&(0x7f00000025c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) kcmp(0x0, 0x0, 0x0, r3, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000740)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x78, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9, 0x33}}}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0xc}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x40, 0x13}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xb}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x200c88c0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x1, 0x0, [{0xa, 0x52, 0xfff, 0x9, 0x3}]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) 04:10:07 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x242, 0x0) write$P9_RGETLOCK(r0, 0x0, 0x1ce) 04:10:07 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x6, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) [ 735.266664][ T3917] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:07 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 04:10:07 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 04:10:07 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 04:10:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x500}) 04:10:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) recvmmsg(0xffffffffffffffff, &(0x7f00000042c0)=[{{&(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/154, 0x9a}], 0x1, &(0x7f0000000300)=""/233, 0xe9}, 0x5}, {{&(0x7f0000000400)=@ax25={{0x3, @default}, [@rose, @bcast, @netrom, @netrom, @default, @rose, @default, @bcast]}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000000480)=""/240, 0xf0}, {&(0x7f0000000580)=""/180, 0xb4}], 0x2, &(0x7f0000004180)=""/37, 0x25}, 0x3}, {{&(0x7f00000006c0)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000740)=""/130, 0x82}], 0x1, &(0x7f0000000840)=""/62, 0x3e}, 0x8}, {{&(0x7f0000000880)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000900)=""/148, 0x94}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/151, 0x97}, {&(0x7f0000002cc0)=""/164, 0xa4}, {&(0x7f0000001b40)=""/4096, 0x1000}], 0x5, &(0x7f0000002bc0)=""/11, 0xb}, 0x5}, {{&(0x7f0000002c00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004580)=""/235, 0xeb}, {&(0x7f0000002d80)=""/232, 0xe8}, {&(0x7f0000002e80)=""/76, 0x4c}, {&(0x7f0000002f00)=""/20, 0x14}, {&(0x7f0000004480)=""/204, 0xcc}, {&(0x7f0000003000)=""/46, 0x2e}, {&(0x7f0000003040)=""/88, 0x58}, {&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/148, 0x94}, {&(0x7f0000000680)=""/58, 0x3a}], 0xa, &(0x7f0000004280)=""/44, 0x2c}, 0x2}], 0x5, 0xc3, &(0x7f0000004400)={0x77359400}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000004440)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x3e, 0x0) r4 = syz_mount_image$hfsplus(&(0x7f0000001a80), &(0x7f0000001ac0)='./file0\x00', 0x1, 0x5, &(0x7f0000004a40)=[{&(0x7f0000002f40)="fcadb3eb9ef98d70cdba2f64a74887571d75745620a90cf85eed438171f630a6feeea99d0ec0c8aa46f4bb4c26b3edebda445136d8cb5262203b6879e355eb00b86b2813b724c74a7ac023165cee3accb5383b0cf1f2718ad1a2508667ebbc1b93e430c5c166cb075f2143e5f0767b526a8357297baf941e96d456a6b59a479ca026cc788f632a2b21cf5cbfe666e25f6e60bb28abf0f6417ac8535fd359560422c3e48a8a94fbca89e50b6f477f8d4f2d4af2545b877486971d22af6e84da39", 0xc0, 0x281a7af6}, {&(0x7f0000004680)="90117fcb962b5af060c803245f11933642e9a6321136378375f87520c4f6c9277fb38285d7d65a5f6ee12e6b2b84c2a091dfd9bc55a9e6b92a4d1ec00fe53a39047ba359384427d5557299e2acf383d69dc384d0b566ddaf9dbdacc3a6717422194147a4a34619d757aad6b40121348cff29552df47f484d95de0a0dca5360a249c26828d5239d3993e790f53f258eab7c9a6b2150cc14e3c3220058e6c5d0e00952339f5c9f85b8514f21c6271ec3aa4e5c1f6c94dc345ce2", 0xb9, 0x3}, {&(0x7f0000004740)="46d3c054c600e7906be1d65cd2ccd21f75107929fe798c6b52a0d2931fdeb5dd6a22c710d66fd7f022af7642c94de56cb1010c02f203893887e0b3b8df3bf914250eb3533b86d68b996c5e9a2bfe7188f546976383c27a49693f0bb6c81d5e3ee506906a8b4e5b1af38b64038965051c9225d7108c94afec034f2999bf7d222f5ad6d5bb672057e75940c20a9a6a265857b54dae2dd3be18b701b5daae60a8937cfe068cc41302b1ed0dd5de07dfa6890024c16e6ab57df048145436f2263a1ee39ae86386da580c2d5d25cd6c20ea7f1afdff292482d689d78d7500c2", 0xdd, 0x4}, {&(0x7f0000004840)="3fc5416a046c2ef8b6d3095152ff83da9d4b4923c71218cc0c1bda0fd0024a0a47d82d6b34ad175a3637f76cc19bbec10c3128fa488fa920d793f0e97b644a46de36b5995c45115c64c22e3c4456dee2a3bb9f9cb1887a7da2ea90cb5d287d5f6d755bb2b33774d14eb492a0c9bf564ff362534e1bfc9789bcfa5b316e5b29f6d1e37ea2f459354d319071bd123f5d958c4e33e5a588862e8c6e70746312b3263ed78603488bc3b031dd9fd19edfb10e140c696b62a2ef57675f23b769d680e3d987", 0xc2, 0x4}, {&(0x7f0000004940)="4196ea7c233018c3fc9678a9632e9ad5d107263c83a99945c414ecd2777f7fbbb5c7cbfebc563d0c6c94825a4c1e35b2a659eefbbd56376e4c582cfc716f21f445d0f1b6d794d7291c74de28b030d56a2af6239399a42720b723a0ce9dc619ed40a8da39252f3e8a8f26c3493ebbe2ad96da412e29c493e4aa6bbce2d984e845653f6c83e6859a13f21a78bb5d9df72235a2388f78f63b822974f1ecd34ea29c6594de287c94113ba2d13d77ab4d71614291d8738a131c4fdbf3be30f1596a568f19d141e885276f5e4ed042c6ed552be66ddce0d9503404633e55951bca4f7b71db21767015a52ac7100ee4", 0xec, 0x56c4}], 0x0, &(0x7f0000004ac0)={[{@session={'session', 0x3d, 0x6}}, {}, {@type={'type', 0x3d, "04a554d1"}}, {@force}, {@force}, {@nls={'nls', 0x3d, 'cp862'}}, {@part={'part', 0x3d, 0x1ff}}, {@nobarrier}, {@creator={'creator', 0x3d, "daed994b"}}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@dont_appraise}, {@euid_lt}]}) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000001b00)=0x2000000) write$nbd(r3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x68) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) 04:10:07 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x7, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:07 executing program 4: rename(&(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)='./file0\x00') 04:10:07 executing program 0: setrlimit(0x7, &(0x7f0000000040)) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') [ 735.670516][ T3945] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, 0x0, &(0x7f00000000c0)) 04:10:07 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x8, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0xb, &(0x7f00000001c0)=""/140, &(0x7f0000000280)=0x8c) 04:10:07 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) 04:10:08 executing program 0: setrlimit(0x7, &(0x7f0000000040)) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 04:10:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x600}) 04:10:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1015}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}]}]}, 0x34}}, 0x4000) fcntl$getownex(r3, 0x10, &(0x7f0000000500)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000200)={0xffbffff, 0x5, 0x401, r4, 0x0, &(0x7f00000001c0)={0x10377, 0x40, '\x00', @p_u16=&(0x7f0000000180)=0x40}}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@private1={0xfc, 0x1, '\x00', 0x1}}, 0x14) preadv(r2, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/18, 0x12}, {&(0x7f0000000300)=""/198, 0xc6}, {&(0x7f0000000400)=""/169, 0xa9}], 0x3, 0x5, 0xffffffff) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) r5 = socket(0x11, 0x800000003, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000540)={0x0, @empty, @empty}, 0xc) [ 736.110555][ T3982] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:08 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, 0x0) [ 736.213098][ T3987] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 04:10:08 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80c01, 0x0) write$P9_RREADLINK(r0, 0x0, 0x25) 04:10:08 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x9, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x700}) 04:10:08 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) [ 736.510471][ T4019] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f00000001c0)={0x74, 0x0, [0x1, 0x6, 0x3, 0x100000000]}) 04:10:08 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, 0x0) 04:10:08 executing program 4: syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x2000, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:10:08 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0xa, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:08 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x58b0c3, 0x0) 04:10:08 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, 0x0) 04:10:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0xff00}) 04:10:08 executing program 4: recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0) [ 736.954004][ T4052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:09 executing program 1: setresgid(0xee00, 0xffffffffffffffff, 0xee01) 04:10:09 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0xb, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:09 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_buf(r0, 0x0, 0x2c, &(0x7f0000000100)='>', 0x1) 04:10:09 executing program 4: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_buf(r0, 0x0, 0x2c, &(0x7f0000000100), 0x0) 04:10:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x80ffff}) [ 737.303857][ T4076] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r3 = socket(0x11, 0x800000003, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r8 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x1d, r8, r6, r7) fchown(r2, r4, r7) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) [ 737.413980][ T4076] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:09 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) 04:10:09 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r0, 0x0, 0x2d) 04:10:09 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000001c0), 0x0, 0x0, 0x0) 04:10:09 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0xc, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x1000000}) 04:10:09 executing program 1: setrlimit(0x7, &(0x7f0000000040)) socket(0x2, 0x1, 0x0) 04:10:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x0, 0x6}) 04:10:09 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f00000000c0), 0x4) 04:10:09 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 04:10:10 executing program 1: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 04:10:10 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x1ad141, 0x0) write$cgroup_subtree(r0, 0x0, 0xe) 04:10:10 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0xe, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x2000000}) 04:10:10 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x5d) 04:10:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x3e, 0x0) write$nbd(r2, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x68) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000180)="ae0fc71ef4ff0f20e06635040000000f22e067a8e80f00d7670f5859a867650f09c0c8336465670fc7ba09000000d132", 0x30}], 0x1, 0x21, &(0x7f0000000200)=[@cr4={0x1, 0x100080}], 0x1) sendfile(r1, r0, &(0x7f0000000240)=0x1a93, 0xc0f) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) socket(0x18, 0x5, 0x3) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000480)=r3) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) 04:10:10 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0x0) 04:10:10 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) 04:10:10 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000001340), 0x402, 0x0) 04:10:10 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0xf, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x3000000}) 04:10:10 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 04:10:10 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) 04:10:10 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$sock_netdev_private(r0, 0x0, 0x0) 04:10:10 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x10, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:10 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7daf9187dcb3e1d, 0x11, r0, 0x0) 04:10:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x4000000}) 04:10:10 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x7, 0x800000000, 0x7fffffff, 0x1]}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x42c03, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3, 0xfffffffffffffffd, 0x0, 0x3f]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x9, 0xc2b, 0x522}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x3e, 0x0) write$nbd(r4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x68) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x3e, 0x0) write$nbd(r5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x68) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f00000001c0)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1800008, 0x4000010, 0xffffffffffffffff, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000340)="b908030000b8c18ec825ba404b6f350f300f06c4e3117cd6fc66ba4100b893adbb9def2eda020f6f0ff30fc7770bc4e17e125905670f01ca26f2af", 0x3b}], 0x1, 0x2, &(0x7f00000003c0), 0x0) 04:10:11 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x242, 0x0) write$P9_RREMOVE(r0, 0x0, 0x0) 04:10:11 executing program 0: setrlimit(0x7, &(0x7f0000000040)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 04:10:11 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x11, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:11 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) getsockname(r0, 0x0, 0x0) 04:10:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x5000000}) 04:10:11 executing program 4: r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:11 executing program 0: mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)) 04:10:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x74, 0x0, [0x3]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r3 = socket(0x11, 0x800000003, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r4 = socket(0x11, 0x800000003, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r5 = socket(0x11, 0x800000003, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0xe0}, {r1, 0x2020}, {r3, 0x108}, {r4, 0x2000}, {r5, 0x8200}, {r1, 0x1}], 0x6, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000200)={[0x8000]}, 0x8) close(r2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0xd000}) 04:10:11 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 04:10:11 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x60, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:11 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002700), 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) 04:10:11 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) 04:10:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x6000000}) 04:10:11 executing program 4: r0 = gettid() get_robust_list(r0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) [ 739.989145][ T4255] __nla_validate_parse: 11 callbacks suppressed [ 739.989164][ T4255] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x20040, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) 04:10:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000100), &(0x7f0000000140)=0x4) 04:10:12 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 04:10:12 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0xf0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x7000000}) 04:10:12 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system', 0x20000, 0x20) 04:10:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000080), &(0x7f0000000040)=0x4) [ 740.352338][ T4295] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:12 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)) 04:10:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000180)={"e964076c32e484fd3c28579c10462884c8e77c159422354e6d30590823d0a78cab5342526027e74d74b852219df1ca5c35c246d9c97f6c381c95d31d90a2e84030875a2e7d5f8bc4f715560353c550d1c1013f67abbc71c347af93400614c9f17071fc4e0f98da45c3825ac99ef4f23e52ee2ee87bc4b8a493d2ea83423349a3c0b44ab79f393691a2a00175994b8347140a8f98ba67aef003f36e5e95d15c942c3946b1625a527b068d3113545e5e63553507d4fcb24749bb3668637ab9430560eb025911a59a6fe127f5f42c112d41176a0ac66014d5629ad3ff66ec80faa08615209b5ddea0acd7b189d83ec7d9e34e9cbc5289e9339054a63d05a9270fba4e295aa4e7cf0651a58c9604118220f40fd552d540335ee27166bbac67bafb3aeab2c2906a744ceafadf1e5726d262e18777c8aeaba2acfe877d86b0f7aae66099f50c721ee445df880bcd6da282683fa831a86b9f00c0c934a4aa63a03116ae4978bbd858dd4fb3f5adb6a28ca84b2e2fcbeb99e170c5a60454e586a11cd0fc2ccd0c434c686b703a1631aae8cbd641f6934d5d59603c8de530c131f072a618da350dd772736c227775626ae17fbe093bf41af6e311e314039e68eafcf731d5d46ae800ca0dd5c810bb2ec6af264b20e1533543454395eeb2600612b01476d406b49bcb9b3a69d41e0dbd99aa43bde11602cf857598f706a23fab19b4bbb53b8fa971ecc39780ce2e9b87d5d91fa6ec617474f363df709ba217492a94947f098e03c7068e2b79facc3f18cc2f63cc1f4fe2389a2171781b116d2f16a3fe3126ae72c6ce9f768fae5668240c3216d3cba54ed8dcdc9b6d4af896be0e9f920151a4af9edb5024fdfcf28c41bba9c9b6de95c68e50fb8e2bbde44eb6da733435f782721e4bc0c8bd3a5e577682776c7806be73a7d5c2b9a188050d33c24dd10c07c950c2cabce52533a33b3414f64144681a1a9db893e437b4d20ab5687faa702f7a38422a8ebe56a7975e6806dfee3584c4025263c582b2699bfb3f70faf9c90bd52b0ad57d7bd5388fb3d69f5d345c8bdf964c5633492b6cc78c6b536b06d8e91b5db332dfc713fe94d3520078121e0a70967e6d9e0ae13c0596fe018f1d2507d864cd8599fd4e51c2980c753cc2d6967398c9271b638d13cecba6044d2a035234707e9679c21e4fcd9a466dde7de280c26ac44fb8d207e354936ecd3441d121f5fff2c0ace3ec13d68e9bd091bf871027f785df0eae066f63ad38a876a503a1915856f8c54778269d03a6dcacd515bc6f4a21caed6dc645b7e5076e2c5ecc12fbcae5c5ba08982993d27bd644b511b43972bc62ca7caf5ad84e9fd5460cf08ee0d6f3f596e3972c6288ad4111cbd9a0fb65d1239b54645bfc7ce40923afea6251d0459fcc30f2ec80cda6283bd13ac09f22886435b909bb6950e4c612044d36"}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x800000}) 04:10:12 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x300, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:12 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 04:10:12 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 04:10:12 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x280, 0x0) 04:10:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8000000}) [ 740.795949][ T4330] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={r0, 0x1, 0x401, 0x88}) openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f00000000c0)) 04:10:12 executing program 1: pipe2$9p(0x0, 0x180000) 04:10:12 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x212000, 0x0) 04:10:12 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x500, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:12 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000002500)='.pending_reads\x00', 0x840, 0x0) ioctl$PIO_FONTRESET(r0, 0x5452, 0x4af000) 04:10:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0xff000000}) [ 741.187031][ T4363] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x3, 0x0, 0xce41]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) 04:10:13 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0), 0x0, 0x0, 0x2) 04:10:13 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, 0x0, 0x0, 0x0, 0x0) 04:10:13 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) 04:10:13 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x600, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:13 executing program 1: setrlimit(0x7, &(0x7f0000000040)) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 04:10:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0xffff8000}) 04:10:13 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/power_supply', 0x0, 0x0) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) 04:10:13 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) [ 741.651131][ T4393] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) fadvise64(r1, 0x7, 0x401, 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f00000000c0)) 04:10:13 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80c01, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) 04:10:13 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/power_supply', 0x0, 0x8) 04:10:13 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x700, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:13 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$P9_RLINK(r0, 0x0, 0xfffffffffffffec6) 04:10:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) 04:10:14 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000180)="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", 0x2000, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 742.108358][ T4431] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:14 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, 0x0) 04:10:14 executing program 4: msgget$private(0x0, 0x10b) 04:10:14 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x900, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:14 executing program 1: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) 04:10:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cgroup.events\x00', 0x0, 0x0) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001a00), 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001a80)={0x1, &(0x7f0000001a40)=[{0x40a, 0x80, 0x5, 0x9}]}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000001b00)={0x9, 0x0, &(0x7f0000001ac0)=[r4, 0xffffffffffffffff, r5, r1]}, 0x4) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x4000, 0x0, 0x4, 0xfffffffc, 0x10001}) r6 = syz_open_dev$vivid(&(0x7f0000000380), 0x2, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205649, &(0x7f0000000440)={0x9c0000, 0x0, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x9a090c, 0x3, '\x00', @p_u8=&(0x7f00000003c0)=0x2f}}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/pcmcia_core', 0x313002, 0xf9c72dc26b568bad) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000240)) r8 = socket(0x11, 0x800000003, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendto$inet(r8, &(0x7f0000000280)="91c2b59608c7c115249549cd12b4612d199c71bb0db38bc064c4a85767aee29c5415b4c343e84608bc457dcc11253990536e8aabcf376688d8ed599f71a9a3d0a3150f63ebdfd23f04e69bc1147f9a413592f4c4e3c3698de2d2323fa47c9ba76e6c780764b468d0cc6b1e83ffa79690899c70703037a4892093963f3d7fe54090f30135d8b90a6a19c37e2727f422da576a7efb7c9e1c396005d4268dea7fedad058555fb840e97ea2e18e0d98e2f5f50260e585ce339c20bc1394f3e75b7fc2c0d8d86e490d34a8988c885a3080bffce3df7a6059026c03a3c2955dfc40dfbf57c9d1a66457b", 0xe7, 0x4000, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x5000, &(0x7f0000000180), 0x8, r7, 0x1}) 04:10:14 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002800)='/sys/devices/system', 0x0, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, 0x0) 04:10:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x2}) 04:10:14 executing program 4: r0 = socket$inet(0x2, 0x3, 0x6) accept$inet(r0, 0x0, 0x0) [ 742.631668][ T4472] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:14 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0) 04:10:14 executing program 1: openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) [ 742.801775][ T4478] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup2(r2, r1) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000180)={{r3}, "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"}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) 04:10:14 executing program 4: r0 = socket$inet(0x2, 0x3, 0x6) getsockname(r0, 0x0, &(0x7f0000000140)) 04:10:14 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0xa00, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x3}) 04:10:15 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, 0x0) 04:10:15 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80cc1, 0x0) [ 743.146540][ T4510] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:15 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000), 0xfffffffffffffd20) 04:10:15 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0xb00, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000cc0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x1c}}, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 04:10:15 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) 04:10:15 executing program 1: r0 = socket$inet(0x2, 0x3, 0x6) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @multicast1}, &(0x7f0000000040)=0xc) 04:10:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}) 04:10:15 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0x0) [ 743.515747][ T4540] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, 0x0, 0x4b) 04:10:15 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80c01, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) 04:10:15 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0xc00, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x5}) 04:10:15 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) 04:10:15 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000080)) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3, 0x0, 0x0, 0x4000000000]}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x30) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000002c0)="c4427d133ac463e15da9000001001cc48119159a3e8500000f784c426167362e66420f383fc466bad104b823e95223ef0f786cb106c462a90b0fb9800000c00f3235002000000f30c4c179d7d0", 0x4d}], 0x1, 0x2, &(0x7f0000000340)=[@cstype3={0x5, 0x2}], 0x1) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x3e, 0x0) write$nbd(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="9758f23d3d91424593c3c246dbcda97d708a0d602ec527659ffe5e799bb25cb4732293844744abb52c5de01721ddd982da92ce1aef04db650d5c35a5a3de1b72737ade2bcc3d39dd80191c22143242fccc680f8b"], 0x68) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000001c0)={0xf000, &(0x7f0000000280), 0x0, r1, 0x4}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = socket(0x11, 0x800000003, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendfile(r1, r4, 0x0, 0x3784) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f00000000c0)) 04:10:15 executing program 1: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, 0x0, 0x0) 04:10:15 executing program 0: shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) 04:10:16 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0xe00, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:16 executing program 4: r0 = socket$inet(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) 04:10:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x0, 0x9, 0x0, 0x2e]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x3e, 0x0) write$nbd(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="db2b7a02ffcf44905acd9496209e57581b8124c34e7cc57cff3661643b49c20ac81f2c903129c243af428a5e7648b4062c0e7140bb14017a0b39dbf44f16c8979e7bca0502dfc57a4915de4c539f23270fe39d8edb1f3ec8f5e928113df4f7bb9b3d583c7b1b2bf14cf5f07d4a13ddf64d2677816775fafce84b4c6594b966aa76bc39b5fc935aa828c68c6f45bf32b30e76eca958aca75ac3e8a79d"], 0x68) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ppoll(&(0x7f0000000180)=[{r2, 0x221}], 0x1, &(0x7f0000000200)={r3, r4+60000000}, &(0x7f0000000240)={[0x101]}, 0x8) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) 04:10:16 executing program 1: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x7ecf4072b9a03a13, 0x0) 04:10:16 executing program 0: msgget(0x0, 0x280) 04:10:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x6}) 04:10:16 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) recvmsg$unix(r0, 0x0, 0x0) 04:10:16 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0xf00, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:16 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) 04:10:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) 04:10:16 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r1 = epoll_create(0xf4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 04:10:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x7}) 04:10:16 executing program 4: mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 04:10:16 executing program 1: r0 = msgget(0x0, 0x0) msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x800) 04:10:16 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x1100, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0xf000, 0x0, 0x3}) 04:10:16 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/power_supply', 0x301001, 0x8) 04:10:17 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80c01, 0x0) write$9p(r0, 0x0, 0x0) 04:10:17 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 745.082074][ T4668] __nla_validate_parse: 6 callbacks suppressed [ 745.082095][ T4668] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x8}) [ 745.190329][ T4668] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:17 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0xfffffffffffffd25) 04:10:17 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) 04:10:17 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x5865, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:17 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) accept(r0, 0x0, 0x0) 04:10:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3, 0xffffffffffffffff]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x3e, 0x0) write$nbd(r3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x68) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f00000001c0)="0f40b16054262e0fc79fdd00649dbad004b0ceee260f232c0f320f0f6f839e360fc73a0f20c06635000000800f22c0f30fa7e0", 0x33}], 0x1, 0x48, &(0x7f0000000240)=[@cr4={0x1, 0x10}], 0x1) r4 = syz_open_dev$audion(&(0x7f0000000180), 0x6, 0x40800) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x101281, 0x0) fcntl$getflags(r5, 0x1) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) 04:10:17 executing program 0: setrlimit(0x7, &(0x7f0000000040)) syz_open_procfs$userns(0x0, &(0x7f0000000000)) 04:10:17 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x181c01, 0x0) write$P9_RMKNOD(r0, 0x0, 0x0) [ 745.606525][ T4704] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x300}) 04:10:17 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/power_supply', 0x0, 0x10f) 04:10:17 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) 04:10:17 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x6000, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:17 executing program 1: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x288400, 0x0) 04:10:17 executing program 4: setrlimit(0x7, &(0x7f0000000040)) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 04:10:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x189000, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000200)={&(0x7f00000001c0)=""/58, 0x3a, 0x8, 0x5}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) [ 746.062092][ T4739] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:18 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) 04:10:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x500}) [ 746.176965][ T4739] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:18 executing program 1: r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 04:10:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, &(0x7f0000000040)) 04:10:18 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x6558, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:18 executing program 0: syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000040)="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", 0x2000, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 746.522604][ T4774] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:18 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 04:10:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000180)={0x81, 0x0, [0x3]}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000200)={0x6149, 0x8, 0x2, {0x2, 0x7}, 0x4, 0x3}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) 04:10:18 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8c000, 0x0) 04:10:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x600}) [ 746.704678][ T4777] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 746.839876][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.846236][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 04:10:18 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 04:10:18 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x40, 0x0) 04:10:18 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x8100, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:18 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r0, 0x0, 0x6) 04:10:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x700}) 04:10:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000180)={0x74, 0x0, [0x2, 0x3, 0x4a]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) [ 747.111512][ T4812] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:19 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80c01, 0x0) write$P9_RWRITE(r0, 0x0, 0x0) [ 747.232345][ T4812] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:19 executing program 1: recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:19 executing program 0: r0 = socket$inet(0xa, 0x5, 0x0) accept4$inet(r0, 0x0, 0x0, 0x0) 04:10:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0xff00}) 04:10:19 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0xf000, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x9, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) 04:10:19 executing program 1: socket(0x0, 0x86144443f3bd250d, 0x0) 04:10:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000340)={{0x84, @local, 0x0, 0x4, 'wrr\x00'}, {@rand_addr, 0x0, 0x0, 0x0, 0x2}}, 0x44) [ 747.609905][ T4846] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="17090000000000000000010000600500070000000000080009000000000014001f000000000000000000000000000000000008000a00000000000600020001000000140020"], 0x5c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x200, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f00000000c0)) [ 747.777608][ T4854] 8021q: adding VLAN 0 to HW filter on device bond1 [ 747.833719][ T4854] team0: Port device bond1 added 04:10:19 executing program 1: clock_getres(0x1, &(0x7f0000000080)) 04:10:19 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0xffff, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='veth1_to_bridge\x00'}) 04:10:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x80ffff}) 04:10:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x9, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) 04:10:20 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x2, 0x1007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x40) 04:10:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x10002, 0x1, 0x3005, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x0, 0x10000, 0x3, 0x4}) 04:10:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 04:10:20 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) [ 748.450357][ T4941] 8021q: adding VLAN 0 to HW filter on device bond2 [ 748.493207][ T4941] team0: Port device bond2 added 04:10:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x1000000}) 04:10:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x501901, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) 04:10:20 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x40002000, 0x0) 04:10:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000044c0)={0xffffffffffffffff}) bind$unix(r0, 0x0, 0x0) 04:10:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0xf9ffff00}, {}]}, 0x108) 04:10:20 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:20 executing program 4: bpf$BPF_BTF_GET_FD_BY_ID(0x18, 0x0, 0x0) 04:10:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x10000}) 04:10:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000200)={0x14, r1, 0x1}, 0x14}}, 0x0) 04:10:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000680), 0x10) 04:10:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x2000000}) 04:10:21 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:21 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/time_for_children\x00') 04:10:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r1, 0x503}, 0x14}}, 0x0) 04:10:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfeffff07}]}, 0x108) 04:10:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x3000000}) 04:10:21 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:21 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001c40)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000014c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece0200c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea564a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c29184ff7f0000cef809606056fe5c34666c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45ef4adf634be763289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd0224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5acd3de3a83209da17a0faf60fd6ad9b97aa5fa684803660000000000000003926b81e3b59c9b081d6a00000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec701000000e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b6c4a000000002b435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000090000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be03f8a6ef2cd317902f19e385be9e48dc003913653282830689da6b53b263339863297771429d120000003341bf4a00fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94e6932c1b6a17bc0cfd3467decb05cfd9fcb32c8ed1dbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ecbbc55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2ffad1bc8245f1105cf692d64d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000063ab6b047600d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bdea6f26e4a4304e50c349f4f9ecee27defc93871c5f97a7a54ff9b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1513a8250df98674152f94e32409e2a3bce109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1f59d4f21137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b928a31d2eca55f74a23641f61f2d5b308cf05031b056237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d493bc19f810049209b085f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762ebeb082e5e0b428ee751000000745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce8daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83186c1526af6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af930cd6db49a47613808bad959719c0000000000378a921c7f7f8433c2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c1fb2d4b205aa00b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f9360984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e49acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0efecb0f477db103463af2847e6ade5b9e065ec0d0ba58fedae5f08818fca475b169469f9efd131925d98c34b3cb26fe26796dd43b87e1cd2a39f5cf21d2e80a64ac97e71cafc29bfb78db090dd12225efeda2e93bf7f6ba7865e9c375a780929dfa5a210bf5858e2a4ff8e8d1e8c9cceed07c6312b734c72510d335acc94f76e7078ce4066f1e0ac9429f8013683301277a11e25b248b61180cb6207a0e26757f3f1bfc6c27f3720d1fb74afb17f3b5239bc2243853d5234afb05ed6024e94dee34666c5b5522b54cb433efa54b4e9022533e6a4598b453c9e549847c89bdee957dfa9ded9f16fdcd1b681e4c72f32fa3334313e334cc140daec7dcb22f463457a19a0b230bbded8625832a2b6dbf837704aa89a7543208debe71d934cedaf85f1bf43f23baa076b051342ab9651cc11d9b8b7e68e931ca4795a720797959d07a0fd82c770a0c0a2b1924bc8dca0c4ca73f4e8ca2de4a1689b1717d9d008131206bb60c09ffbd2b5bdb327f45a583073d0e2045ab7b9dacefd8921f9078fcc568aa1f9c419115c2042f506b50aef369859f67fe4044a6943d7c2b028146743512d95f76bdbf5d5dabd3e8b9f9729caf7f85c826842fea43486e2bead66fdded6184965168ada42a2ed63f484f677dd4dd00b3a39010aa9baddee202b1ea070e44b59d396a3a280379bec2d22cda1f4d3fd6768326578dad0e36b505c117ee65ab8f4dab871a0f19da9cf1cf2e4606c1d1761d6709e05483f2632dc94c7d0d5a64529bd8244f7849f559d31723263828419495ccd94a0e7f4d7393f0fcdc2b208665eba3ff4576b7a630c49c0c4490dd1ad354a5330a68b559ffa9ba4a2aeaefbbf2670d4b42246bd2cd088abca23528c19ca0310000000000000000000000000000000000000000000000b7548ab4acda49b43cba2f5a00297571804d1ba60dccc123f9299cd805a86ba037d83ed22f1a3fd2c1dd6f5611a2bfd4e8d6ab0ced838dbf3c116ee881988bc7f346def734d39d027e274918567d0e3459b067ec94dab1dd846353c7e2e8a8671ee124b389d3e3d8230b2e586f3cbb480000000000000000000000000000695f2305ac82faab3ab89aa1a6ca88a5e4bfa1f66dde9926d9fadd27b13fce909bd25a815b7fe6d52df39a9fac5ea8aa4a07f142e04b6e63d88b26061266fe98fbe1d95c8365bad6a3ac0aab956ad3ad65a77468b01792e0151816df97a5327125ff3973c8d85f00f4956b6c275776879508295fe5cc7940dd6d9ee8dd1ddb00dee231956a0de6af8a4ec351bf6470806b31b20560c453addc5331e010809971399779b878c178b3aabb05f3d0bfc90db1503cf7fadd65dd62795ec0ac3ae573caf1409f96e0d41fea10c95e4a29164ad76f87b77493a6690f6c3f6471e260ca4c3f72f24e4c0f544bfb99de319de047ee2412caa79b9ee2228da7e02ab39232dd81536f6fae80b0a1a85024137d90f3ed164e534f0ab99ad9a51be1eab361425df21a19f215c39ab2dfdf7152807d53c539c269db0e3ea95dfd0bf76701e8c3fb11ab97ae1063f62ba41db200f4b4470f318d6b2f77ca22de199e271d9f5523bbebbae9364a924f6fb1d114a536ad88b0dae56bafd81118ac2f4be400e9d2daaf668181394ae0975872141f6d718b5920635f8edde0e702a8528f6aa857c4d9811cf8dc53b1764c1f282b6ced9c4f6eef0655fd1ed084faddc367496709b62f1edad24299a5030af8f2578d9ed113ca27ed23458a2176523a6cbdef640e67d21c6c9317a8bb394022ab4ff865df4eff000058c2647aba2482ca0e28d50556a43fa107743b82299435255655061cd2d88c48bd7e8ea9f228839bf9e483c7932a42828f9b3cef2a082f3a296eea83fb0343f8640417814630aaaa990b028ba8a070ca67317da5b99471bd70eb8c3df0a387dd94fab25e878e4f733b5e922367ce8a8dd21cbaed816c89b9c6b7953ab164f030c614cca4821f5bf21c565e0ec9f9165591b44b76e7ab1cc65ed3ab15a2a912fca6de274a8770bcce1f01e4c44a2f9b2abd19a964af"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r4}, 0x10) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x8000000000002}, 0x18) 04:10:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @rand_addr=0x64010100}, {}, 0x12e}) 04:10:21 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x6}]}}]}, 0x3c}}, 0x0) 04:10:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4000000}) 04:10:21 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:21 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x100000) 04:10:21 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x78) 04:10:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={0x0}}, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) recvmmsg(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010001, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000002500), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:10:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x1d, r5, r3, r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r7 = open$dir(&(0x7f0000000740)='./file0\x00', 0x222000, 0x12) r8 = getuid() r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r12 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x1d, r12, r10, r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="8782ba26419732b5b9828ad33ae972745fe5eb0cf0ed9791df05e5a082287bc7ad7510e016f80ecabf74", 0x2a}], 0x1, &(0x7f0000000780)=[@rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1, r4}}}, @rights={{0x20, 0x1, 0x1, [r0, r6, r7, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8, r11}}}], 0xf8, 0x4040041}, 0x1) r13 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r13, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r13, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r13, 0x4020aea5, &(0x7f00000000c0)) 04:10:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x29, 0x0, 0x5000) [ 750.133508][ T5087] __nla_validate_parse: 14 callbacks suppressed [ 750.133527][ T5087] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x11, 0x11, 0x0, 0x108) 04:10:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x5000000}) 04:10:22 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:22 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}], 0x20}, 0x0) 04:10:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x3, 0xfffffffffffffffa, 0x200000000, 0x8]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) 04:10:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="30010000", @ANYRES16=r1, @ANYBLOB="51a7000000000000000005", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000006012a00370000089a9e8cf18066ae1e885e4dbd0eb7dfcf84a936991a2c2de8edaba1532daedd1b76bfa6b77eaaf5a92d010000007e7013a4692b774051e671633e04a7d7ddf6b6a3d0115e5f4c66e1d58b0d9758c2e9ae0019649160f78ad7cf81db1b2da17aba769556e6451483005ba1"], 0x130}}, 0x0) [ 750.417332][ T5116] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:22 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) 04:10:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000044c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000038c0)={'vxcan1\x00'}) [ 750.521743][ T5121] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x6000000}) [ 750.587087][ T5132] netlink: 284 bytes leftover after parsing attributes in process `syz-executor.0'. [ 750.652743][ T5137] netlink: 284 bytes leftover after parsing attributes in process `syz-executor.0'. 04:10:22 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x11, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x0, 0x2, [], 0x0, 0x0, 0x0}, 0x108) 04:10:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000044c0)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000002580)=@file={0x1, './file0\x00'}, 0x6e) 04:10:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x7) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) 04:10:22 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001c40)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000014c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece0200c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea564a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c29184ff7f0000cef809606056fe5c34666c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45ef4adf634be763289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd0224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5acd3de3a83209da17a0faf60fd6ad9b97aa5fa684803660000000000000003926b81e3b59c9b081d6a00000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec701000000e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b6c4a000000002b435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000090000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be03f8a6ef2cd317902f19e385be9e48dc003913653282830689da6b53b263339863297771429d120000003341bf4a00fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94e6932c1b6a17bc0cfd3467decb05cfd9fcb32c8ed1dbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ecbbc55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2ffad1bc8245f1105cf692d64d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000063ab6b047600d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bdea6f26e4a4304e50c349f4f9ecee27defc93871c5f97a7a54ff9b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1513a8250df98674152f94e32409e2a3bce109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1f59d4f21137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b928a31d2eca55f74a23641f61f2d5b308cf05031b056237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d493bc19f810049209b085f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762ebeb082e5e0b428ee751000000745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce8daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83186c1526af6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af930cd6db49a47613808bad959719c0000000000378a921c7f7f8433c2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c1fb2d4b205aa00b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f9360984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e49acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0efecb0f477db103463af2847e6ade5b9e065ec0d0ba58fedae5f08818fca475b169469f9efd131925d98c34b3cb26fe26796dd43b87e1cd2a39f5cf21d2e80a64ac97e71cafc29bfb78db090dd12225efeda2e93bf7f6ba7865e9c375a780929dfa5a210bf5858e2a4ff8e8d1e8c9cceed07c6312b734c72510d335acc94f76e7078ce4066f1e0ac9429f8013683301277a11e25b248b61180cb6207a0e26757f3f1bfc6c27f3720d1fb74afb17f3b5239bc2243853d5234afb05ed6024e94dee34666c5b5522b54cb433efa54b4e9022533e6a4598b453c9e549847c89bdee957dfa9ded9f16fdcd1b681e4c72f32fa3334313e334cc140daec7dcb22f463457a19a0b230bbded8625832a2b6dbf837704aa89a7543208debe71d934cedaf85f1bf43f23baa076b051342ab9651cc11d9b8b7e68e931ca4795a720797959d07a0fd82c770a0c0a2b1924bc8dca0c4ca73f4e8ca2de4a1689b1717d9d008131206bb60c09ffbd2b5bdb327f45a583073d0e2045ab7b9dacefd8921f9078fcc568aa1f9c419115c2042f506b50aef369859f67fe4044a6943d7c2b028146743512d95f76bdbf5d5dabd3e8b9f9729caf7f85c826842fea43486e2bead66fdded6184965168ada42a2ed63f484f677dd4dd00b3a39010aa9baddee202b1ea070e44b59d396a3a280379bec2d22cda1f4d3fd6768326578dad0e36b505c117ee65ab8f4dab871a0f19da9cf1cf2e4606c1d1761d6709e05483f2632dc94c7d0d5a64529bd8244f7849f559d31723263828419495ccd94a0e7f4d7393f0fcdc2b208665eba3ff4576b7a630c49c0c4490dd1ad354a5330a68b559ffa9ba4a2aeaefbbf2670d4b42246bd2cd088abca23528c19ca0310000000000000000000000000000000000000000000000b7548ab4acda49b43cba2f5a00297571804d1ba60dccc123f9299cd805a86ba037d83ed22f1a3fd2c1dd6f5611a2bfd4e8d6ab0ced838dbf3c116ee881988bc7f346def734d39d027e274918567d0e3459b067ec94dab1dd846353c7e2e8a8671ee124b389d3e3d8230b2e586f3cbb480000000000000000000000000000695f2305ac82faab3ab89aa1a6ca88a5e4bfa1f66dde9926d9fadd27b13fce909bd25a815b7fe6d52df39a9fac5ea8aa4a07f142e04b6e63d88b26061266fe98fbe1d95c8365bad6a3ac0aab956ad3ad65a77468b01792e0151816df97a5327125ff3973c8d85f00f4956b6c275776879508295fe5cc7940dd6d9ee8dd1ddb00dee231956a0de6af8a4ec351bf6470806b31b20560c453addc5331e010809971399779b878c178b3aabb05f3d0bfc90db1503cf7fadd65dd62795ec0ac3ae573caf1409f96e0d41fea10c95e4a29164ad76f87b77493a6690f6c3f6471e260ca4c3f72f24e4c0f544bfb99de319de047ee2412caa79b9ee2228da7e02ab39232dd81536f6fae80b0a1a85024137d90f3ed164e534f0ab99ad9a51be1eab361425df21a19f215c39ab2dfdf7152807d53c539c269db0e3ea95dfd0bf76701e8c3fb11ab97ae1063f62ba41db200f4b4470f318d6b2f77ca22de199e271d9f5523bbebbae9364a924f6fb1d114a536ad88b0dae56bafd81118ac2f4be400e9d2daaf668181394ae0975872141f6d718b5920635f8edde0e702a8528f6aa857c4d9811cf8dc53b1764c1f282b6ced9c4f6eef0655fd1ed084faddc367496709b62f1edad24299a5030af8f2578d9ed113ca27ed23458a2176523a6cbdef640e67d21c6c9317a8bb394022ab4ff865df4eff000058c2647aba2482ca0e28d50556a43fa107743b82299435255655061cd2d88c48bd7e8ea9f228839bf9e483c7932a42828f9b3cef2a082f3a296eea83fb0343f8640417814630aaaa990b028ba8a070ca67317da5b99471bd70eb8c3df0a387dd94fab25e878e4f733b5e922367ce8a8dd21cbaed816c89b9c6b7953ab164f030c614cca4821f5bf21c565e0ec9f9165591b44b76e7ab1cc65ed3ab15a2a912fca6de274a8770bcce1f01e4c44a2f9b2abd19a964af"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r4}, 0x10) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x8000000000002, {0x0, 0x0, 0x912bda1b6fe8cbc5}, 0xfe}, 0x18) [ 750.902755][ T5156] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x7000000}) 04:10:22 executing program 4: pselect6(0x40, &(0x7f000000ba40), 0x0, &(0x7f000000bac0)={0x800}, &(0x7f000000bb00)={0x77359400}, &(0x7f000000bb80)={&(0x7f000000bb40), 0x8}) 04:10:23 executing program 0: r0 = socket$nl_generic(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="00000000e33437fc", 0x8) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000200)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}, 0x0) [ 751.023838][ T5156] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:23 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:23 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f00000000c0)) 04:10:23 executing program 4: syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) 04:10:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x8000000}) [ 751.428194][ T5199] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) [ 751.584128][ T5199] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:23 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000733000)={0x5, 0x2, 0x1007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x40) 04:10:23 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0xff000000}) 04:10:23 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:23 executing program 4: sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x3f0f8fb6c77ad91d) [ 751.910259][ T5241] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:24 executing program 0: socket(0x2, 0x0, 0x18000000) 04:10:24 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000200)={0x79, 0x0, [0x0, 0x71, 0x4]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) 04:10:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0xffff8000}) 04:10:24 executing program 4: r0 = socket$inet(0x2, 0x3, 0xff) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x29, &(0x7f00000002c0)={'nat\x00'}, &(0x7f0000000340)=0x54) 04:10:24 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:24 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:24 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x1007, 0x9}, 0x3c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r1}, 0x3c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 04:10:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x3e, 0x0) write$nbd(r2, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x68) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000180)={0x5, 0x3, 0x7, 0x1}) 04:10:24 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003fc0)='ns/user\x00') 04:10:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x210101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, [0x40000000, 0x0, 0x4000009]}) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000180)) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) 04:10:24 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={0x0}}, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002300)) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 04:10:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x200080, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x248002, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000240)={0x4, 0x0, [{0x4, 0x7, 0x1000, 0x9, 0xb8d}, {0x2, 0xee, 0x1ff, 0x4aa, 0x7fffffff}, {0x1d, 0x7, 0x5, 0x2, 0x1}, {0x0, 0xed9, 0x0, 0xfffffffc, 0xc32}]}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) 04:10:24 executing program 0: r0 = socket$inet(0xa, 0x5, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x6, @remote, 0x4e21, 0x0, 'dh\x00', 0x18, 0x2, 0x5b}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000001200)={{0xc, @rand_addr=0x64010100, 0x4e20, 0x1, 'lc\x00', 0x0, 0x0, 0x60}, {@private=0xa010101, 0x4e22, 0x0, 0x400, 0x3, 0x7f}}, 0x44) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000040)={&(0x7f0000000180)="234d2b925093c6130ccc2dc8e6185a97f8a0f003ba6007622c298966153b618a7a776ec38be4d6afc8e9f58148c063341f37c8ea9c5af1ac3c183cfe5290f76d5a00a7f8bb73823cf179963f505bf204afcb97b2c19cc9509489dcd7a3c5b96c3ce5e128f5008e1cd7876980d19d215a4943715137d13673e75df6aa0fe423495c611d7dafcf0847e9f7a4a7bfe6a70bb4d1b5b744fae5d658a29446d7549d5c1a90c4aee5c5f856bed95896d06781fa1c43870b0d6bac72735bb6922c52bb84e93014e7f58d6635ffbcd66330e28ae86e6a5fdfc00f347611c5b0b47482c78827a9635a0e47e84433a107d7891dea3f67e578d6f546505d4ebad58e46ccf19a3399e0b6240fe6a6a15fe3fd7ebc9d8cb9b06fd8fc40161efde774fbb00b311d8eb2ba2eb03d6e33283112f5e576840484ca82a80f1de5a706d7a662c7f545d77c3bec21a65ff47a1304c1740021da1673f12be04d58c3e0d554b8c10f4db9d5036a987f1deb223f3b7eaa4cdfdc030c147a0599eb191459fc0a8d4241ad213c9ea76b25e4eb91c1d106ce2bc5c44b2b4ce56a9184e836d8c715a92d63b74995ef8c04305f4a1cce9cd67d5c2d5875e8dc50339456b8c678c204594c55a8c77949dbe78d34d852d2a4c8bf65ab7f3bbd3b0b39ec9db9d5585041b96bf4e710c3000d2218f70392c609e7cfbd24df88dc35c8afa0de0f709aea917d4ba72aa2b9d46625b7a8d951219bfd516032f6451216d0ed8a7b451cd5dd5b24c16837cde46e9af87cee1668299f87280ea3d995b1dd2401d73e063cb6b811133a2ea9f5f9e42261b5d5e813cd8f350d8d2807d276fed015ee83966f359eb37870cf9525fd649f837b73136bd0ad021c9ed969e5b275f36e52e0244e4f68c4e5bf8840677d84823e907ec2c9dd42f18cd602a5e141746691077fd597cdd90d0420bcbd32a52cf3dd2504062427525d55fa8856bbf961873fc5cd299bb15879ae2022e7c5b1cdbd782995e4d59e002c842be9760210bcba2c1e5f6a4b3a309a73ce49cfc8981f5988e8bca501be50f4e878519bf2c595b6c46612dcd9ea689d2da712c23ca36cf9769466d7652f7442284db22824befd5b713322554bc57d528f7db2ed7a2e422bb7e318e27a1b91b4be55a3f2203b4ecd7ab98c228c7aef4f3b9c916b62bd5b417e101f264a6f58c0e89c5819e95ddf5df957fc2645618865c3535a1aa2050fdf8739fd693c109482b1f72c6c21dfaed3777fbc8a3168b721feccaa0b86736430211e904e5876807bbaca360c44eb48062b4dae636acfb4e95354cb477d5e7d608837667450abd29a82054196d3a59758d32b7dc8e7fa7b0a1f6447422cbe64f9065cb1f068d63003c58efd25f3d92cd3566443a93dd1a98e6ec5d80bb3a1b828df1109f12b1d41fec6389295fb157e89ea0cd1f27ec8d4fa224c2f9b30e25299e623b12fab75c1e6fa5bff87ab18f3a08ecc4d2d4f2833cd8e7df57aa16d9ae4e9a50b7528ef8d3cb73bfdeeabb6397c17559ded3bca5d4a1fb23cb4b5214971e672bc1fe99561be0d607b1a4798850be25c1f90c13400d50b90c7fad3bec30415a2304d47e15ed9c5f6499f2cb8d5fd69027f1a3e196bb943192ff950907aa650659625b3d1f0df30a1a63fbc649766086024cd05118894b6e8742c06290eaabc0035c130f904c1767c5c9dbd7c2e924f0ccdd6aaef5e4b0b519a679437441ad4473ee99894fd97a9f8ce2cf4a1b1d24ce781003fd19b15c34dce65a3775c6a64d4260c8680c23664706bb94d2708492f5fe7a0be042a461f83f6c53a28085caeef13f619d1262af4aba3eb94916a915eb44c4ce004ee70061c42c53879d56bca23b122cc5054b7f878f4f88a5e28c703491057b0588a010a010bc686ca0fc265d3fb9eac8cbf46c3704d2f794bd70dd8f84f960952338f661f23b7bdb491fb9f483485bf35772822beb8ebb9d01a353737f87b12c433ee5678e4c3ce6fe48de081e5f935d0cd2a0ee70b4f359f5df55fdd88229fa3212c7bc10c08fc18a5157627866f3c5dd171310f015d89e5860702b9267b22b85fc815d196fea3cc5bb5cc4d750ae63f710f4238bdbc46420bbc9a90d170524fb5fb64530354a059d1d3f0dc35da77c04c55dff95a1351eb7e87b8123890db3b69158b30b7e817ca88918196d4384b919fac4b6019c96bd280dc872cb8faf094db458e3cedcfaaf88b71ee10a5b5231107b4fe0441369f644c2ccf0dcdeef375dfc37dd083a89a428608d90c3a3b74f157513a9d9606db0553facf37c679668086e192f30c7e12cbe4be318928fb0bcb382deb65a6cecfb05420c8ec7684aef30305a618385a5953b503da43ad206ba001eb2954678f7a08ecfbe37d6f21c3921becdc4b9bc1707e1044671cfc71b801612e8df7db54a08123877296b748a43d32dd01f809d41b4ce99ba932066e5d819224be5f70c3b779c9c4b84b67b42352f8b52971310d4cc1e95b2231b58541422fe69d0b92c0b837bfd93315a93aecff55033d5426603c5f963b88eed3688ae0fde092e7ce7565465dd89d4f6c7f27aadcaafde6c8ae01afed5423c615508eee2c853e5d69e2715bcad7587010e586be26cb02cd69e4aefbcfb000f619536fb6ac4433e989d1cfa28cb668c0adf9409f3776d43062d12ee36102eae22ddf4a8caa7b8c35dea0107c5c43727ed608fffa3b3e492e2bdf47a51c1e44790f42d403aafb7d9b11c2b9811ab84dea9b5e78f5a20cec341aee5989ca51cfde1b1bad82d8df5d2a7a140c478ce83cb6b206c3eb91c84db0af9808327dc3d0a61b777d1b66559bbae3c2a4358121d3a1ae19329170e99da2223e339b06aa469e459d85f17c069c34c167adaab64938aa535528626faba7a9138fd95e4d3501ba85e698be7086123eb1af45c36698f4ae6af621e9a912b129e57241c0fb2a25135953be99ba1ee2bba20ef00c6c87e5f43767a044e990d942b1093b432fbbb38d4b87a5d31306c55ce0bad02c8387c33986f58fd8cc3774ebd2a19b58330d4c3df9f98adf4b83d6edf9cea3afc0e82ea2dd1e7426d239b77a0588999bed4b531733f91907ae39438a64ca4494d1ec2c116802b8b3c628cb0143ab05408af3c58726104fcf46dca9823bf5f3ad849a889558829c34646bd269a98ddff105be7165b1bed1fc187c2ef47f7f495c5346b0462aca6a80210d6ed3143d165a395c6581c219ba337c9a3d04319c471f97e928b6bf082fa1de595138f631e6bdee1d65351c0c568a91fca383feb411fde6c0cbb9022923ca9c717e1c13cdfc2f5f10cbfb1dc778b40e677122ec9deb0b85b4768dc77da5b64ee39014c9efd0d9688eb89b7979aad02a869b6c036a41fa1d62d15dc83786fad6505aebbc1d1966680b7596a111d68cb95e1e436037e7f930d15db8bc20a3668a49699e9cfb7e9003e3af44f36c0ca0ac1096215c76e4647345bb63fcb9b840d2b006ac6e13c51344d2e24665d8b864f7fa1155d2134d92f6f2b4728166af87461a0c0c536ad954b06f7db674a30f46aff1a1b10ab9093c34783c486eb1b80d3b62ab59d3c724657b97c0bf88ffcd157c9fa87f96cebe3112874700df3b0e5c3f69cf57f28b26117166c844d16d8b08803b84cc4c027972a52bd4183be0f7e752dead521b06e78ec0b667e73080448a20372b62dfb8037e5133b279144f59e89dab0a94602038f2b5cb52bb2a4d6e22bdeb18517c769a8623a1390cf0a2db197bd230affbdcc98e301e1d564360f6f681e88f0c9b02e180ff5cbae08dc3fa7f9f6a8704b6a2f7e32356e4b60b7aba5e856d050cad8c07ea18e8d8e6ac93b1f5308552482a98b9141f26d306eaa28ccb46970de7673e40489b070b693bf4b0859c6ce6e3f76e6b81a0432fae6c0b46fb0a1c0806daf719993ddf125ad4e8cae180676ba63aa355f687888f704288b867467eec1023175bf651a7a829c241b3943d48a0ec2a9c0e4925d80f6d102f0b5538e9eb0a4ce539abacfafc20c66ea2f07353a52d592cf37e30179186d60cdc106480d22dd165633ad470fd92b19b0166978f0b409ff5123ddbb6b57593ce83d682dbaf3c31a73fcfdcdd8212c45aee4c7c0f240e82623389a488d65518472c6d151e552e640cd9af4efcd7207f672b92680005a3d997324191ca57d7a7057809e7118c74a1a1ad7c9799e3ab33b13009411581cefc7d667078d18352605664dc7cccf155b36b93d677f1849b3e719d631ca183ca0580a5a854119ead7a128069e3bab0461adf679b53fdfcebcf1072d04473bba40258871c7ded2305c6e18976f11688c81c1f07c83c42eb8c2afac88b184d2a5b23e82a9fc834ed0d017ba5ab8e4f9e73ff782e043bda4b90d3c0b6517045f63f742639e91a29b071c4d5b552e11404afe7636928f66d60ff388f1917720fd9a6f4f5caded2953085917eb07d053f0ea20e5e2725c422b695b0a22ac33f5232a2c758b9b036a422547f4f626e8800db7111fcd4d9b579a01135102f7e4bc37171354c9b9a66b6e307a0c4f14bca9362e45bdd16837444446c2701ee15b4f1a5ed94da936348ea540df9a1d4edf55a67fd4496048911b1dd74f43c6fdfaead7ced327cfac3f49447c7fc34671e4cacad1ecde601a4050ef12b7175921fd46bbf66e812c28af137b30766896ef73d4a80693109439f0555d4cf9978d7b9fb445fb361d53327ef0f49d62fb7c60f232535919a6331c5a7d49d2901b1004118743395e26afacf486b88b79c19bbc16e784cd1368dbf77c82c83855a8eb635b94dba3f533d59f0b086dea287f0f660955f1ffcbd4feb1c867abef2c64513eec6a62b393e1ca74cfdd38fc7c4bcf763ac2a5c7f87000365ab32c5e8c22140d6c12e2e359e057a05f14600761d122193ff1ef042d69887700a634895a2a22a88dbd5d302da6d1af13929b9d83aaad771f1642ed795d4aa7041cafc1867e7ee50fc1969ea60781fa912e707f6bc20a985fe04dbe1fa0b2c49bfccb4c62e27c7cf1e514f87b6ff27926f5ce69931e97e793061df6108968e5a24d5e3e6b99792b00dbf187ce79879bc7089a73425fd545386ed99121ff4abaa1873aa8847cc1ae3b0a6f03a123f0b86d64682173b821be3fcc9bb4e7449064dcc445757c80eea0035291d4e2abdaa3c64eb324a66e304a84c4215d75e5b0595339c13089d4f7c0faec0ba43e5e8efb4507388bf6d6cf0a13d641a2bb26d21e326486363877b0d68a8a36ad1a6c1ea1e8e5ba389be777321eac6dd1598072d717351453806372993a3d8c4e438a17759053ae9da1453202fc8e978e2610193df13f0bf6a7a656d16c32407f62f4f85e014631e7c68ca567651d88a7ae63452d522b2f83d07eb9ff4486f75112d95a592ffa3d4558a207391638135aa65cd829cd6b4c90d9a20ff336bd64f743c9cf9d74578e2dc888d84870b75bd5d12ec228b6e4efd9c7095dd030003dacb8e19b7a03f5f3ba7bdafeb668f5ec5bd2113e41194c872f38dcda2f04ebc2fa46037d4f785804cbde13606284ab5934f586d5db09238bbcbc23d9d00ecabf576ac9282f5a57d7342bf635e9f35e35154a617ae9689ed9c8a716dad091670f9fc95ac3d694faf00ff7d423d7be1f474a05f6539b24b12e0fe1875ac2d6ea5053152f2f8ddf851f3cc29fc97bff3c3d5823324bdfdd4c32daf1f2741e6d5f423b7fe094d90b2a3b7832672c81a4120a48ef633b53013da4be19ea8a017a57f0e287f613a431b2229164f287f9e1338b24ca9b406b0f5473877f7b5a84e6737840f187fbebc", 0x1000}, 0x1, 0x0, 0x0, 0xc081}, 0x4) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 04:10:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x3, 0x3, 0x86, 0x3, 0x40, 0x7, 0x4, 0x0, 0x74, 0x3, 0x5, 0x9f, 0x3}, {0x1, 0x101, 0x4, 0x8, 0x20, 0x8, 0x9, 0x4, 0x4, 0x0, 0x80, 0xf8, 0xffffffffffffa4dd}, {0x80000000, 0xd8, 0x20, 0x80, 0x62, 0x81, 0x42, 0x1, 0x0, 0xfa, 0x3f, 0x0, 0x2}], 0x7}) 04:10:24 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) [ 752.880351][ T5317] IPVS: set_ctl: invalid protocol: 12 100.1.1.0:20000 04:10:24 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) [ 752.934330][ T5317] IPVS: set_ctl: invalid protocol: 12 100.1.1.0:20000 04:10:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r1, 0x503, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x4c}}, 0x0) 04:10:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000100)=0x2, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000001740), 0x4) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)={@rand_addr=0x64010100, @broadcast}, 0x10) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e21, @empty}, {0x2, 0x4e23, @empty}, 0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)='veth1_to_bridge\x00', 0x7f, 0x100, 0x1ff}) 04:10:25 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) 04:10:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) 04:10:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x0, 0x90, [], 0x11000000, 0x0, &(0x7f0000000180)=[{}, {}, {}]}, 0x108) 04:10:25 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:25 executing program 0: socket$inet(0x2, 0x5, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x3) 04:10:25 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) 04:10:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @private}, {0x2, 0x0, @empty}, {0x2, 0x0, @multicast2}, 0x86}) 04:10:25 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:25 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) r2 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x1800) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000001c0)="660f1b460966baf80cb86c6d1386ef66bafc0ced40f4c4827d254800410f01fc420f08b9ae0100000f320f017e0cf3f36580ef0f66260f20da", 0x39}], 0x1, 0x38, &(0x7f0000000240)=[@cstype3={0x5, 0x2}], 0x1) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) 04:10:25 executing program 4: pipe(&(0x7f000000f1c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) 04:10:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x3e, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x20000, 0x0, [0x7, 0x1, 0x0, 0xfffffffffffffffd, 0xfff, 0x4, 0x3ff, 0x8]}) write$nbd(r2, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x68) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0xfffff6fc}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x4, 0x2}) 04:10:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000200)={0x60, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) 04:10:25 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:25 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x30, 0x0, 0x20000348) 04:10:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)) r2 = syz_open_pts(0xffffffffffffffff, 0x100) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000280)={&(0x7f0000000180)=""/200, 0xc8, 0x1, 0x2}) 04:10:26 executing program 0: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002580), 0xffffffffffffffff) 04:10:26 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x1, 0x20) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x400001, 0x4, 0x80, 0xfffffffffffffffe]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) 04:10:26 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x11}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012400c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0xffffffff}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}}, 0x0) 04:10:26 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x2, &(0x7f00000002c0)=@raw=[@alu={0x0, 0x0, 0x4}, @exit], &(0x7f0000000300)='GPL\x00', 0x3, 0xb2, &(0x7f0000000340)=""/178, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 04:10:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000180)) 04:10:26 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) [ 754.572286][ T5470] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x11, 0xffffffffffffffff}]}, 0x108) [ 754.773363][ T5477] bond3: (slave bridge1): making interface the new active one [ 754.802372][ T5477] bond3: (slave bridge1): Enslaving as an active interface with an up link 04:10:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000372000/0x2000)=nil, 0x2000, 0x3000000, 0x8010, r3, 0xc0748000) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x3, 0xfffffffffffffffd]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) signalfd(r4, &(0x7f0000000280)={[0x1880000]}, 0x8) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) pread64(r1, &(0x7f00000001c0)=""/155, 0x9b, 0x1) [ 754.831544][ T5504] device bond3 entered promiscuous mode 04:10:26 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x60}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) [ 754.888087][ T5504] device bridge1 entered promiscuous mode 04:10:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x80043) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f00000000c0)) [ 754.931552][ T5504] 8021q: adding VLAN 0 to HW filter on device bond3 04:10:26 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@updsa={0x104, 0x1a, 0x205, 0x0, 0x0, {{@in6=@mcast1, @in=@broadcast}, {@in6=@remote, 0x0, 0x3c}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x104}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 04:10:27 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) [ 754.996188][T32001] bond3: (slave bridge1): link status definitely down, disabling slave [ 755.017635][T32001] device bridge1 left promiscuous mode [ 755.071437][T32001] bond3: now running without any active interface! [ 755.099708][ T5477] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 755.147168][ T5540] __nla_validate_parse: 16 callbacks suppressed [ 755.147188][ T5540] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:27 executing program 4: r0 = socket$inet(0x2, 0x3, 0xff) getsockopt$IPT_SO_GET_INFO(r0, 0xff00, 0x29, 0x0, 0x0) 04:10:27 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:27 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mount_setattr(r0, &(0x7f00000002c0)='./file0\x00', 0x1000, &(0x7f0000000300)={0x100009, 0xd, 0x60000}, 0x20) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000180)=""/190, 0xbe, 0x0, &(0x7f0000000240), 0x12) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x0, 0x0, 0x0, 0x5]}) connect$llc(0xffffffffffffffff, &(0x7f0000000280)={0x1a, 0x313, 0x4, 0x8, 0x8, 0x81, @broadcast}, 0x10) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) 04:10:27 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x62020, 0x4) 04:10:27 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) 04:10:27 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xf0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:27 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) [ 755.652711][ T5587] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:27 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000044c0)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000002580)=@file={0x1, './file0\x00'}, 0x6e) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001180)={'veth0_macvtap\x00', @ifru_names}) 04:10:27 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$IPT_SO_GET_INFO(r0, 0x111, 0x40, 0x0, 0x0) [ 755.777352][ T5600] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:27 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000180), 0x0, 0x2) close(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) 04:10:27 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:27 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:27 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x2000, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) [ 755.966786][ T5604] device bridge2 entered promiscuous mode [ 755.998996][ T5604] bond4: (slave bridge2): making interface the new active one 04:10:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000040)={'virt_wifi0\x00', @ifru_names}) [ 756.041038][ T5604] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 756.076708][ T5629] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 04:10:28 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x8, 0x0) [ 756.129371][ T5629] device bond4 entered promiscuous mode [ 756.175026][ T5652] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) 04:10:28 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) [ 756.242888][ T5604] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 756.265444][ T5664] device bridge3 entered promiscuous mode 04:10:28 executing program 0: pipe(&(0x7f0000000d80)={0xffffffffffffffff}) close(r0) ioctl$TIOCSETD(r0, 0x8004741b, 0x0) [ 756.347720][ T5664] bond4: (slave bridge3): Enslaving as an active interface with a down link [ 756.447104][ T5652] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 756.477991][ T5600] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 04:10:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:28 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="65ddbeabd1fb7682d68bd011c3a591a8352a9a2bda98075703f3fe5e68c06ad629932f44384b4357ad0293096680bba837e84f8c32d9aaa7b30194e3f528a17fd7966e8936c2892e27ff80e31d42baf9ee6970b7f51b94084bdc36ce51474f4ca5fd6aa0df0ce8a2d1baa73f591692f8b5b5587c1e80ba2ed8868f6cdd8e3bc212a7f5b85a85c9fd7754fa7208bdbec15454bd2462120b89de60482888", 0x9d}, {&(0x7f00000000c0)="52bde0d38ab3f45d8c97b72c83", 0xd}, {&(0x7f0000000100)="afaae9199ccd30c25571c2c830b759bc6359114348a6f9eb65cac86e3d54aad084432b88ec5b9466ebf21d41eba9f8fa301679dd9f345839db0af58e332ff3f6be0ce93a84f6d24dc34666c9b96004ffb60ba141fe536a6782c2f6ab115695627fc6a32a1533907d5dbabdedc04df7f038956004dd9d8d5af9e699b2b603a077250790c0c15458425318621640ce86199e4b2c37268f6c255b3692b74016f33ca338bb240ea25ed70038af18e028de633d887718b4e77e1283a4e82f2c011033e062e128ac2d87e10114da2460ae6cdad043d44abae32b813bdc6c265be88768a57b3f955d50263c4ceece2a7a15e7132761112d9ad2", 0xf6}, {&(0x7f0000000200)="04bbad9762e9554891887d26fa7e97389ff1e53943c563148de26574db7e8f33407f89a711531d39a17212489839ff0c82831f7bf4a1b51312db8e07ed8c5adaf9f00779107f6e49a5deb1fe5cff5519144aeb58e80668ba638217cb8ea9380d8c", 0x61}], 0x4) 04:10:28 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x500}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:28 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 04:10:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000001c0)=0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x10004, 0x2, 0x1d000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) 04:10:28 executing program 1: ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:28 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000003240)=[{&(0x7f0000000000)="12", 0x1}], 0x1) 04:10:28 executing program 0: poll(&(0x7f0000000080)=[{}], 0x1, 0xffffffff) [ 756.818034][ T5699] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:28 executing program 2: pselect6(0x8, &(0x7f0000000100), 0x0, &(0x7f0000000180), &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) [ 757.044946][ T5700] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 757.116603][ T5708] device bridge4 entered promiscuous mode 04:10:29 executing program 1: ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/key-users\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r2, &(0x7f00000001c0)={r3, r1, 0x76d2}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) [ 757.198001][ T5708] bond5: (slave bridge4): making interface the new active one [ 757.262905][ T5708] bond5: (slave bridge4): Enslaving as an active interface with an up link 04:10:29 executing program 2: openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40, 0x0, 0x8}, 0x18) [ 757.312795][ T5743] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 757.351566][ T5743] device bond5 entered promiscuous mode [ 757.392167][ T5709] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:29 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x600}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:29 executing program 1: ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) 04:10:29 executing program 2: clone3(&(0x7f0000000300)={0x218b0000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 757.694692][ T5778] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}], 0x20}}], 0x1, 0x0) [ 757.885782][ T5782] device bridge5 entered promiscuous mode 04:10:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0xfffffffffffffffd, 0x80, 0x0, 0x40000000]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3, 0x8001, 0xe3f]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) [ 757.981584][ T5782] bond6: (slave bridge5): making interface the new active one 04:10:29 executing program 0: poll(&(0x7f00000000c0)=[{}], 0x8c89, 0x0) [ 758.042889][ T5782] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 758.106992][ T5783] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:30 executing program 2: poll(&(0x7f00000000c0)=[{}], 0x5b, 0x0) [ 758.213281][ T5805] device bond6 entered promiscuous mode 04:10:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x81, 0x0, [0x7, 0x0, 0x5, 0x2]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) 04:10:30 executing program 1: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:30 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x700}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:30 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x8920, &(0x7f0000004a00)={'netpci0\x00', @ifru_addrs=@can}) 04:10:30 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') read$FUSE(r0, &(0x7f0000004540)={0x2020}, 0x2020) 04:10:30 executing program 1: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) [ 758.580552][ T5866] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:30 executing program 2: prctl$PR_SET_NAME(0xf, &(0x7f0000000080)='batadv_slave_0\x00') 04:10:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000001f80)={&(0x7f0000000600)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x14}, 0x33fe0}}, 0x0) 04:10:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000001c0)={0x6, 0x0, [{0x1, 0x2, 0x0, 0x0, @adapter={0x1, 0x101, 0xfffffffffffffffa, 0x80, 0x15f00000}}, {0x2, 0x5, 0x0, 0x0, @adapter={0x1f, 0x8, 0x7, 0x9aa, 0x4}}, {0xfa4, 0x3, 0x0, 0x0, @sint={0x1, 0x2}}, {0x4, 0x1, 0x0, 0x0, @sint={0x1, 0x7}}, {0x7f, 0x2, 0x0, 0x0, @sint={0x8}}, {0x8001, 0x2, 0x0, 0x0, @irqchip={0xffffffff, 0x8001}}]}) 04:10:30 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x4020940d, &(0x7f0000000040)={'macvtap0\x00', @ifru_hwaddr=@broadcast}) [ 758.753557][ T5875] device bridge6 entered promiscuous mode [ 758.773238][ T5875] bond7: (slave bridge6): making interface the new active one [ 758.792459][ T5875] bond7: (slave bridge6): Enslaving as an active interface with an up link 04:10:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$unix(r0, 0x0, &(0x7f0000000240)) [ 758.812337][ T5887] device bond7 entered promiscuous mode 04:10:30 executing program 1: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:30 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x900}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:31 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x8946, &(0x7f0000000040)={'macvtap0\x00', @ifru_hwaddr=@broadcast}) 04:10:31 executing program 0: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffb, &(0x7f0000000000)='logon\x00', &(0x7f0000000040)='ethtool\x00') 04:10:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) 04:10:31 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:31 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xa00}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0xa, 0x0, &(0x7f0000000100)) [ 759.255431][ T5946] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 759.410064][ T5952] device bridge7 entered promiscuous mode 04:10:31 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) [ 759.502401][ T5952] bond8: (slave bridge7): making interface the new active one 04:10:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x40000}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000001c0)="3e0f790ec4e101fc2d8addb60b0f20e035000200000f22e0b9520b0000b800000000ba000000800f3066b81f008ed866baf80cb8f96d248bef66bafc0cb000ee640f3266ba4100ed660fd41f0f0133", 0x4f}], 0x1, 0x5b, &(0x7f0000000280)=[@dstype0={0x6, 0x8}], 0x1) [ 759.546692][ T5952] bond8: (slave bridge7): Enslaving as an active interface with an up link 04:10:31 executing program 0: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="1d", 0x1, 0xfffffffffffffffd) 04:10:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:31 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:31 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb00}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000001f80)={&(0x7f0000000600)={0x10, 0x4000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x14}, 0x33fe0}}, 0x0) [ 759.858325][ T6014] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:31 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000000040)={'macvtap0\x00', @ifru_hwaddr=@broadcast}) [ 760.109471][ T6019] device bridge8 entered promiscuous mode 04:10:32 executing program 2: process_vm_writev(0x0, &(0x7f0000001500)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) [ 760.173760][ T6019] bond9: (slave bridge8): making interface the new active one 04:10:32 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) [ 760.235629][ T6019] bond9: (slave bridge8): Enslaving as an active interface with an up link 04:10:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x74, 0x0, [0x3, 0x6]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 760.285243][ T6020] __nla_validate_parse: 9 callbacks suppressed [ 760.285261][ T6020] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x30, 0x0, &(0x7f0000000100)) [ 760.404021][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 04:10:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) [ 760.479667][ T6020] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x6, 0x0, 0x0) 04:10:32 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc00}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:32 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) [ 760.687062][ T6087] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:32 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000011c0), 0xf3b1de073021a280, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001240)={0x0, @in={0x2, 0x4e21, @remote}, @l2tp={0x2, 0x0, @broadcast, 0x2}, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, 0x1ff, 0x0, 0x0, 0x0, 0x101, &(0x7f0000001200)='veth1_to_bond\x00', 0x0, 0xffffffffffff04ef, 0x7f}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$media(&(0x7f0000000180), 0x8, 0x189000) r1 = openat$procfs(0xffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) perf_event_open$cgroup(&(0x7f00000002c0)={0x4, 0x80, 0xff, 0x0, 0x0, 0x4a, 0x0, 0x2, 0x8120, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x39, 0x0, @perf_config_ext={0x5, 0x3}, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x654f, 0x0, 0x6}, 0xffffffffffffffff, 0xe, r2, 0xb) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x5d2f1b1cad441cf6) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000500)='erofs_destroy_inode\x00'}, 0x10) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a40080001c000000021", 0x1c, 0x40880, 0x0, 0x0) recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/114, 0xbc8051858e1806e9, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0) [ 760.829280][ T6109] device bridge9 entered promiscuous mode [ 760.860753][ T6109] bond10: (slave bridge9): making interface the new active one 04:10:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x1e, 0x0, &(0x7f0000000100)) 04:10:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f00000024c0)={&(0x7f0000000000)=@in={0x2, 0x4e24}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0xf8, 0x84, 0x0, "c4700124c784ff306c242e94afd810cc6ec71651d2f3c3225547799f273eba7c30efe78708689f462d6f8de2ba6ec5f4cad08f5bc1ddd1e208654271119d808f84dbc2bb066bf6797114d5d232ce61913c147bf90c32dd687ea9723c4bc22beef87f83e626a9e51e1a3d1169084d9d81aae8473d4dfc8c5a7a21b1389953cb25260bc9754f4fa01fde698ada3ca634ba4387ce5423ec69689d84065fb6558d2594224cda0c734239ea31e3aaf4364d0f6f807ee19e3e72afdffa717f31cef3722ed2a8381a398a236229e8aa08d7b18ff72a7a01e2713dfe02dee277fb00dd0661"}, {0x10, 0x117}, {0xa8, 0x84, 0x0, "7fcb66cc6feaa20be2266f091734dae971cff2f730ea94f7961e3d562f2744269e8b7ca57f9c2f1e7fa5ab691a666a453453357aa2d32b3ce792584e6f83b18e221aeb651d44d330263b9a022cf9dbfa56032170e6dbcf575148758c372624518e1cde66951b1810ad8685c13ffedd47f5831d4196ea26cd22fe16b51086d489bd16fd13ca36c808882ba2ae9c1e8a1323"}, {0x30, 0xe76283862c53bc04, 0x0, "a03a0759940b14882d7c3d9280420f6091046ea702c4a9a967"}, {0x30, 0x10a, 0x0, "b707a39cfc5b70250987f41c994e8bdade548eab5c812feab4"}, {0x1010, 0x113, 0x0, "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"}, {0x68, 0x10d, 0x0, "2e09e510fa7baccd940ffe9fbf94299abf1da3dd1312755c5fb40431b07bb537fa710ae45298d555ed0ce5296e6d86251eda74ab9cb15c0f6f9afb6af1c2fa96cbecc6b8dd2b0ad0134ba5fc8c5a7d7449"}, {0xd80, 0x103, 0x0, "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"}], 0x2008}, 0x0) [ 760.871524][ T6109] bond10: (slave bridge9): Enslaving as an active interface with an up link [ 760.923061][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 760.948012][ T6128] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:33 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) [ 761.059733][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:33 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x8, 0x80082) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) 04:10:33 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe00}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0xa, 0x0, 0x0) 04:10:33 executing program 2: r0 = syz_io_uring_setup(0x3cdd, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = syz_io_uring_setup(0x50cb, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) 04:10:33 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) [ 761.325105][ T6152] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r3 = syz_open_dev$video4linux(&(0x7f0000001440), 0x6, 0x10002) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000001480)="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") preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000180)=""/210, 0xd2}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/109, 0x6d}, {&(0x7f0000001300)=""/242, 0xf2}], 0x4, 0x7, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) [ 761.508680][ T6156] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0xe, 0x0, &(0x7f0000000100)) 04:10:33 executing program 2: keyctl$reject(0x13, 0x0, 0x0, 0x200, 0xfffffffffffffffd) [ 761.582376][ T6159] device bridge10 entered promiscuous mode [ 761.628904][ T6159] bond11: (slave bridge10): making interface the new active one [ 761.662150][ T6159] bond11: (slave bridge10): Enslaving as an active interface with an up link [ 761.719512][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 761.741953][ T6156] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:33 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:33 executing program 2: setrlimit(0x0, &(0x7f0000000080)) 04:10:33 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clock_nanosleep(0x2, 0x1, &(0x7f00000029c0)={0x0, 0x989680}, 0x0) 04:10:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:33 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xf00}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x3e, 0x0) write$nbd(r3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x68) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f00000001c0)={0x2, 0x4, 0x2}) 04:10:34 executing program 2: syz_io_uring_setup(0xdf6, &(0x7f0000000040)={0x0, 0x0, 0x8}, &(0x7f0000ff7000/0x6000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) [ 762.030684][ T6225] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:34 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) [ 762.110271][ T6227] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x2b, 0x0, 0x0) 04:10:34 executing program 2: shmctl$IPC_SET(0x0, 0x3, 0xffffffffffffffff) 04:10:34 executing program 2: openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40}, 0x18) [ 762.302515][ T6232] device bridge11 entered promiscuous mode [ 762.352219][ T6232] bond12: (slave bridge11): making interface the new active one [ 762.397838][ T6232] bond12: (slave bridge11): Enslaving as an active interface with an up link 04:10:34 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000000300)) 04:10:34 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1100}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0xf, &(0x7f0000000100)={@empty, @dev}, 0xc) 04:10:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:34 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) [ 762.695029][ T6302] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:34 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 04:10:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x31, 0x0, &(0x7f0000000100)) [ 762.969216][ T6306] device bridge12 entered promiscuous mode [ 763.028412][ T6306] bond13: (slave bridge12): making interface the new active one 04:10:35 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x0, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x83}]}}}, @ip_retopts={{0x10}}], 0x28}}], 0x1, 0x0) [ 763.084523][ T6306] bond13: (slave bridge12): Enslaving as an active interface with an up link 04:10:35 executing program 2: msgctl$IPC_RMID(0x0, 0x0) msgsnd(0x0, &(0x7f00000001c0)={0x3, "fd60ce917ca913337c3b287c4477108282ad0af825dccd616f5dfbe7a6e78dd80b68d8dbd6ef897518ced9c18b790497b1195d60fd33927daf61a7b6a3409dff25e324a6ba7bb36033e5bd38092a4b18861ca5c15e93111f655fbc0489a91c0742473d4c8926e84c5617b1382f507e758ecf7988c31002d3c87ed7f1efea96ce2ccfcb599eed0ae85e7ea5adbcd80fda4f2ed2dff7b810601744309bb8b708655a11e9ebbe939fe3e32a2e776ebbc36c82b870129f7c02002d8e16de2a775ff93e26cb03ba1099ad6cc9a48df8afb489ec0a25c22f6bebb3da518651baf9d97ce1c94a8a5bb207d579ce8baa8099cf36e52a64c92da245a9f83a809ec0ebf40db104302497ff189d565f9427ec47f271d3e0548cbe7a24f2824c06eda5f1d0eed86f06a3c04311e53a9227b10d38507ca85b91b59b6c6ef6645fc629432c1ad8f8565be04b8f8055b1f39897d3e802fd61a89aa4e2aede78194ce9ab64a2c0a04d4b8d845cc7420c90a37110ee370e3d8b80042c6b3cd9bb9750cd9999605c14199a803d2e4f510bfdabdd639845309dadd4bac9375999b91c9d23ed1fcf8fd085275dff3b608461d141db3e3c8a7d0950a0e04043e0e8406ec36224feb6276c1e148cc244fad7b83838c1c839bb28fdbfa2973707aa564b2918f3439985d655f6dc89514c36861df67708cff8caa77d30070688e84673d27d10f0124a3a16bc8705853829403e82dd24ea31dc150bfd09db1ba3945eb47b75890ee253dffe4203e2ad0b6524b97c382560b19fa0ea59afa7063491d7261b119fb610345b9b0e0473dedfcc1a61f352f93542e047865fc8fd6a5c2f3eda201222f18b72eadaff5d3039174ef5e15bb441c82e227424424e5743b3612929b1698b8b18f87c101aa5645cdb1bf4b1f289711159139ef70d2e76fa7e71c1cd016ca46281a435455581d17a7445ebb9cc9fd9d62d186ae816ed2be9bc934c80e9c08e4565e75892c0518ded6a672c2c3e5820fb91747d2cb63b989c4fd346cea0370f29b0b3cf8a55cd8afc35241192b4cacfc5af1ba9602584c9bc810a5c979d622712c187012f018f19f3c41c872957fdac875fcd0da79875f71824b52c406c10f30314a83b0f4a23d4dfd6b32d0c20441a1706920769eb4d28a5dd7750d894cdbf771bab781ccb22f93262e698aca0ea9d4937a903928139693c0b8212c3592dd398f62ed4543763f921015c48dc307fa749ddd3655caee0b2bcf89172e863a7ba2f6e1ff363fdb255fa04f6730f6343903c995148f9b9753719f8478aeb1651509b55852d76f0648a57450df1167ef5053c356aa632a7fd1c765d222364d31988853acfd80b35617aaf4583d558108d329e349df6951d4156b958a641e8c48e25ba94f1d1914550bcd5cb9e2551cb4b1473c1f6e36c372a8754348fbecbaf52eebce57fab79e54ce2c8f7e18fbd68df3d654e4b040b7fa2705a37a404c8981a5fd18515f47ac6ad01ba5d1f8ce578a4d1bc3cd0d139ceedba0ce6800a793639385db08c685d60c8d77af113fd6ece0bd68e70e552f64dd229821aa85a6b2ab0daaf9371bfc01a86bea2664bc194a17e1704740b39d25d137f9db66010c452ba8d8a9dbdd2a75f918dbe221c4aef2089086ccf0e094d12a4b8898cdb1d8e2002faa171f4ec57fe2c5316e512a97d3e1086927b9c0c8d3feecfe68784e71128a1e690ae2044a690d73733c452047f1815e2b6a7aff31b598da42e116fad87c19c184a96b0ae103b819d31d54d58337135a07ece33e9dec0bb4b3a478c6c26be6fad9617f73b38ee08a5fb9920498b6a89291bd54f67c16710359e5c4461797ef624a34ca7dec55c0c8fdac164d14220b915f0450341abb65e4a518da3ed2d1c88cd826f0c5a270658e9f031f713bf4405ffe77859ec8ee2298458844eab9bd0f51d98157214548566c6ed9fa2d2b168d738397ca1185836129fe357928c2da594812cadb01a84f532f35550e36c31096cd1941ca526bdf487366a3673f4debcdf012317482bd4700bd61a702488bd79be4c314a75876d9067685f99f8d602ab11a87cc050f043f13810d043cf601891d0eac464147df38643942fc5363a6726d24550d69b12f0cdae88a924847e10cb52d8b19cdfaa6786739a957860386f85c1d1f504fca9da434a13914739a2ea1bc3ace301bd29e2360a7e021ebd841ca4f20e64eaad5b9d22e2c07a22319c7206b0955841423dfb06b2c6e781034c95d14673aae2169486fc723415f0b2f5b87931fb8f79537992528eac1d7ff0c2c21232c2e46623d3d2dac4f27b3a140c137a0e5a6ce41a7d94f6f6c0fd92a36a6accc8a8be4f711bde0638ccfc03e47705d17751befc7fe9e971b03fdad55b5da36a41c9822185038785cb02287e34e1c3ea936e7108693e78a7998ef1c3ca90b26e546ddfa20a35a1f44f09ceab5a8d7781c2161d88fa224e5770d6c6315394b2d21f5a888237bbdc841301b64b0f255bf12f3e145fdfe925958638148541139f13c5f34aa68936a893da8980a721de767f0c544c911089e9c812319a152f4acb8c02545b044564b9ba6d3d4354223c9c3286a9b614ddc9b42bc710d2eacfb95e0e1ffb2c09ef53787da3e39b34d937becb71c542ddccf5544247ad7ba25cd9b32827c81286b48b679af78a463dc87b2d4b3b4d9734cee53ae30f624ec09c8d8a0a9fb1a713c2e0d9a085d0826164e68b24e1b9edc1901dd13c50895aa0f011948e9ff9c0ca57a6f0415aa071d1e81aa1a8692941db0d13e5b00924867729d0b1b9072c84e41dbec4df6e862d93957cf989a78dea81bb636cb3943361613887320b02eec3cea37e18814bc526a99e849d1ea3b4772da9f4b064bb7e382940eee23bf252565c8bb459306ca0a8390dff8c5d5ff73ebf2df7c70ffc3a22797d2489882889149d82547a22d8e3746a7647dc9c76c7b96f8139eafd4e9c02798f8a636e77d77f5226ce9763b371345669df85b1e7d1970bb356d9eb18395cfb6d49bc809c67c93e87a6389f56d8f5b44547f576d40ac9d0b097c27119faa803c1e51f1f5a9f37458f6c071da38a85805d0e933a9ff8f3ea50bee68c676c5186aef9b7d2978c9b04561719447165790d95a98ac5892e721344e9f97fee78206194ab2cd46a4d9065afdfedaaa2855e9b833d4ac01474109e61b2b4baa06b19d0fd0048c13165dd5b9c9a69a47f913646d93d59a95cc1eb43b78cefc8c0259a810741efdee825d5fc30307a7b66e4fc6c0b04d876a9645bc09b045cf2bf5d6473c9bf6ee0cb3f9949f5ceec1619cbe67d06f4a54c9e46110fc0d1abeaf89e14c8fe2819fcf6ff49f02a5ebefefe04e8129feb7c92ad8c365f3b4b641d9cc8f6766a08f34aa5317821425be9b47598e17ed9e4c8c8d4e9f9d9c7716f4bd0f0ee25ff11d3f7cb2f0f0f3469522faf5d4fcb3f5e17a6c810b3150f4497cf2d76745439bc1cb336cb01e23dc93b8a6f02a12bbd6cc52997da6a68faab5a60f2ec08d5e649d2b28d9cb5279fab84f00935b5e8dcc2f6672102815f4aeac2fd0cf046fa280d47ea72bb88d37e3b52398a23cd7db789242a7a1f276e786ed7ba2eda3127576dccf8a31d8c42e9a8ce4a6931f7839ca8e958082a01e30f16e0849fed5b263cbdbde0a22d48797e5fe3ca79ecf0f9efc249156eb5c055ad618280497b2c1e043900a83a6114b48dd852f6af1f48b34d9b47bdb06d2cf2e5dac3797c372e280182266ee403e9c214947cd1be44010476f6665241e3f1a518096be5ee98125fa3636cf151e9877b2d4293472e455b646cdcad4abf849f91481f67a0ccb2d6de56a3cd8f7d4862dae4a6a84b4062cdde33be6d0384cdd7b43817b554c4ccfe0f7479ec62906018f10e334ab039e8a14d1cdcbfa7bc576d65bf621d9eebb23877cefce15007594711cb520766889170a309bc48e7e265a6d99165c7baa6dca97b776f5bbcb616237d8592b34820a7e7c7d0e23356271631d02be327bcc289938c2ec87d54a69890b0c2fdc0830afe88df63877dd155b3ccaa2b3219843692bdeefa37847a7b4b105def1706021280c1055c5ee35d6a26a5cc417da1131b4aa04ff43c7a30e3866a5d235f562a5e79a3392cdaf8d0d33fc384c670863b2e22b8cbc4e4d63191db2de674042085b0d415195449af0a3763f8474dd92c8be6430d598c86d8a4490874caef061d66a5b4c476c9d2357a1bb4a79d2649c4441337d937e626091235fcee191021cb2aeca54bd8f33d42c14c8939e0627e7e1ba0270da05ef0d48ad7cc66a2cf1191ccfb3a7e78d5e5a2aa61ba6f5655622234ddfde6aa5f256f7eb2e347e3a2cdf037bc480867e83c98f296217f1d29e0f3a634287dce10a394c1f3dd3ed17bafd331f27872704e252f9e5627f7da9b85fbcd7350f9b1edab71ef8ddd864be67e6ca4a7041074781e62fe9aa3b989ccc6d134dc43a719732857867bf6688e750fc80a4513ce3cf8de94825ae569797303e4f617ba9fe0f7eabb9bfd1cb942e3aa3bff281f1ca78e0dfa44e65231da48f7856a01ddf31a5254f2ea6c4b1886209fcfdcaa2ef65af5d443891176fb59a5b3809a9dd3dcc6f8f041197e0476bb31a31a8289153b4f2d4c794bf626a207237c07bac3ff04ee3b5f2e94aad3056622f6c5ac60fc8c7a7c0b3a930f765daec236b25d7ed218d41ba27520f2c39553fcfdae6297aadb1a68cd29f44c8a987ffb5821b404bb577de0d59f2952af138d5074902c8ed6759aabd04a51186042fe33984dbfe32af0406c2f7637f89d39c22da2ec835fe4f4026d3592535433b617b1ae381281518087e3d3db1915bd213f1c800ef1dcc40a77fca67e7f9cacc694729ccc8a94d89ffd0575333a1aea952b773487eef4a099036774bb104ecac7e474fc2e7292e50e16df12887690f7b021f14ff997eac2e34f7835b25c1011185903c1b3eb274b7eea967004260f7cd41eb9fbdddf13400d09a1f1c0145942883d2cb8df48a541e0ff34047e0b27230c170b4301b88ed8185837ea6a66f7a21b52404e81acf06d56190055af839c83404db5df9c57114348e2a6501d91d59a61bc9dc141c19a70e2c24072df5ef03ba3a8a1c6830e5a4f934abb2396ebb38c8f750ccf8f31549c76d38a7f5a211e7e03120fc56549f961a2c6260fdad8f167f48e254fd6c980458f5328dcb445379b1759e5a2e6f55a8ab868c47cc6713a94db4a200f26431959931b1a9067715cdb7d424345cebe030648ed223514896212c530b17201fb3fed5186aed86348eed416ad62e0a0d677a2598735421122194a817ce7c383d6db91db5678cfbc2d5278a08d69cbccf8fef58877c92bf35f0b78f548229ef2f599b32004f45c8cbe3012846be767b80768c1e86e0c2f49645d58fe550e91ad029682f26aad2ad5d6b20f293bf20f2b2cdbe6c84ced43dec1fa97dde50036793a2aee0a41d2e76a9c964b55925fb743cbd7d5bf0f0ebabdd5859343c625a981460d5f3ecfaae9b740bfb9f3b16cd27cef2de016f3dec4126a987b2dc549c122e41b1236be699b30cc9b87bbf18cd3b16d735c5ff82051d001cfcf1b12b20657eab0b207993d63a619204d222cbeb03cb5198ef33eeb65e280d29fd9b1da9104b2e9f347b51c996c0c279bd4f2d39df560df33efbebc412cb87ca5ecc75b9af32228f72a3d5a105b26e03b8a9dfdf6b45f9ae608d7fcf74e59da"}, 0xfd1, 0x0) 04:10:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:35 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5865}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:35 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x0, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x20, 0x2, 0x2, 0x301, 0x0, 0x0, {}, [@CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}]}, 0x20}}, 0x0) 04:10:35 executing program 2: timer_create(0x2, 0x0, &(0x7f0000000240)) timer_gettime(0x0, &(0x7f0000000340)) [ 763.418115][ T6364] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:35 executing program 2: migrate_pages(0x0, 0x101, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x1) [ 763.682997][ T6369] device bridge13 entered promiscuous mode 04:10:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0x6, 0x4) [ 763.759899][ T6369] bond14: (slave bridge13): making interface the new active one [ 763.825831][ T6369] bond14: (slave bridge13): Enslaving as an active interface with an up link 04:10:35 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000080)={0x7}, 0x4) 04:10:35 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x0, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:35 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x6000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f0000000100)={@empty, @dev}, 0xc) 04:10:36 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r0, &(0x7f0000001180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010040, 0x0) [ 764.222623][ T6432] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:36 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:36 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x8912, &(0x7f0000000040)={'macvtap0\x00', @ifru_hwaddr=@broadcast}) 04:10:36 executing program 2: stat(&(0x7f0000000040)='.\x00', &(0x7f0000000080)) [ 764.510418][ T6435] device bridge14 entered promiscuous mode [ 764.560575][ T6435] bond15: (slave bridge14): making interface the new active one [ 764.597475][ T6435] bond15: (slave bridge14): Enslaving as an active interface with an up link 04:10:36 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:36 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000440), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) 04:10:36 executing program 2: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "732ed14f646eb1886abad62c037f0fb86633e7c6e33ef6d1b92da9611c63cf5fbadd85a2da3efcfe643304ba290aa7a208c5888ad388107c06fe8169ceda8bec"}, 0x48, r0) r2 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000280)='pkcs7_test\x00', &(0x7f0000000540)={'syz', 0x3}, r2) 04:10:36 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x6558}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:36 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) [ 764.995808][ T6500] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:37 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockname(r0, 0x0, 0x0) clone3(&(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x3}, 0x58) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) 04:10:37 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='mpol=p']) [ 765.119044][ T6506] device bridge15 entered promiscuous mode 04:10:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r1, 0x54d6d007ac1b82dd, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xb, 0x1, '-^-]\'[\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x28}}, 0x0) [ 765.188574][ T6548] tmpfs: Bad value for 'mpol' [ 765.190340][ T6506] bond16: (slave bridge15): making interface the new active one [ 765.196657][ T6548] tmpfs: Bad value for 'mpol' [ 765.243733][ T6506] bond16: (slave bridge15): Enslaving as an active interface with an up link 04:10:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:37 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x8100}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:37 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x0, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:37 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000600)) [ 765.545567][ T6560] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:37 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000440), 0x4) [ 765.750754][ T6559] __nla_validate_parse: 11 callbacks suppressed [ 765.750773][ T6559] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 765.834084][ T6564] device bridge16 entered promiscuous mode 04:10:37 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x541b, 0x0) 04:10:37 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x2}, {0x8}]}) 04:10:37 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x0, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) [ 765.908066][ T6564] bond17: (slave bridge16): making interface the new active one [ 765.988581][ T6564] bond17: (slave bridge16): Enslaving as an active interface with an up link [ 766.050225][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 766.084434][ T6609] device bond17 entered promiscuous mode [ 766.125270][ T6559] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x25, 0x0, &(0x7f0000000100)) 04:10:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r6, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:38 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000014c0)={0xffffffffffffffff, &(0x7f0000000900)="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", &(0x7f0000001480)=@udp6}, 0xfffffffffffffee6) 04:10:38 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xf000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:38 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x0, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) [ 766.396936][ T6645] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x1a, 0x0, &(0x7f0000000100)) [ 766.563901][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 04:10:38 executing program 2: timer_create(0x2cfbdac32c880f7c, 0x0, 0x0) [ 766.612306][ T6648] device bond18 entered promiscuous mode 04:10:38 executing program 0: clone3(&(0x7f00000008c0)={0x8080000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000880)=[0xffffffffffffffff], 0x1}, 0x58) [ 766.654461][ T6651] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r6, @ANYBLOB="0001"], 0x28}}, 0x0) [ 766.752718][ T6683] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:38 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:38 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) [ 766.899597][ T6698] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:38 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x8983, &(0x7f0000000040)={'macvtap0\x00', @ifru_hwaddr=@broadcast}) [ 766.996169][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 767.116427][ T6700] device bond19 entered promiscuous mode [ 767.162511][ T6741] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:39 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r6, @ANYBLOB="0001"], 0x28}}, 0x0) [ 767.281801][ T6743] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x9, 0x0, &(0x7f0000000100)) 04:10:39 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) [ 767.460612][ T6752] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:39 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4, 0x2}]}, 0x18}}, 0x0) [ 767.680028][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 767.705665][ T6754] device bond20 entered promiscuous mode 04:10:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) [ 768.038271][ T6801] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 768.124387][ T6801] device bond21 entered promiscuous mode 04:10:40 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x20000194) 04:10:40 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:40 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:40 executing program 2: r0 = socket(0x11, 0x3, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @random="435621ff01d7"}, 0x14) 04:10:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:40 executing program 0: r0 = socket(0x2, 0x3, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 04:10:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c000000010105"], 0x5c}}, 0x0) 04:10:40 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:40 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) [ 768.487562][ T6850] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:40 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000000080)={'bridge_slave_1\x00', @ifru_settings={0x0, 0x0, @cisco=0x0}}) [ 768.666829][ T6855] device bond22 entered promiscuous mode 04:10:40 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x2, 0x0) 04:10:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:40 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:40 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) [ 768.957911][ T6903] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:40 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) 04:10:41 executing program 0: r0 = socket(0x11, 0x3, 0x72f) bind$packet(r0, &(0x7f0000000080)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @random="435621ff01d7"}, 0x14) [ 769.144059][ T6905] device bond23 entered promiscuous mode 04:10:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(r0, &(0x7f0000000500)={0x18, 0xfffffffffffffff5}, 0x18) 04:10:41 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:41 executing program 0: r0 = socket(0x11, 0xa, 0x0) bind(r0, 0x0, 0x0) 04:10:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r6, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000011c0)={0x2, 0x0, @private}, 0x10, 0x0}}], 0x2, 0x0) 04:10:41 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:41 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x109402) write$P9_RLCREATE(r0, &(0x7f00000000c0)={0x18}, 0x18) [ 769.670789][ T6960] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:41 executing program 2: futex(0x0, 0x9, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0) [ 769.880770][ T6971] device bridge17 entered promiscuous mode 04:10:41 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x8901, &(0x7f0000000040)={'macvtap0\x00', @ifru_hwaddr=@broadcast}) [ 769.941790][ T6986] device bond24 entered promiscuous mode 04:10:41 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r6, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:42 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:42 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}}) 04:10:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f00000024c0)={&(0x7f0000000000)=@in={0x2, 0x4e24}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x10, 0x84}], 0x10}, 0x4008094) 04:10:42 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) [ 770.240442][ T7019] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 770.313376][ T7021] fuse: Bad value for 'user_id' 04:10:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f00000024c0)={&(0x7f0000000000)=@in={0x2, 0x4e24}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0xf8, 0x84, 0x0, "c4700124c784ff306c242e94afd810cc6ec71651d2f3c3225547799f273eba7c30efe78708689f462d6f8de2ba6ec5f4cad08f5bc1ddd1e208654271119d808f84dbc2bb066bf6797114d5d232ce61913c147bf90c32dd687ea9723c4bc22beef87f83e626a9e51e1a3d1169084d9d81aae8473d4dfc8c5a7a21b1389953cb25260bc9754f4fa01fde698ada3ca634ba4387ce5423ec69689d84065fb6558d2594224cda0c734239ea31e3aaf4364d0f6f807ee19e3e72afdffa717f31cef3722ed2a8381a398a236229e8aa08d7b18ff72a7a01e2713dfe02dee277fb00dd0661"}, {0x10, 0x117}, {0xa8, 0x84, 0x0, "7fcb66cc6feaa20be2266f091734dae971cff2f730ea94f7961e3d562f2744269e8b7ca57f9c2f1e7fa5ab691a666a453453357aa2d32b3ce792584e6f83b18e221aeb651d44d330263b9a022cf9dbfa56032170e6dbcf575148758c372624518e1cde66951b1810ad8685c13ffedd47f5831d4196ea26cd22fe16b51086d489bd16fd13ca36c808882ba2ae9c1e8a1323"}, {0x30, 0xe76283862c53bc04, 0x0, "a03a0759940b14882d7c3d9280420f6091046ea702c4a9a967"}, {0x30, 0x10a, 0x0, "b707a39cfc5b70250987f41c994e8bdade548eab5c812feab4"}, {0x1010, 0x113, 0x0, "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"}, {0x68, 0x10d, 0x0, "2e09e510fa7baccd940ffe9fbf94299abf1da3dd1312755c5fb40431b07bb537fa710ae45298d555ed0ce5296e6d86251eda74ab9cb15c0f6f9afb6af1c2fa96cbecc6b8dd2b0ad0134ba5fc8c5a7d7449"}, {0xd80, 0x103, 0x0, "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"}], 0x2008}, 0x4008094) 04:10:42 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmat(r0, &(0x7f0000ff9000/0x2000)=nil, 0x4800) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x7000) [ 770.459387][ T7022] device bridge18 entered promiscuous mode [ 770.513100][ T7040] device bond25 entered promiscuous mode 04:10:42 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r6, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:42 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:42 executing program 0: clone3(&(0x7f0000000340)={0x2080000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 04:10:42 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0xc020660b, 0x0) [ 770.766555][ T7082] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 770.975942][ T7085] __nla_validate_parse: 17 callbacks suppressed [ 770.975962][ T7085] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:43 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) [ 771.081144][ T7086] device bridge19 entered promiscuous mode 04:10:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x4, 0x64) [ 771.130104][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 771.160225][ T7109] device bond26 entered promiscuous mode 04:10:43 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x8981, 0x0) [ 771.198585][ T7085] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:43 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:43 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x12, 0x0, &(0x7f0000000100)) [ 771.422185][ T7140] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 771.520076][ T7140] device bridge20 entered promiscuous mode 04:10:43 executing program 0: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x4c0, 0x0) [ 771.575423][ T7169] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 771.670112][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 771.692090][ T7165] device bond27 entered promiscuous mode 04:10:43 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x8906, 0x0) [ 771.718797][ T7169] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:43 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001880)=[{{&(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000001540)={0x2, 0x4e24, @private}, 0x10, 0x0, 0x0, &(0x7f00000017c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x89, 0x3, "f7"}]}}}], 0x18}}], 0x2, 0x0) 04:10:43 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(r2, 0x0, 0x0) 04:10:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:43 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x38, 0x0, &(0x7f0000000100)) [ 772.017474][ T7198] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:44 executing program 0: r0 = gettid() r1 = gettid() kcmp$KCMP_EPOLL_TFD(r0, r1, 0x2, 0xffffffffffffffff, 0x0) [ 772.109566][ T7199] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 772.191193][ T7202] device bridge21 entered promiscuous mode [ 772.254331][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 772.280007][ T7198] device bond28 entered promiscuous mode 04:10:44 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(r2, 0x0, 0x0) 04:10:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8927, &(0x7f0000000040)={'veth1_virt_wifi\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) [ 772.295703][ T7199] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:44 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000300)={0x24, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x24}}, 0x0) 04:10:44 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(r2, 0x0, 0x0) 04:10:44 executing program 2: mq_open(&(0x7f0000000100)=' \xbd\x1euz\xf2\xf5r\x0f\x97\x1336\x11~m\xc4\x9f\x05\xa2J\xdcT\xbd\x02\x11tS\r>c\x92\xb0\x1cH\xd9%\xc5\x06\xa3\xc3z\x86\xa6Z.4\xfd\x89f\xcc\x91\x13\xa7{\xcb\x8a\xc6VT\xbdJ\xf2\x1a\xb3\x88\x8a\x89\xa4Q\x16\x1e\x0f\xee\x9d\xa5\xf1\xc9ay\xf6^N\xc2\x86\x03\x03B\xb8\v:H\x19\xa6\xac\x1a\xb4t\x9e\x85\x81T\xf3\x88|m\xd9vz\xdbt|\xd5\xd9\xa6\x90\r$0\xfcS\xbeT\xaa8\x8b#\x1c\x84\x125vc\x98K\x7f\x11\x8ev\x8f\xbf\xbb\xba\xfa|^\x02j\xbf\x99t~u \xd4\x102el\xa2\b_\\\xee~\xfb\xd6)YcY\xd5\xf7~8\xd8o52+\xe9k@X\xd5\x05\x84P\x96\xf7Y\x15\xd2\xb5J\x83t\xe5Y\xc3\xae\xa1\xa0[<\xcf\xf3,\xb1\x1d5\x194\"\xed\x0f\x8b\x7f\xdd\vB\xef\x97\x05\t:\xe9\xa4\xe3B\x10v=1\x13\x7fbG\xc8\r\x10\xf3\xf0\xe9$\xb6\x1f\x92\xf4\x85\xdec\xb2_\x9f\x1e\x9c\x83\vB\xc0D]u_\x06', 0x0, 0x0, 0x0) [ 772.571956][ T7255] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 772.756052][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 772.826885][ T7260] device bridge22 entered promiscuous mode [ 772.845820][ T7287] device bond29 entered promiscuous mode 04:10:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f00000024c0)={&(0x7f0000000000)=@in={0x2, 0x4e24}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x10, 0x0, 0x2}], 0x10}, 0x0) 04:10:44 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r6, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:44 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 04:10:44 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x25, 0x0, 0x0) 04:10:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffd}}, 0x0) [ 773.142611][ T7310] device bridge23 entered promiscuous mode 04:10:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r1 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) 04:10:45 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 04:10:45 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/100) 04:10:45 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r6, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:45 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:45 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) [ 773.566560][ T7339] device bridge23 entered promiscuous mode 04:10:45 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0xc0189436, &(0x7f0000000040)={'macvtap0\x00', @ifru_hwaddr=@broadcast}) 04:10:45 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000080)) 04:10:45 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r6, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:45 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:45 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 04:10:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c0000000101050000000000000000000a0000050800034000000402400002"], 0x5c}}, 0x0) 04:10:45 executing program 0: pipe(&(0x7f0000000040)) pipe(&(0x7f0000000040)) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x5000000, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) pipe(&(0x7f0000000040)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000180)={0x1ff}, 0x0, 0x0) [ 773.978382][ T7359] device bridge23 entered promiscuous mode 04:10:46 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 04:10:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c00000002010500000000000000000002000005080003400000040240000280140001"], 0x5c}}, 0x0) 04:10:46 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) [ 774.328772][ T7386] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 774.498645][ T7391] device bridge23 entered promiscuous mode 04:10:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x37, 0x0, &(0x7f0000000100)) 04:10:46 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 04:10:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:46 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:46 executing program 2: timer_create(0x0, 0x0, 0x0) clone3(&(0x7f0000002e80)={0x6c104000, 0x0, 0x0, 0x0, {}, &(0x7f0000001dc0)=""/4096, 0x1000, 0x0, 0x0}, 0x58) 04:10:46 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) [ 774.833967][ T7443] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 774.900431][ T7443] bond31 (uninitialized): Released all slaves 04:10:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x7, 0x0, &(0x7f0000000100)) [ 774.999847][ T7446] device bridge24 entered promiscuous mode 04:10:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:47 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x11}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:47 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:47 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x80840) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x5450, 0x0) [ 775.367570][ T7490] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 775.406647][ T7490] bond31 (uninitialized): Released all slaves [ 775.463220][ T7496] device bridge25 entered promiscuous mode 04:10:47 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x60}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:47 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x22, 0x0, &(0x7f0000000100)) [ 775.724628][ T7513] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 775.819480][ T7513] device bridge26 entered promiscuous mode 04:10:47 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000100)={@empty, @dev, r2}, 0xc) 04:10:48 executing program 0: timer_create(0x6, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f0000000180), &(0x7f0000000300)}}, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x4) timer_create(0x7, &(0x7f00000005c0)={0x0, 0x1e, 0x2}, &(0x7f0000000600)) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000680)={{}, {0x0, r0+60000000}}, &(0x7f00000006c0)) clone3(&(0x7f0000002e80)={0x6c104000, &(0x7f0000001d00), &(0x7f0000001d40), &(0x7f0000001d80), {0x20}, &(0x7f0000001dc0)=""/4096, 0x1000, &(0x7f0000002dc0)=""/84, &(0x7f0000002e40)=[0x0, 0x0], 0x2}, 0x58) 04:10:48 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xf0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:48 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) [ 776.419490][ T7586] __nla_validate_parse: 27 callbacks suppressed [ 776.419508][ T7586] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 776.541407][ T7589] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') write$FUSE_POLL(r0, 0x0, 0x0) 04:10:48 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000000)='reno\x00', 0x5) [ 776.662061][ T7596] device bridge27 entered promiscuous mode 04:10:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001880)=[{{&(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000001540)={0x2, 0x4e24, @private}, 0x10, 0x0, 0x0, &(0x7f00000017c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102}}}, @ip_retopts={{0x10}}], 0x30}}], 0x2, 0x0) [ 776.718007][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 04:10:48 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) [ 776.837050][ T7586] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:48 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'vcan0\x00', {0x2, 0x0, @broadcast}}) [ 777.066595][ T7666] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:49 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) [ 777.325592][ T7670] device bridge28 entered promiscuous mode 04:10:49 executing program 0: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) [ 777.366344][ T7672] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 777.446930][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 04:10:49 executing program 2: syz_io_uring_setup(0x45ba, &(0x7f0000000100), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x70c6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x222}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) [ 777.493813][ T7672] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:49 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:49 executing program 0: clone3(&(0x7f00000006c0)={0x100002000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 04:10:49 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x500}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r1, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:49 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) [ 777.841226][ T7733] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:49 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000600)=[{&(0x7f00000002c0)='7', 0x1}], 0x2001, &(0x7f0000001740)) 04:10:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind(r0, &(0x7f0000000040)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80) [ 777.987884][ T7734] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 778.024626][ T7734] bond34 (uninitialized): Released all slaves [ 778.086952][ T7737] device bridge29 entered promiscuous mode [ 778.119076][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 04:10:50 executing program 0: syz_io_uring_setup(0xe2b, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 778.149605][ T7733] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:50 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:50 executing program 2: clock_nanosleep(0x2, 0x0, &(0x7f00000029c0)={0x0, 0x989680}, 0x0) 04:10:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r1, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:50 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x600}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:50 executing program 0: process_vm_writev(0x0, &(0x7f0000001500)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, &(0x7f0000002980)=[{0x0}], 0x1, 0x0) [ 778.457449][ T7758] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:50 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) [ 778.508271][ T7758] bond34 (uninitialized): Released all slaves [ 778.564012][ T7762] device bridge30 entered promiscuous mode [ 778.580450][ T7763] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:50 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0xf87c3123dd7495a9) 04:10:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r1, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:50 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 04:10:50 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x700}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x27, 0x0, &(0x7f0000000100)) [ 778.992916][ T7782] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:51 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 779.081823][ T7782] bond34 (uninitialized): Released all slaves [ 779.170341][ T7787] device bridge31 entered promiscuous mode 04:10:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000000)={'lo\x00', @ifru_hwaddr=@remote}) 04:10:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='wchan\x00') read$FUSE(r0, &(0x7f00000030c0)={0x2020}, 0x2020) 04:10:51 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x900}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:51 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r1, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:51 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 04:10:51 executing program 2: timer_create(0x0, &(0x7f0000000280)={0x0, 0x0, 0x9, @thr={0x0, 0x0}}, 0x0) 04:10:51 executing program 2: pselect6(0x8, &(0x7f0000000100), 0x0, &(0x7f0000000180)={0x1ff}, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) 04:10:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0xb, 0x0, &(0x7f0000000100)) 04:10:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x17, 0x0, 0x0) [ 780.658300][ T7809] device bridge32 entered promiscuous mode 04:10:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000040)={'vcan0\x00', @ifru_addrs=@qipcrtr}) 04:10:52 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa00}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:52 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r1, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:52 executing program 2: r0 = gettid() r1 = gettid() kcmp$KCMP_EPOLL_TFD(r0, r1, 0x3, 0xffffffffffffffff, 0x0) 04:10:52 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 04:10:52 executing program 0: clock_nanosleep(0x2, 0x1, &(0x7f00000029c0)={0x0, 0x989680}, 0x0) [ 781.120396][ T7842] device bridge32 entered promiscuous mode 04:10:53 executing program 2: timer_create(0x867df1eae557e277, 0x0, &(0x7f0000000040)) 04:10:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000001f80)={&(0x7f0000000600), 0x2000060c, &(0x7f0000001f40)={&(0x7f0000001f00)={0x14}, 0x77}}, 0x0) 04:10:53 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb00}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:53 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) 04:10:53 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r1, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x3d, 0x0, &(0x7f0000000100)) [ 781.498492][ T7866] __nla_validate_parse: 11 callbacks suppressed [ 781.498510][ T7866] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={&(0x7f0000000400), 0xc, &(0x7f0000000340)={0x0}, 0x7}, 0x0) [ 781.659942][ T7871] device bridge32 entered promiscuous mode 04:10:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x28, 0x0, &(0x7f0000000100)) [ 781.760031][ T7863] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 781.792742][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 04:10:53 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) 04:10:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c0000000201050000000000000000000a000005080003400000040240000280140001"], 0x5c}}, 0x0) 04:10:53 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xc00}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x26, 0x0, &(0x7f0000000100)) [ 782.080218][ T7891] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 782.112709][ T7892] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:54 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) [ 782.175899][ T7891] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 782.235180][ T7897] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 782.253856][ T7891] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 782.288990][ T7897] bond34 (uninitialized): Released all slaves [ 782.342859][ T7893] device bridge32 entered promiscuous mode [ 782.369809][ T7895] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:54 executing program 2: msgsnd(0x0, &(0x7f00000001c0)={0x3, "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"}, 0xfd1, 0x0) [ 782.406073][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 04:10:54 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) 04:10:54 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe00}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:54 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8}]}}]}, 0x3c}}, 0x0) 04:10:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:54 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @loopback}}) [ 782.736005][ T7915] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x20000004, 0x64) [ 782.881786][ T7925] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 782.922320][ T7925] bond34 (uninitialized): Released all slaves [ 782.981923][ T7918] device bridge33 entered promiscuous mode 04:10:55 executing program 2: timer_create(0x2, 0x0, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x77359400}}, 0x0) 04:10:55 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) accept$unix(r0, 0x0, 0x0) 04:10:55 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xf00}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:55 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8}]}}]}, 0x3c}}, 0x0) 04:10:55 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) [ 783.361035][ T7951] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:55 executing program 0: clone3(&(0x7f0000000340)={0x2080000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0], 0x1}, 0x58) [ 783.409476][ T7951] bond34 (uninitialized): Released all slaves 04:10:55 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1100}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) [ 783.453909][ T7948] device bridge34 entered promiscuous mode 04:10:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:55 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8}]}}]}, 0x3c}}, 0x0) 04:10:55 executing program 2: r0 = syz_io_uring_setup(0x433c, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) [ 783.837071][ T7970] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 783.886348][ T7970] bond34 (uninitialized): Released all slaves 04:10:55 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5865}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) [ 783.994140][ T7973] device bridge35 entered promiscuous mode 04:10:56 executing program 2: pipe(&(0x7f0000000040)) pipe(&(0x7f0000000040)) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) pipe(&(0x7f0000000040)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000180)={0x1ff}, 0x0, 0x0) 04:10:56 executing program 1: socketpair(0x26, 0x5, 0x5, &(0x7f0000001880)) 04:10:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x2f, 0x0, &(0x7f0000000100)) [ 784.346835][ T7995] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:56 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:56 executing program 1: syz_io_uring_setup(0x6cf4, &(0x7f0000000100)={0x0, 0x17e3, 0x8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) [ 784.411589][ T7995] bond34 (uninitialized): Released all slaves [ 784.484385][ T8000] device bridge36 entered promiscuous mode 04:10:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x3e, 0x0, &(0x7f0000000100)) 04:10:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r0) 04:10:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:56 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6558}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x12, 0x0, 0x0) 04:10:56 executing program 0: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2020, &(0x7f0000000080)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee01}}) [ 784.862214][ T8023] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 784.923297][ T8023] bond34 (uninitialized): Released all slaves [ 784.983498][ T8025] device bridge37 entered promiscuous mode 04:10:57 executing program 2: pipe(&(0x7f0000000040)) pipe(&(0x7f0000000040)) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) pipe(&(0x7f0000000040)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000180)={0x1ff}, 0x0, 0x0) 04:10:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:57 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8100}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(r0, 0x0, 0x0) 04:10:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r0, &(0x7f0000000000)=@hci, 0x80) [ 785.411361][ T8053] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x4, 0x0, &(0x7f0000000100)) [ 785.569477][ T8058] device bridge38 entered promiscuous mode 04:10:57 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xf000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:57 executing program 0: timer_create(0x6, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x34, 0x0, @thr={&(0x7f0000000180)="c4deb0e32e30a6fd419c6d433d7c1ee8cf9fcaf94134dd7206d24979e43591f650bd4d77163330f1591950d2383fc571d02055eae2b97d7bb916bc14e0988d8f3497ff", &(0x7f0000000300)="7e90aa292e4907223479a86ef454e5b2862c8aed746178fc1f6442ea05b5c5259d0f809dbde5919ebe6d8a7c73769dbe81d627c5dd7bfc770c28be3a140db33a19d9dc36985f023d75dada377bd749c9f06606337e8e068361bbb3e318429bb38df31de73adaf34e40a2fab7aaa81dd7986709feab415ff93bc2c1cee5ef22f69a3bbb9ebb89e8bcf9c0042a8f74ceef593c1904df54778d13e1acc237ea5fb5b703f55f70eb2419692af1ec3436f210043b24c1313ea7d806791ed53b84e7de843f"}}, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x4) timer_create(0x7, &(0x7f00000005c0)={0x0, 0x1e, 0x2}, &(0x7f0000000600)) clock_gettime(0x0, &(0x7f0000000640)) clone3(&(0x7f0000002e80)={0x6c104000, &(0x7f0000001d00), &(0x7f0000001d40), &(0x7f0000001d80), {0x20}, &(0x7f0000001dc0)=""/4096, 0x1000, &(0x7f0000002dc0)=""/84, &(0x7f0000002e40)=[0x0, 0x0], 0x2}, 0x58) 04:10:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:57 executing program 1: r0 = socket(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x25, 0x0) [ 785.875691][ T8118] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:58 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x5460, 0x0) [ 786.096605][ T8122] device bridge39 entered promiscuous mode 04:10:58 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:58 executing program 2: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x894b, 0x0) 04:10:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:58 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000040)={'macvtap0\x00', @ifru_hwaddr=@broadcast}) [ 786.489046][ T8197] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:58 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x23, 0x0, &(0x7f0000000100)) [ 786.709646][ T8200] device bridge40 entered promiscuous mode [ 786.749108][ T8217] __nla_validate_parse: 24 callbacks suppressed [ 786.749127][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 04:10:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x14, 0x3, 0x1, 0x301}, 0x14}}, 0x0) 04:10:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x2d, 0x0, &(0x7f0000000100)) [ 786.802044][ T8242] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 786.922938][ T8245] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x2, 0x0, &(0x7f0000000100)) 04:10:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x39, 0x0, &(0x7f0000000100)) 04:10:59 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:10:59 executing program 2: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='f']) [ 787.367087][ T8278] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x2a, 0x0, 0x0) 04:10:59 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r0, 0xffffffffffffffff) [ 787.527123][ T8306] fuse: Unknown parameter 'f' [ 787.536135][ T8306] fuse: Unknown parameter 'f' [ 787.542210][ T8280] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x10, 0x0, &(0x7f0000000100)) [ 787.620564][ T8283] device bridge41 entered promiscuous mode [ 787.633585][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 04:10:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000003780)={0x20, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x20}}, 0x0) [ 787.661130][ T8280] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:10:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x1d, 0x0, &(0x7f0000000100)) 04:10:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:10:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000100)={@empty, @dev}, 0xc) 04:10:59 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) [ 787.940163][ T8337] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:10:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x6, 0x0, &(0x7f0000000100)) 04:11:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite\x00') read$FUSE(r0, &(0x7f00000030c0)={0x2020}, 0x2020) [ 788.123129][ T8344] device bridge42 entered promiscuous mode [ 788.140248][ T8373] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) connect(r0, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80) [ 788.202426][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 788.278699][ T8373] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:00 executing program 1: syz_open_dev$evdev(&(0x7f0000000280), 0x792, 0x200002) 04:11:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:00 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x2c}}, 0x0) 04:11:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x14, 0x5, 0x1, 0x301}, 0x14}}, 0x0) [ 788.516561][ T8394] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:11:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000001f80)={&(0x7f0000000600)={0x10, 0x0, 0xf0}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x14}, 0x33fe0}}, 0x0) 04:11:00 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_io_uring_setup(0x1610, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 788.731161][ T8397] device bridge43 entered promiscuous mode [ 788.759791][ T8400] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0xc, 0x0, &(0x7f0000000100)) 04:11:00 executing program 0: clone3(&(0x7f0000000300)={0x218b0000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 04:11:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:00 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000100)={@empty, @dev}, 0xb) 04:11:01 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x5450, 0x0) [ 789.083566][ T8455] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:11:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x1a, 0x0, 0x0) [ 789.334083][ T8459] device bridge44 entered promiscuous mode 04:11:01 executing program 2: r0 = syz_io_uring_setup(0x50cb, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xb, 0x0, 0x0) 04:11:01 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000300)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10000}]}]}, 0x20}}, 0x0) 04:11:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f00000051c0)=[{{&(0x7f0000000100)={0x2, 0x4e22, @remote}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 04:11:01 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0xc0045878, 0x0) 04:11:01 executing program 2: socketpair(0x1, 0x0, 0x7ff, &(0x7f00000000c0)) [ 789.712176][ T8514] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 789.892422][ T8520] device bridge45 entered promiscuous mode 04:11:01 executing program 2: timer_settime(0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) clone3(&(0x7f0000002e80)={0x6c104000, &(0x7f0000001d00), 0x0, 0x0, {0x20}, &(0x7f0000001dc0)=""/4096, 0x1000, &(0x7f0000002dc0)=""/84, &(0x7f0000002e40)=[0x0], 0x1}, 0x58) 04:11:01 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x20010, &(0x7f0000000680)=ANY=[]) 04:11:01 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:02 executing program 1: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='macvtap0\x00') [ 790.264043][ T8571] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:11:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x894a, &(0x7f00000000c0)={'vxcan1\x00', @ifru_data=0x0}) 04:11:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x22, &(0x7f0000000100)={@empty, @dev}, 0xc) [ 790.458919][ T8575] device bridge46 entered promiscuous mode 04:11:02 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:02 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x894a, &(0x7f0000000040)={'macvtap0\x00', @ifru_hwaddr=@broadcast}) 04:11:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x14, r1, 0x80b}, 0x14}}, 0x0) [ 790.764733][ T8642] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 790.814805][ T8642] bond43 (uninitialized): Released all slaves [ 790.920151][ T8648] device bridge47 entered promiscuous mode 04:11:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x2b, 0x0, &(0x7f0000000100)) 04:11:03 executing program 2: setresuid(0xee00, 0xee01, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) 04:11:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001880)=[{{&(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000001540)={0x2, 0x4e24, @private}, 0x10, 0x0, 0x0, &(0x7f00000017c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x89, 0x2}]}}}], 0x18}}], 0x2, 0x0) 04:11:03 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:03 executing program 1: syz_mount_image$squashfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) [ 791.513960][ T8689] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 791.543248][ T8689] bond43 (uninitialized): Released all slaves 04:11:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x29, 0x0, &(0x7f0000000100)) 04:11:03 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x4020940d, 0x0) 04:11:03 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x11, 0xc, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 791.614977][ T8695] device bridge48 entered promiscuous mode 04:11:03 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:03 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)) openat$random(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) pipe(&(0x7f0000000040)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000180)={0x1ff}, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) [ 791.853734][ T8708] __nla_validate_parse: 16 callbacks suppressed [ 791.853752][ T8708] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000004380)='net/route\x00') read$FUSE(r0, &(0x7f0000004400)={0x2020}, 0x2020) 04:11:03 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x8983, 0x0) [ 792.062383][ T8714] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 792.113836][ T8714] bond43 (uninitialized): Released all slaves 04:11:04 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'vcan0\x00'}) [ 792.158424][ T8721] device bridge49 entered promiscuous mode 04:11:04 executing program 2: timer_create(0x1, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x0) [ 792.208809][ T8708] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 792.234157][ T8724] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 04:11:04 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x8904, &(0x7f0000000040)={'macvtap0\x00', @ifru_hwaddr=@broadcast}) 04:11:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:04 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:04 executing program 1: r0 = fork() ptrace$setopts(0x4206, r0, 0x7f, 0x0) 04:11:04 executing program 2: pipe(&(0x7f0000000040)) pipe(&(0x7f0000000040)) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x500000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) pipe(&(0x7f0000000040)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000180)={0x1ff}, 0x0, 0x0) [ 792.535072][ T8740] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:11:04 executing program 0: getuid() setresuid(0xee00, 0xee01, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x2, 0x0) [ 792.610838][ T8740] bond43 (uninitialized): Released all slaves [ 792.656751][ T8742] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 792.743088][ T8743] device bridge50 entered promiscuous mode [ 792.776845][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 04:11:04 executing program 1: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, 0xfffffffffffffffb) [ 792.809130][ T8742] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={&(0x7f0000000400), 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x18c, 0x2, 0x1, 0x301, 0x0, 0x0, {0xc}, [@CTA_ZONE={0x6}, @CTA_STATUS={0x8}, @CTA_STATUS={0x8}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8}, @CTA_PROTOINFO_SCTP_STATE={0x5}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8}]}}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}, @CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0xffff}]}, @CTA_TUPLE_ORIG={0xb8, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x7}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x3}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @broadcast}, {0x0, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @local}}}]}, @CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}]}, @CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x28000040}, 0x440c0) 04:11:05 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:05 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, 0x0) [ 793.139921][ T8773] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 793.219511][ T8773] bond43 (uninitialized): Released all slaves [ 793.255795][ T8778] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 793.291648][ T8776] device bridge51 entered promiscuous mode [ 793.323536][ T8780] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 793.346781][ T8778] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 793.417351][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 04:11:05 executing program 1: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc1}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000280)='pkcs7_test\x00', 0x0, 0x0) keyctl$unlink(0x9, r0, 0xffffffffffffffff) syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) fork() add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc3}, 0x0, 0x0, r2) 04:11:05 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c000000020305"], 0x5c}}, 0x0) 04:11:05 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x8}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x1c}}, 0x0) [ 793.823545][ T8812] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 793.890369][ T8812] bond43 (uninitialized): Released all slaves 04:11:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000000)={'lo\x00', @ifru_hwaddr=@remote}) [ 793.959173][ T8816] device bridge52 entered promiscuous mode 04:11:05 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='mpol=prefer=']) 04:11:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000001f80)={&(0x7f0000000600)={0x10, 0x0, 0xf00}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x14}, 0x33fe0}}, 0x0) 04:11:06 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x5, 0x0, &(0x7f0000000100)) [ 794.250524][ T8831] tmpfs: Bad value for 'mpol' [ 794.297659][ T8831] tmpfs: Bad value for 'mpol' 04:11:06 executing program 2: syz_open_dev$evdev(&(0x7f0000001cc0), 0x2, 0x101100) [ 794.327292][ T8836] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 794.394297][ T8836] bond43 (uninitialized): Released all slaves 04:11:06 executing program 1: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "732ed14f646eb1886abad62c037f0fb86633e7c6e33ef6d1b92da9611c63cf5fbadd85a2da3efcfe643304ba290aa7a208c5888ad388107c06fe8169ceda8bec"}, 0x48, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r0) [ 794.460064][ T8838] device bridge53 entered promiscuous mode 04:11:06 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:06 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x894c, 0x0) 04:11:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:06 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x89b1, &(0x7f0000000040)={'macvtap0\x00', @ifru_hwaddr=@broadcast}) 04:11:06 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='mpol=prefer']) 04:11:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0xfffffffffffffffc) [ 794.840983][ T8862] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:11:06 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)) [ 794.927479][ T8862] bond43 (uninitialized): Released all slaves [ 794.951494][ T8865] device bridge54 entered promiscuous mode 04:11:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:07 executing program 0: sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x41}, 0x0) 04:11:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r0, 0x0, &(0x7f0000000480)) 04:11:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x13, 0x0, &(0x7f0000000100)) 04:11:07 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) [ 795.340628][ T8885] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 795.395794][ T8885] bond43 (uninitialized): Released all slaves 04:11:07 executing program 0: r0 = socket(0x11, 0x3, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="435621ff01d7"}, 0x14) [ 795.443730][ T8887] device bridge55 entered promiscuous mode 04:11:07 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r1, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:07 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8992, &(0x7f0000000040)={'ip6gre0\x00', @ifru_addrs=@sco={0x1f, @fixed}}) [ 795.765062][ T8902] device bridge56 entered promiscuous mode 04:11:07 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x5421, 0x0) 04:11:07 executing program 1: timer_create(0x6, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x34, 0x0, @thr={&(0x7f0000000180)="c4deb0e32e30a6fd419c6d433d7c1ee8cf9fcaf94134dd7206d24979e43591f650bd4d77163330f1591950d2383fc571d02055eae2b97d7bb916bc14e0988d8f3497ff", &(0x7f0000000300)="7e90aa292e4907223479a86ef454e5b2862c8aed746178fc1f6442ea05b5c5259d0f809dbde5919ebe6d8a7c73769dbe81d627c5dd7bfc770c28be3a140db33a19d9dc36985f023d75dada377bd749c9f06606337e8e068361bbb3e318429bb38df31de73adaf34e40a2fab7aaa81dd7986709feab415ff93bc2c1cee5ef22f69a3bbb9ebb89e8bcf9c0042a8f74ceef593c1904df54778d13e1acc237ea5fb5b703f55f70eb2419692af1ec3436f210043b24c1313ea7d806791ed53b84e7de843f"}}, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x4) timer_create(0x7, &(0x7f00000005c0)={0x0, 0x1e, 0x2}, &(0x7f0000000600)=0x0) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000680)={{}, {r1, r2+60000000}}, &(0x7f00000006c0)) timer_delete(r0) clone3(&(0x7f0000002e80)={0x6c104000, &(0x7f0000001d00), &(0x7f0000001d40), &(0x7f0000001d80), {0x20}, &(0x7f0000001dc0)=""/4096, 0x1000, &(0x7f0000002dc0)=""/84, &(0x7f0000002e40)=[0x0, 0x0], 0x2}, 0x58) 04:11:08 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x11}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:08 executing program 2: migrate_pages(0x0, 0x7, &(0x7f0000000000)=0x8, &(0x7f0000000040)=0x10001) 04:11:08 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r1, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000), 0x4) [ 796.241832][ T8926] device bridge56 entered promiscuous mode 04:11:08 executing program 2: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000000), 0xfffffe21) 04:11:08 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x40305839, 0x0) 04:11:08 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r1, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8912, &(0x7f0000000000)={'bond_slave_1\x00', @ifru_hwaddr=@remote}) 04:11:08 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x60}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:08 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) [ 796.711529][ T8965] device bridge56 entered promiscuous mode 04:11:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x2e, 0x0, &(0x7f0000000100)) [ 796.884944][ T8971] __nla_validate_parse: 22 callbacks suppressed [ 796.884961][ T8971] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x3, 0x0, &(0x7f0000000100)) 04:11:09 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/100) 04:11:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:09 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xf0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x3c, 0x2, 0x2, 0x301, 0x0, 0x0, {}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8}]}}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private2}]}]}, 0x3c}}, 0x0) [ 797.336499][ T9013] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 797.349391][ T9005] device bridge56 entered promiscuous mode 04:11:09 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x891d, &(0x7f0000000000)={'lo\x00', @ifru_hwaddr=@broadcast}) [ 797.429840][ T9010] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x80108906, 0x0) 04:11:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0xf, 0x0, 0x0) [ 797.545441][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 797.570003][ T9010] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:09 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x300}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:09 executing program 0: timer_settime(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000002e80)={0x6c104000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 04:11:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r1, 0xb27}, 0x14}}, 0x0) 04:11:09 executing program 1: socket(0x2, 0x1, 0x3) [ 797.867456][ T9031] device bridge56 entered promiscuous mode [ 797.968538][ T9035] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 798.062774][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 798.117981][ T9035] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:10 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x500}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:10 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) shutdown(r0, 0x0) 04:11:10 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='mpol=prefer=relative:']) 04:11:10 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) [ 798.484469][ T9076] device bridge56 entered promiscuous mode [ 798.516115][ T9082] tmpfs: Bad value for 'mpol' [ 798.547022][ T9082] tmpfs: Bad value for 'mpol' 04:11:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x2c, 0x0, &(0x7f0000000100)) 04:11:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)={0x14, r1, 0x1}, 0x14}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) [ 798.699403][ T9078] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:10 executing program 0: process_vm_writev(0x0, &(0x7f0000001500)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, &(0x7f0000002980)=[{&(0x7f0000001540)=""/43, 0x2b}, {0x0}], 0x2, 0x0) [ 798.817352][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 04:11:10 executing program 1: mq_open(&(0x7f00000000c0)='..', 0x0, 0x0, 0x0) 04:11:10 executing program 2: timer_create(0x7, 0x0, &(0x7f0000000600)) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000680)={{}, {0x0, r0+60000000}}, &(0x7f00000006c0)) 04:11:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:11 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x600}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:11 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x5421, &(0x7f0000000040)={'macvtap0\x00', @ifru_hwaddr=@broadcast}) 04:11:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x10, &(0x7f0000000100)={@empty, @dev}, 0xc) [ 799.192825][ T9113] device bridge56 entered promiscuous mode 04:11:11 executing program 0: clone3(&(0x7f0000001500)={0x1140a4300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 04:11:11 executing program 2: r0 = gettid() r1 = gettid() kcmp$KCMP_EPOLL_TFD(r0, r1, 0x5, 0xffffffffffffffff, 0x0) [ 799.315020][ T9114] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:11 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x5f3) 04:11:11 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x8941, 0x0) 04:11:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2c}}, 0x0) 04:11:11 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x700}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) [ 799.687348][ T9139] device bridge56 entered promiscuous mode 04:11:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r1, 0x54d6d007ac1b82dd}, 0x14}}, 0x0) 04:11:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8942, &(0x7f0000000000)={'lo\x00', @ifru_hwaddr=@remote}) 04:11:11 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x8980, 0x0) 04:11:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x18c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x174, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18c}}, 0x0) 04:11:12 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') read$FUSE(r0, 0x0, 0x0) 04:11:12 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x900}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:12 executing program 2: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000380)={{0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee00}}) 04:11:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$netlink(r0, 0x0, &(0x7f00000001c0)) [ 800.229951][ T9168] device bridge56 entered promiscuous mode 04:11:12 executing program 1: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 04:11:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:12 executing program 2: syz_open_dev$evdev(&(0x7f0000001cc0), 0x0, 0x101100) 04:11:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000000)={'lo\x00', @ifru_hwaddr=@remote}) 04:11:12 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xa00}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xa0a40) ioctl$SG_GET_SG_TABLESIZE(r0, 0x5450, 0x0) [ 800.631634][ T9190] device bridge56 entered promiscuous mode 04:11:12 executing program 2: timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)) timer_gettime(0x0, &(0x7f00000004c0)) 04:11:12 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='attr/current\x00') read$FUSE(r0, &(0x7f00000030c0)={0x2020}, 0x2020) 04:11:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:12 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x80108906, 0x0) 04:11:12 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xb00}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:12 executing program 2: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd']) 04:11:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x5, 0x0, &(0x7f0000000100)=0x7) [ 801.115479][ T9215] device bridge56 entered promiscuous mode 04:11:13 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xe, 0x11, r0, 0x10000000) [ 801.158012][ T9221] fuse: Bad value for 'fd' [ 801.176367][ T9221] fuse: Bad value for 'fd' 04:11:13 executing program 2: clone3(&(0x7f0000002e80)={0x6c104000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 04:11:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:13 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xc00}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000040)={&(0x7f0000000080), 0xfffffffffffffef4, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYRESHEX], 0x48}}, 0x0) 04:11:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000001f80)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0xfffffff0}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x14}, 0x33fe0}}, 0x0) [ 801.569638][ T9239] device bridge56 entered promiscuous mode 04:11:13 executing program 0: add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) 04:11:13 executing program 1: timer_create(0x0, 0x0, &(0x7f0000000140)) timer_create(0x0, 0x0, &(0x7f0000000600)=0x0) timer_delete(r0) timer_delete(0x0) 04:11:13 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe00}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:13 executing program 0: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=']) [ 801.991815][ T9281] __nla_validate_parse: 19 callbacks suppressed [ 801.991834][ T9281] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 04:11:14 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000240)={0x9}, 0x0) [ 802.089250][ T9282] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 802.109809][ T9286] fuse: Bad value for 'fd' [ 802.141298][ T9286] fuse: Bad value for 'fd' [ 802.161631][ T9283] device bridge56 entered promiscuous mode 04:11:14 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, @sco={0x1f, @none}, @ethernet={0x0, @broadcast}, @nl}) [ 802.299572][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 802.327349][ T9282] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:15 executing program 2: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000018c0), 0x30000, 0x0) 04:11:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000063c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x30}, 0x0) 04:11:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:15 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xf00}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:15 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000680)={{}, {r0, r1+60000000}}, 0x0) timer_delete(0x0) [ 803.397250][ T9309] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 04:11:15 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000007d00), 0x0, 0x0) [ 803.447551][ T9311] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a40), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) 04:11:15 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) [ 803.541849][ T9309] device bridge56 entered promiscuous mode 04:11:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x5, 0x0, 0x0) [ 803.668765][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 803.727472][ T9311] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:15 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1100}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000001f80)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x33fcc}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x14}, 0x33fe0}}, 0x0) 04:11:15 executing program 2: r0 = io_uring_setup(0x3453, &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x8000000) 04:11:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x19, 0x0, &(0x7f0000000100)) [ 804.054939][ T9337] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getsockname$netlink(r0, 0x0, &(0x7f00000004c0)) 04:11:16 executing program 1: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) [ 804.145101][ T9340] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 804.180645][ T9346] device bridge56 entered promiscuous mode 04:11:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x31, &(0x7f0000000100)={@empty, @dev}, 0xc) 04:11:16 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x5865}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000063c0)={0x0, 0x0, 0x0}, 0x0) 04:11:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc) 04:11:16 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000680)={{}, {0x0, r0+60000000}}, 0x0) timer_delete(0x0) 04:11:16 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6000}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) [ 804.664236][ T9368] device bridge56 entered promiscuous mode 04:11:16 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'gretap0\x00', {0x10001}}) 04:11:16 executing program 1: syz_open_procfs(0x0, &(0x7f0000000080)='environ\x00') sched_setattr(0x0, &(0x7f0000000000)={0x8b}, 0x0) 04:11:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:16 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, 0x0) 04:11:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000300)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x20}}, 0x0) 04:11:17 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6558}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffd, 0x81000000}}, 0x0) 04:11:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x3b, 0x0, &(0x7f0000000100)) [ 805.185317][ T9392] device bridge56 entered promiscuous mode 04:11:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000063c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}, 0x0) 04:11:17 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x2, &(0x7f0000000040)={'macvtap0\x00', @ifru_hwaddr=@broadcast}) 04:11:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0xf, 0x0, &(0x7f0000000100)) 04:11:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:17 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8100}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:17 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}}) 04:11:17 executing program 1: timer_create(0x0, 0x0, &(0x7f0000000440)) timer_gettime(0x0, &(0x7f0000000480)) [ 805.685470][ T9420] device bridge56 entered promiscuous mode [ 805.728916][ T9424] fuse: Invalid rootmode 04:11:17 executing program 0: pipe(&(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)) pipe(&(0x7f0000000040)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000180)={0x1ff}, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) 04:11:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000023c0)='projid_map\x00') write$FUSE_ENTRY(r0, 0x0, 0x0) 04:11:17 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000003c0)) 04:11:17 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xf000}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c00010062"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:18 executing program 2: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000040)) pipe(&(0x7f0000000040)) pipe(&(0x7f0000000040)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000180)={0x1ff}, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) 04:11:18 executing program 0: clone3(&(0x7f0000002e80)={0x6c104000, 0x0, 0x0, 0x0, {}, &(0x7f0000001dc0)=""/4096, 0x1000, 0x0, 0x0}, 0x58) 04:11:18 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) write$cgroup_devices(r0, 0x0, 0x0) [ 806.275477][ T9450] device bridge56 entered promiscuous mode 04:11:18 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c00010062"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:18 executing program 2: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=ANY=[]) 04:11:18 executing program 1: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "732ed14f646eb1886abad62c037f0fb86633e7c6e33ef6d1b92da9611c63cf5fbadd85a2da3efcfe643304ba290aa7a208c5888ad388107c06fe8169ceda8bec"}, 0x48, 0x0) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) keyctl$unlink(0x9, r0, 0xffffffffffffffff) syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) fork() add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc3}, &(0x7f00000004c0)={0x0, "9d96a4d9ecfe5e4f412afcc05380ec0f903c8feb06c8f2a2277490e18228d0012cbe872f5ec48c5b2b8e7dd1f7e4bbc7a36b3a87cfb17460fd798b42d3370616"}, 0x48, r1) 04:11:18 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8970, &(0x7f0000000040)={'vcan0\x00', @ifru_addrs=@qipcrtr}) [ 806.911970][ T9500] device bridge56 entered promiscuous mode 04:11:18 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockname(r0, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4}}}, &(0x7f0000000440)=0x87) getsockname(r1, 0x0, 0x0) [ 807.042213][ T9506] __nla_validate_parse: 23 callbacks suppressed [ 807.042231][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 807.107923][ T9511] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:19 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x5451, 0x0) 04:11:19 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='mpol=prefer=relative:-']) [ 807.202432][ T9517] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c00010062"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) [ 807.396278][ T9531] tmpfs: Bad value for 'mpol' [ 807.428430][ T9531] tmpfs: Bad value for 'mpol' [ 807.469651][ T9537] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 807.553162][ T9543] device bridge56 entered promiscuous mode [ 807.677634][ T9549] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 808.278393][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.284760][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 04:11:24 executing program 0: clone3(&(0x7f00000008c0)={0x8080000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000880)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 04:11:24 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:24 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x5452, 0x0) 04:11:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000700)={0xfffffffffffffffe, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 04:11:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:25 executing program 0: socketpair(0x1d, 0x0, 0x1, &(0x7f0000000200)) [ 813.146778][ T9597] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:25 executing program 2: process_vm_writev(0x0, &(0x7f0000001500)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, &(0x7f0000002980)=[{0x0}, {0x0}], 0x2, 0x0) 04:11:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x5451, 0x0) [ 813.244560][ T9615] device bridge56 entered promiscuous mode [ 813.301744][ T9615] bond43: (slave bridge56): Enslaving as an active interface with an up link [ 813.368835][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 04:11:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x3, 0x0, 0x0) [ 813.412187][ T9634] device bond43 entered promiscuous mode [ 813.447771][ T9621] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000002980)={0x2, 0x4e23, @private}, 0x10, 0x0, 0x0, &(0x7f0000004100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x18}, 0x0) 04:11:25 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x40049409, 0x0) 04:11:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00') read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 04:11:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x14, 0x8, 0x1, 0x301}, 0x14}}, 0x0) [ 813.765466][ T9658] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x3c, 0x0, &(0x7f0000000100)) 04:11:25 executing program 0: r0 = socket(0x2, 0x1, 0x0) recvmmsg$unix(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 04:11:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x11, 0x0, &(0x7f0000000100)) [ 814.003674][ T9660] device bridge57 entered promiscuous mode 04:11:26 executing program 2: syz_open_dev$evdev(&(0x7f0000000440), 0x0, 0x40000) [ 814.104185][ T9660] bond44: (slave bridge57): Enslaving as an active interface with an up link [ 814.167087][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 814.191430][ T9666] device bond44 entered promiscuous mode [ 814.219708][ T9658] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:26 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x8904, 0x0) 04:11:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) 04:11:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:26 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:26 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x5450, 0x0) [ 814.488609][ T9717] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:26 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 04:11:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000001f80)={&(0x7f0000000600)={0x10, 0x700}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x14}, 0x33fe0}}, 0x0) [ 814.722911][ T9726] device bridge58 entered promiscuous mode [ 814.786079][ T9726] bond45: (slave bridge58): Enslaving as an active interface with an up link 04:11:26 executing program 2: r0 = syz_io_uring_setup(0x111c, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x13, r0, 0x0) [ 814.842601][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 814.871338][ T9746] device bond45 entered promiscuous mode 04:11:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffd}, 0x300}, 0x0) 04:11:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f00000024c0)={&(0x7f0000000000)=@in={0x2, 0x4e24}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x10, 0x84}], 0x10}, 0x0) [ 814.894758][ T9717] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:27 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={'lo\x00', @ifru_hwaddr=@remote}) 04:11:27 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x6d94, &(0x7f0000000080)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) 04:11:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080), 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040), 0x4) [ 815.204516][ T9778] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 815.459141][ T9783] device bridge59 entered promiscuous mode 04:11:27 executing program 2: r0 = gettid() tkill(r0, 0x100) 04:11:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x15, &(0x7f0000000100)={@empty, @dev}, 0xc) [ 815.535034][ T9783] bond46: (slave bridge59): Enslaving as an active interface with an up link 04:11:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'vcan0\x00', {0x9}, 0x9}) set_tid_address(&(0x7f0000000040)) setsockopt$inet_mreqn(r0, 0x88, 0x0, 0x0, 0x0) recvfrom(r0, &(0x7f0000000080)=""/251, 0xfb, 0x0, &(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x1, {{0x43, 0x2}}}, 0x80) [ 815.583642][ T9789] device bond46 entered promiscuous mode 04:11:27 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:27 executing program 2: syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x121a01) 04:11:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x88, 0x0, 0x0, 0x0) 04:11:28 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x4020940d, 0x0) [ 816.048477][ T9866] device bridge60 entered promiscuous mode 04:11:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x8, 0x0, &(0x7f0000000100)) [ 816.113231][ T9866] bond47: (slave bridge60): Enslaving as an active interface with an up link [ 816.164355][ T9844] device bond47 entered promiscuous mode 04:11:28 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x891d, &(0x7f0000000000)={'lo\x00', @ifru_hwaddr=@remote}) 04:11:28 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x5452, &(0x7f0000000040)={'macvtap0\x00', @ifru_hwaddr=@broadcast}) 04:11:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) [ 816.620252][ T9927] device bridge61 entered promiscuous mode [ 816.658015][ T9927] bond48: (slave bridge61): Enslaving as an active interface with an up link [ 816.684175][ T9941] device bond48 entered promiscuous mode 04:11:28 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='environ\x00') read$char_usb(r0, &(0x7f00000000c0)=""/248, 0xf8) 04:11:28 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'vcan0\x00', {}, 0x9}) 04:11:28 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x24, 0x0, &(0x7f0000000100)) [ 817.008335][ T9959] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:11:29 executing program 0: clone3(&(0x7f00000008c0)={0x8080000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 04:11:29 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) 04:11:29 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x40049409, 0x0) [ 817.206341][ T9963] device bridge62 entered promiscuous mode [ 817.264920][ T9963] bond49: (slave bridge62): Enslaving as an active interface with an up link [ 817.316669][ T9979] device bond49 entered promiscuous mode 04:11:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8930, &(0x7f0000000000)={'lo\x00', @ifru_hwaddr=@remote}) 04:11:29 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, 0x0) 04:11:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000002500)=0x5, 0x4) 04:11:29 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) [ 817.615385][T10019] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 817.717206][T10024] device bridge63 entered promiscuous mode 04:11:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) 04:11:29 executing program 1: clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0], 0x1}, 0x58) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) 04:11:29 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) fdatasync(r0) [ 817.799747][T10024] bond50: (slave bridge63): Enslaving as an active interface with an up link [ 817.893616][T10019] device bond50 entered promiscuous mode 04:11:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:30 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:30 executing program 0: pipe2(&(0x7f0000002c00), 0x0) 04:11:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000001f80)={&(0x7f0000000600)={0x10, 0xf0}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x14}, 0x33fe0}}, 0x0) [ 818.163560][T10080] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:11:30 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x5421, &(0x7f0000000040)={'macvtap0\x00', @ifru_hwaddr=@broadcast}) sendmsg$can_bcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 04:11:30 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x11, 0xd, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 818.333122][T10085] device bridge64 entered promiscuous mode [ 818.427509][T10085] bond51: (slave bridge64): Enslaving as an active interface with an up link 04:11:30 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x8901, 0x0) 04:11:30 executing program 0: ioctl$FIONREAD(0xffffffffffffffff, 0x4004667f, 0x0) [ 818.478295][T10086] __nla_validate_parse: 16 callbacks suppressed [ 818.478313][T10086] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 818.590255][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 818.617682][T10105] device bond51 entered promiscuous mode 04:11:30 executing program 2: pipe2(&(0x7f0000002c00), 0x1000000) fork() [ 818.651112][T10086] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:30 executing program 0: shmget(0x0, 0x4000, 0x305, &(0x7f0000ffc000/0x4000)=nil) 04:11:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:30 executing program 1: socket$inet6(0x18, 0x0, 0x59) 04:11:30 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:30 executing program 2: setsockopt$sock_linger(0xffffffffffffffff, 0xffff, 0x80, 0x0, 0x0) 04:11:30 executing program 0: r0 = socket$inet6(0x18, 0x1, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000040), 0x8) [ 818.923079][T10145] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:11:31 executing program 1: sendmsg$unix(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, 0x0}, 0x0) [ 819.068742][T10150] device bridge65 entered promiscuous mode 04:11:31 executing program 2: r0 = socket$inet6(0x18, 0x1, 0x0) getsockname$inet6(r0, &(0x7f0000000240), &(0x7f0000000280)=0xc) [ 819.112462][T10150] bond52: (slave bridge65): Enslaving as an active interface with an up link [ 819.124972][T10149] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 819.188857][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 819.208541][T10145] device bond52 entered promiscuous mode 04:11:31 executing program 0: fchownat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff, 0x600) [ 819.233362][T10149] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:31 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:11:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:31 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:31 executing program 1: r0 = socket$inet6(0x18, 0x1, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000040)={0x18000}, 0x8) 04:11:31 executing program 0: recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000002c00), 0x0) 04:11:31 executing program 1: r0 = socket$inet6(0x18, 0x1, 0x0) dup2(r0, 0xffffffffffffffff) [ 819.520159][T10214] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 819.594263][T10215] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:11:31 executing program 0: fchownat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 819.779685][T10220] device bridge66 entered promiscuous mode 04:11:31 executing program 1: r0 = socket$inet6(0x18, 0x1, 0x0) accept(r0, 0x0, 0x0) [ 819.846797][T10220] bond53: (slave bridge66): Enslaving as an active interface with an up link [ 819.893950][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 819.919826][T10242] device bond53 entered promiscuous mode [ 819.949801][T10214] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:31 executing program 0: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(&(0x7f0000002c00), 0x0) 04:11:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:32 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:32 executing program 1: r0 = socket$inet6(0x18, 0x1, 0x0) getsockname$inet6(r0, &(0x7f0000000240), 0x0) [ 820.185250][T10270] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 820.291656][T10274] device bridge67 entered promiscuous mode [ 820.303186][T10274] bond54: (slave bridge67): Enslaving as an active interface with an up link [ 820.313403][T10273] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, 0x4, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x883e}]}, 0x30}}, 0x0) 04:11:32 executing program 0: faccessat(0xffffffffffffffff, &(0x7f0000000300)='\x00', 0x0) 04:11:32 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000001240), 0x6, 0x0) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) [ 820.458085][T10270] device bond54 entered promiscuous mode 04:11:32 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000003800)=ANY=[@ANYBLOB="1c000000011401"], 0x1c}}, 0x0) 04:11:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@newtclass={0x24, 0x2a, 0x1}, 0x24}}, 0x0) 04:11:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000280), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) [ 820.725053][T10327] device bridge68 entered promiscuous mode 04:11:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@newtclass={0x24, 0x14, 0x1, 0x0, 0x0, {0xa}}, 0x24}}, 0x0) 04:11:32 executing program 0: perf_event_open$cgroup(&(0x7f00000005c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xd) 04:11:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x10060) 04:11:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:32 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x11}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2}, 0xc, &(0x7f0000000280)={0x0, 0x34}}, 0x0) [ 821.141591][T10353] device bridge68 entered promiscuous mode 04:11:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_newroute={0x10, 0x18, 0x1}, 0x1c}}, 0x0) 04:11:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x1, 0x6, 0x3}, 0x14}}, 0x0) 04:11:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:33 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x60}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_newroute={0xf}, 0x1c}}, 0x0) 04:11:33 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000001c0)=""/161, 0x1a, 0xa1, 0x1}, 0x20) 04:11:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000210600000c"], 0x34}}, 0x0) [ 821.637570][T10379] device bridge68 entered promiscuous mode 04:11:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000680)={0x4dc, 0x0, &(0x7f0000000080)="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"}) 04:11:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002800010000100000000000000000000024"], 0x24}}, 0x0) 04:11:33 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xf0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000003800)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0xc}]}, 0x1c}}, 0x0) 04:11:33 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000026c0)) 04:11:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) write$6lowpan_control(r0, 0x0, 0x0) [ 822.038871][T10406] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:11:34 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x300}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) [ 822.081675][T10406] bond55 (uninitialized): Released all slaves 04:11:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000003800)={0x14, 0x1, 0x4, 0x201}, 0x14}}, 0x0) recvmsg(r0, &(0x7f0000001600)={0x0, 0x5, 0x0}, 0x2062) [ 822.148204][T10412] device bridge68 entered promiscuous mode 04:11:34 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:11:34 executing program 0: syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) 04:11:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) [ 822.399999][T10430] binder: 10421:10430 ioctl c0306201 0 returned -14 04:11:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x2}, 0x0) 04:11:34 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x500}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) [ 822.451938][T10430] binder: 10421:10430 ioctl c0306201 0 returned -14 04:11:34 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x200, 0x2) write$midi(r0, 0x0, 0x0) [ 822.517428][T10434] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:11:34 executing program 2: socketpair(0xf, 0x80000, 0x0, &(0x7f0000000100)) [ 822.560474][T10434] bond55 (uninitialized): Released all slaves [ 822.618694][T10437] device bridge68 entered promiscuous mode 04:11:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES32], 0x38}}, 0x0) recvmsg(r0, &(0x7f0000000740)={&(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, 0x0, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x40) 04:11:34 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r0, 0x1}, 0x14}}, 0x0) 04:11:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:34 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x600}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:34 executing program 0: syz_open_dev$mouse(&(0x7f0000000080), 0xffffffffffffffff, 0x0) 04:11:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000106010200000000000000000100000305004100070000000584"], 0x3c}}, 0x0) [ 823.017928][T10463] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:11:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x7, 0x101}, 0x14}}, 0x0) [ 823.063262][T10463] bond55 (uninitialized): Released all slaves [ 823.129429][T10463] device bridge68 entered promiscuous mode 04:11:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x18, 0x1, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x4}]}, 0x18}}, 0x0) 04:11:35 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 04:11:35 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x700}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:35 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x8, 0x0, &(0x7f0000000440)=[@exit_looper, @enter_looper], 0x0, 0x0, 0x0}) 04:11:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 04:11:35 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000080), 0xc79, 0x0) read$rfkill(r0, 0x0, 0x0) [ 823.536567][T10489] __nla_validate_parse: 28 callbacks suppressed [ 823.536589][T10489] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000003800)=ANY=[@ANYBLOB="14000000010401"], 0x14}}, 0x0) recvmsg(r0, &(0x7f0000001600)={&(0x7f0000000080)=@nfc_llcp, 0x82, 0x0, 0x0, &(0x7f0000000100)=""/219, 0xdb}, 0x0) [ 823.667884][T10490] device bridge68 entered promiscuous mode [ 823.760983][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 823.791343][T10489] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 04:11:35 executing program 0: socketpair(0x25, 0x1, 0x40000000, &(0x7f0000000000)) 04:11:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:35 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x900}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 04:11:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) 04:11:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x1, 0x301}, 0x14}}, 0x4000000) [ 824.111006][T10513] device bridge68 entered promiscuous mode [ 824.218336][T10520] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 824.242622][T10521] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001540)={0x34, 0x0, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) 04:11:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 824.350716][T10524] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1, 0x9, 0x201, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x4}]}, 0x18}}, 0x0) 04:11:36 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xa00}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="a800ff"], 0xa8}}, 0x0) 04:11:36 executing program 2: r0 = socket(0x28, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) [ 824.650976][T10542] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@newtclass={0x24, 0x14, 0x1, 0x0, 0x0, {0x2}}, 0x24}}, 0x0) 04:11:36 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000001b00)) [ 824.768081][T10543] device bridge68 entered promiscuous mode 04:11:36 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x80247009, &(0x7f00000001c0)) [ 824.868730][T10548] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 824.903054][T10542] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 824.985421][T10559] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 04:11:37 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xb00}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:37 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x1b, 0x0, 0x7ff}}) 04:11:37 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000021c0), 0x10) sendmsg$can_bcm(r0, &(0x7f00000015c0)={&(0x7f00000014c0), 0x10, &(0x7f0000001580)={&(0x7f0000001500)=ANY=[@ANYBLOB="05000000020400000104000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000a001"], 0x48}}, 0x0) 04:11:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 04:11:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x0) [ 825.313154][T10572] device bridge68 entered promiscuous mode 04:11:37 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="80"}) 04:11:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000000000)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) 04:11:37 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xc00}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) [ 825.652494][T10591] binder: 10590:10591 ioctl c0306201 0 returned -14 [ 825.786001][T10594] device bridge68 entered promiscuous mode 04:11:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0x3e0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000210600000c00030000000000000000000c002280080003000200000008080300", @ANYBLOB], 0x34}}, 0x0) 04:11:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:38 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xe00}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 04:11:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xa8}}, 0x0) [ 826.257303][T10614] device bridge68 entered promiscuous mode 04:11:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000480)=[@increfs], 0x0, 0x0, 0x0}) 04:11:38 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xf00}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) [ 826.482649][T10591] binder: 10590:10591 ioctl c0306201 0 returned -14 04:11:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:38 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x282000, 0x0) 04:11:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x1, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_QUEUE_NUM={0x8}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @dev}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 826.636795][T10635] device bridge68 entered promiscuous mode 04:11:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0}) [ 826.727790][T10643] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:11:38 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 04:11:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000210600000c0003"], 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) 04:11:38 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x1100}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_newroute={0x1c}, 0x2000005c}}, 0x0) [ 827.001412][T10655] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 827.062679][T10660] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 827.092979][T10658] device bridge68 entered promiscuous mode 04:11:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x1, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @dev}}}]}]}, 0x44}}, 0x0) 04:11:39 executing program 0: syz_init_net_socket$llc(0x1a, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) 04:11:39 executing program 2: syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff) [ 827.302679][T10676] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:11:39 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x5865}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:39 executing program 1: openat$rfkill(0xffffffffffffff9c, 0xfffffffffffffffd, 0x0, 0x0) 04:11:39 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 04:11:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000001600)={&(0x7f0000000080)=@nfc_llcp, 0xffffffffffffffd1, 0x0, 0x0, &(0x7f0000000100)=""/207, 0xd9}, 0x0) 04:11:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070000", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:39 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f00000001c0)) 04:11:39 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x6000}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:39 executing program 0: read$midi(0xffffffffffffffff, 0x0, 0x0) 04:11:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000002280)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x504, 0x8, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @empty}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fcde0ba2969b7fa9f55f5d8fb37432270845b811120aef5cb7e9ccd6d861f47d"}]}, {0x108, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x104, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}]}, {0x348, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x2d4, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c31d63abc3c59d3054461ebf9f9e789a99a3cada83eb5e2c6c6a18109273ca77"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @loopback}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PEERS={0x18, 0x8, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_PEERS={0x968, 0x8, 0x0, 0x1, [{0x7c4, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast2}}, @WGPEER_A_ALLOWEDIPS={0x3c8, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x388, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, {0x148, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x10c, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7d47bd4d, @mcast2}}, @WGPEER_A_FLAGS={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3bf73db35ad08ceb3377b3aaa7b38808ef7d8fe4457c474ec05e49360306bf7c"}]}]}]}, 0xec4}}, 0x0) [ 827.773258][T10697] device bridge68 entered promiscuous mode 04:11:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@newtclass={0x24, 0x28, 0x1}, 0x24}}, 0x0) recvmmsg(r0, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)=""/24, 0x18}], 0x1}}], 0x1, 0x0, 0x0) 04:11:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000106010200000000000000000100000305004100070000000584c469c029b1"], 0x3c}}, 0x0) 04:11:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x122, &(0x7f0000005f00)) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@newtclass={0x24, 0x28, 0x1}, 0x24}}, 0x0) 04:11:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff0300", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:40 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x6558}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:40 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000001240), 0x0, 0x0) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x0) 04:11:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xf}}, 0x1c}}, 0x0) 04:11:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@newtclass={0x24}, 0x24}, 0x300}, 0x0) [ 828.281589][T10726] device bridge68 entered promiscuous mode 04:11:40 executing program 1: syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x24680) 04:11:40 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0xc3d, 0xec240) 04:11:40 executing program 2: syz_open_dev$admmidi(&(0x7f0000000000), 0x200, 0x0) 04:11:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff0300", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:40 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x8100}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40406301}], 0x0, 0x0, 0x0}) 04:11:40 executing program 0: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x4080, 0x0) 04:11:40 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40486311}], 0x0, 0x0, 0x0}) [ 828.779252][T10753] __nla_validate_parse: 28 callbacks suppressed [ 828.779271][T10753] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 828.918300][T10754] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 828.965829][T10757] device bridge68 entered promiscuous mode 04:11:40 executing program 1: request_key(&(0x7f0000000080)='big_key\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)='keyring\x00', 0x0) 04:11:41 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0}) [ 829.067788][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 829.097763][T10753] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:41 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000000c0)={0x0, 0x0, 0x14}) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) 04:11:41 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xf000}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff0300", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={0x0}, 0x300}, 0x0) 04:11:41 executing program 2: recvmsg(0xffffffffffffffff, 0x0, 0xb9355dceac381d34) [ 829.381344][T10782] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:41 executing program 0: syz_open_dev$mouse(&(0x7f00000000c0), 0x9, 0x42001) [ 829.515529][T10783] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 829.559683][T10790] device bridge68 entered promiscuous mode 04:11:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000003800)={0x14, 0x1, 0x4, 0x201}, 0x14}}, 0x0) [ 829.657565][T10793] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 04:11:41 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000180)=[@dead_binder_done], 0x0, 0x0, 0x0}) 04:11:41 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000106010200000000000000000100000305004100070000000584c469c029b108c60001000700000005000100070000000500010007000000f61ba60d99c5bfccfdc860bae87b8629298ea87c796dd1e8818f971818dfa7ee9c6d217a8da266d968b4cb012360daba23b8d20c372c67f4f34ddb2eec222da3312de01867b7157deb48ecaa31e7"], 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x8000) [ 829.707234][T10782] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff0300000000", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:41 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:41 executing program 1: add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x10, 0x0) 04:11:41 executing program 0: openat$rtc(0xffffffffffffff9c, 0x0, 0x7f2080, 0x0) [ 829.880338][T10808] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 829.954722][T10810] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 830.013418][T10812] device bridge68 entered promiscuous mode 04:11:42 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x81000000}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000026c0)) 04:11:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000055007b0827bd7000fb", @ANYRES32], 0x38}}, 0x0) 04:11:42 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) 04:11:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff0300000000", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:42 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x3}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:11:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 04:11:42 executing program 2: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) [ 830.444406][T10840] device bridge68 entered promiscuous mode [ 830.519671][T10851] binder: 10844:10851 ioctl c0306201 20000200 returned -14 [ 830.599391][T10857] binder: 10850:10857 ioctl c0306201 0 returned -14 04:11:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='#'], 0x0, 0x0, 0x0}) 04:11:42 executing program 2: socketpair(0x1f, 0x0, 0x0, &(0x7f0000000180)) [ 830.645339][T10859] binder: 10850:10859 ioctl c0306201 0 returned -14 04:11:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff0300000000", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:42 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x7}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) [ 830.692334][T10857] binder: 10850:10857 ioctl c0306201 0 returned -14 [ 830.692334][T10859] binder: 10850:10859 ioctl c0306201 0 returned -14 04:11:42 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000080), 0xc79, 0x101000) read$rfkill(r0, 0x0, 0x0) [ 830.795733][T10866] binder: 10863:10866 unknown command 35 [ 830.827728][T10866] binder: 10863:10866 ioctl c0306201 20000200 returned -22 04:11:42 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f00000001c0)) [ 830.871404][T10869] device bridge68 entered promiscuous mode 04:11:42 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0) 04:11:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000040801"], 0x2c}}, 0x0) 04:11:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff030000000000", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={0x0}, 0x1, 0x0, 0x60}, 0x0) 04:11:43 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x18}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000004080101000000000000000003000000060002"], 0x2c}}, 0x0) 04:11:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0) [ 831.281640][T10890] device bridge68 entered promiscuous mode 04:11:43 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 831.418001][T10904] binder: 10898:10904 ioctl c0046209 0 returned -22 04:11:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000003800)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x8}]}, 0x1c}}, 0x0) 04:11:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff030000000000", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:43 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x2}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:43 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x2, &(0x7f00000001c0)) 04:11:43 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x124c}, 0x40) [ 831.635780][T10911] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 04:11:43 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000055007b0827bd7000fbdbdf2507000000", @ANYRES32=r2], 0x38}}, 0x0) 04:11:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000300), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000017c0)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002c80)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000f40)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001240)) [ 831.742824][T10916] device bridge68 entered promiscuous mode 04:11:43 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 04:11:43 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x3}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff030000000000", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}}, 0x0) 04:11:44 executing program 1: keyctl$restrict_keyring(0x5, 0xfffffffffffffffd, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, r0) 04:11:44 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x3, 0x0, &(0x7f0000000080)) [ 832.196723][T10943] device bridge68 entered promiscuous mode 04:11:44 executing program 0: socketpair(0x29, 0x6, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x40201) 04:11:44 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x4}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) 04:11:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:44 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) [ 832.574436][T10968] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:11:44 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x15}, 0x40) [ 832.717473][T10972] device bridge68 entered promiscuous mode [ 832.795796][T10968] device bond55 entered promiscuous mode 04:11:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_newroute={0x1c}, 0xfffffdef}}, 0x0) 04:11:44 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x7}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000080)="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"}) 04:11:44 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 04:11:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:45 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000001240), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) [ 833.051217][T11024] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:11:45 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000000)) 04:11:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@newchain={0x24, 0x64, 0x1}, 0x24}}, 0x0) 04:11:45 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x17, 0x0, 0x8ea5}) 04:11:45 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x8}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) [ 833.268414][T11028] device bridge69 entered promiscuous mode [ 833.304384][T11047] device bond56 entered promiscuous mode 04:11:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000003800)={0x14, 0x1, 0x4, 0x201}, 0x14}}, 0x0) recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) 04:11:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:45 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 04:11:45 executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000001240), 0x0, 0x0) [ 833.559935][T11083] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:11:45 executing program 1: keyctl$restrict_keyring(0x17, 0xfffffffffffffffd, 0x0, 0x0) [ 833.715653][T11089] device bridge70 entered promiscuous mode [ 833.766968][T11122] device bond57 entered promiscuous mode 04:11:45 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0xf}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x5865}, 0x0) 04:11:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="58000000000801"], 0x58}}, 0x0) 04:11:45 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x1000000, 0x0, 0x0}) 04:11:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000003800)={0x14, 0x1, 0x4, 0x201}, 0x14}}, 0x0) recvmsg(r0, &(0x7f0000001600)={&(0x7f0000000080)=@nfc_llcp, 0x80, 0x0, 0x0, &(0x7f0000001500)=""/217, 0xd9}, 0x12022) [ 834.021626][T11137] __nla_validate_parse: 41 callbacks suppressed [ 834.021645][T11137] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 834.040859][T11136] binder: 11132:11136 ioctl c0306201 20000200 returned -14 [ 834.071874][T11139] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 834.121373][T11138] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:11:46 executing program 1: syz_open_dev$vcsn(&(0x7f0000000d80), 0xde1, 0x6201) 04:11:46 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, &(0x7f00000004c0)) [ 834.320747][T11141] device bridge71 entered promiscuous mode [ 834.338059][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 04:11:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000210600000c0003"], 0x34}}, 0x0) [ 834.380678][T11147] device bond58 entered promiscuous mode [ 834.417146][T11137] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:46 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x104}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:46 executing program 1: clock_gettime(0x17d4d2214b5a8c26, 0x0) [ 834.555501][T11188] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 04:11:46 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000003800)=ANY=[@ANYBLOB="1400000001020102"], 0x14}}, 0x0) [ 834.632669][T11188] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 834.665039][T11192] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:11:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x3, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) [ 834.835709][T11195] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 834.849338][T11234] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 834.867658][T11234] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 04:11:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) [ 834.950297][T11197] device bridge72 entered promiscuous mode [ 834.976281][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 834.998182][T11221] device bond59 entered promiscuous mode [ 835.040098][T11195] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:47 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x1102) 04:11:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:47 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x300}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306207, 0x0) 04:11:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000003800)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x8}]}, 0x1c}}, 0x0) [ 835.310528][T11250] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 835.334470][T11252] binder: 11249:11252 ioctl c0306207 0 returned -22 04:11:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x0) 04:11:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_newroute={0x1c}, 0x1c}, 0x300}, 0x0) [ 835.481427][T11253] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 835.578678][T11255] device bridge73 entered promiscuous mode [ 835.601366][T11272] device bond60 entered promiscuous mode 04:11:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000000680)="74f47d24"}) 04:11:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, 0x0, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:47 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x500}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:47 executing program 1: socketpair(0x28, 0x0, 0x4, &(0x7f0000000000)) 04:11:47 executing program 0: r0 = socket(0x23, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) [ 835.843130][T11310] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 836.058867][T11314] device bridge74 entered promiscuous mode [ 836.096177][T11339] device bond61 entered promiscuous mode 04:11:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000003800)={0xf, 0x1, 0x4, 0x0, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}]}, 0x1c}}, 0x0) 04:11:48 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname(r0, 0x0, &(0x7f0000000200)) 04:11:48 executing program 0: syz_open_dev$rtc(&(0x7f0000000000), 0xffffffffffffffff, 0x0) 04:11:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, 0x0, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:48 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x600}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "5a3d1369ba078b6c74649d8889824fc4beaf3a2023ff07de840ffa9ff9d901fd", "ac3cabe6718946c4176c1bd34110fb561bc098b5a21d873760e584a04e7ced10"}}}]}, 0x268}}, 0x0) 04:11:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) [ 836.406265][T11367] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:11:48 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) [ 836.487760][T11373] device bridge75 entered promiscuous mode 04:11:48 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x30, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x50}}, 0x0) [ 836.587233][T11367] device bond62 entered promiscuous mode 04:11:48 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x700}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, 0x0, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:48 executing program 1: socketpair(0x2, 0x1, 0x5, &(0x7f0000000200)) 04:11:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0x3, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000210600000c00030000000000000000000c002280080003000200000008080300", @ANYBLOB], 0x34}}, 0x0) 04:11:48 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)) 04:11:49 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x4d4202, 0x0) [ 837.088328][T11442] device bridge76 entered promiscuous mode [ 837.110216][T11466] device bond63 entered promiscuous mode 04:11:49 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x5460, 0x0) 04:11:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:49 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x900}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000005547db"], 0x38}}, 0x0) 04:11:49 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40049409, 0x0) 04:11:49 executing program 1: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x40201) 04:11:49 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockname(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000340)=0x80) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, 0x0) [ 837.532413][T11517] device bridge77 entered promiscuous mode 04:11:49 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 837.602156][T11486] device bond64 entered promiscuous mode 04:11:49 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0xa00}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={0x0}, 0x1, 0x0, 0x6000}, 0x0) 04:11:49 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000200)=""/130, 0x0, 0x82}, 0x20) 04:11:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@newtclass={0x24}, 0x24}, 0x300}, 0x0) [ 837.904366][T11544] validate_nla: 2 callbacks suppressed [ 837.904384][T11544] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:11:50 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x41) 04:11:50 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x14, 0x15, 0x1}, 0x14}}, 0x0) [ 838.201570][T11548] device bridge78 entered promiscuous mode 04:11:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x38, 0x1, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}]}, 0x38}}, 0x0) [ 838.258849][T11554] device bond65 entered promiscuous mode 04:11:50 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0xb00}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x3, 0x4) 04:11:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) [ 838.461418][T11601] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 04:11:50 executing program 1: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r0, 0x0, 0x7ffffffff000) [ 838.508049][T11601] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 04:11:50 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)=[@request_death, @acquire_done], 0x1, 0x0, &(0x7f00000000c0)="b4"}) [ 838.559509][T11608] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:11:50 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0xc00}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000106010200000000000000000100000305"], 0x3c}}, 0x0) [ 838.797471][T11610] device bridge79 entered promiscuous mode [ 838.836194][T11625] device bond66 entered promiscuous mode 04:11:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES32], 0x38}}, 0x0) recvmsg(r0, &(0x7f0000000740)={&(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000700)=""/23, 0x17}, 0x40) 04:11:50 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x19, 0x0, 0xb2}) 04:11:50 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0xd00}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000003800)={0x1c, 0x1, 0x4, 0x0, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}]}, 0xc0}}, 0x0) 04:11:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) [ 839.172570][T11665] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:11:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x14, 0x0, 0x5, 0x101}, 0x14}}, 0x0) 04:11:51 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000055007b0827bd7000fbdbdf2507000000", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x8010) [ 839.268758][T11667] __nla_validate_parse: 23 callbacks suppressed [ 839.268777][T11667] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:51 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) [ 839.446643][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 839.480805][T11669] device bond67 entered promiscuous mode 04:11:51 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x4008630a}], 0x0, 0x0, 0x0}) 04:11:51 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000200), 0x6, 0x800002) write$tcp_mem(r0, 0x0, 0x0) [ 839.521018][T11671] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 839.559367][T11712] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 04:11:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:51 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0xe00}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x300}, 0x0) [ 839.748791][T11720] binder: BC_ATTEMPT_ACQUIRE not supported [ 839.778135][T11720] binder: 11715:11720 ioctl c0306201 20000200 returned -22 04:11:51 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x5421, &(0x7f00000001c0)) [ 839.824965][T11723] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:11:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@delchain={0xec4, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x9d8, 0x2, [@TCA_U32_SEL={0x1e4, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}}, @TCA_U32_SEL={0x34, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}]}}, @TCA_U32_DIVISOR={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x7a4, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}}, @TCA_U32_DIVISOR={0x8}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{}, {}]}}]}}, @TCA_RATE={0x6}, @filter_kind_options=@f_flow={{0x9}, {0x484, 0x2, [@TCA_FLOW_RSHIFT={0x8}, @TCA_FLOW_ACT={0x478, 0x9, 0x0, 0x1, [@m_bpf={0xc4, 0x0, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}]}, {0x91, 0x6, "3f00e2720ceb67b498eb84ed11bcae7ba83abcfa30c5962c60a0c90d0bd4d18100a7598a1fcc02602b38005906347f09f306bba015a1fca33599dc1208598528629cc5a810949e49aa074ad4e9789f899fc09b60a545caf7881b56fccbff6e7cd3d6cf4b3ad9f82f50cb33bd33360cf0574eceec51bb45af8c91f8709a7dd246ac9bbdbbb35201827505e3ff1b"}, {0xc}, {0xc}}}, @m_ctinfo={0x160, 0x0, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}]}, {0xd1, 0x6, "774c0c53e8b0b8f2765ab0bacb4526ad40cebfa3cc26cec4ae63d5a36e2e2cd0b1126ade8a5ab8833acba43636268271f346ee4411fde040904b0db14c5c70e586d89d8ac18c72a57c150e9388e40597715c1fd9a87478197bcc9bc9d4e729321fc847c47ebaa7bcb45a0b0d9a6816702478f5f332261a2f147738893ab7134e83682e7eb33bdb19a2b3689659460128d3807ce916410546a46826b3ea1e95a73cd5ed86763b7487042407fe050c048646c282961746a39f32807575a4d8648eb82732d2ed36d1b379be2e16e4"}, {0xc}, {0xc}}}, @m_nat={0x16c, 0x0, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @private}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @remote, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast1, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @remote, @multicast2}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @remote, @empty}}]}, {0x4}, {0xc}, {0xc}}}, @m_simple={0xe4, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0xb5, 0x6, "13cadbdfd8f0485df08ee2bfe8dd4f129ac74d3367ad17022c0473bd9e22a0a4cd39a3d8356c666f9970793fe88caa72967175ab99892741263a23812b95afbcc54be61e85601bd4d256425d993c298eddaa05e57bdf74a99ccb798658427d2d4af2fe18a00a87021d48458986e93158173f054480425b744a6edb17c410073f63b95fd634f17893a8076f7308ed444c808e2a507cc14467e7d2f074faf16312a5087791c2ce6aa33994863cc53f9feffc"}, {0xc}, {0xc}}}]}]}}]}, 0xec4}}, 0x0) 04:11:51 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000001240), 0x6, 0x0) read$midi(r0, 0x0, 0x0) [ 840.054774][T11725] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:52 executing program 1: prlimit64(0x0, 0x8, &(0x7f00000001c0)={0x0, 0xffffffff}, 0x0) [ 840.117721][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 840.156085][T11726] device bond68 entered promiscuous mode 04:11:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) [ 840.184999][T11725] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800191e9922bf687989242c80"], 0x1c}}, 0x0) 04:11:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:52 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0xf00}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000032007b0827bf70cfd1fb2c5eb7da8cfc2f"], 0x38}}, 0x0) 04:11:52 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x4, 0x0, &(0x7f0000000080)) [ 840.468306][T11779] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:11:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000055007b0827bd7000fbdbdf2507", @ANYRES32], 0x38}}, 0x0) [ 840.681254][T11781] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={0x0}}, 0x0) [ 840.739507][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 840.771923][T11784] device bond69 entered promiscuous mode [ 840.802412][T11821] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 04:11:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:52 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1100}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:52 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x43fb, 0x4) r1 = socket(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 04:11:52 executing program 1: io_setup(0x101, &(0x7f0000000000)=0x0) io_cancel(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_submit(r0, 0x1, &(0x7f0000001900)=[0x0]) 04:11:52 executing program 2: clock_getres(0x0, &(0x7f0000000040)) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) [ 841.064232][T11831] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 841.221449][T11841] device bond70 entered promiscuous mode 04:11:53 executing program 1: io_setup(0x101, &(0x7f0000000000)=0x0) io_cancel(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 04:11:53 executing program 2: openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x80401, 0x0) pipe2(&(0x7f0000000000), 0x0) 04:11:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:53 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1200}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:53 executing program 1: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @local, 0x0, 0x10002, 'sh\x00'}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:11:53 executing program 2: add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000100)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) 04:11:53 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) vmsplice(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) mprotect(&(0x7f00003ce000/0x200000)=nil, 0x200000, 0x0) madvise(&(0x7f000005b000/0x400000)=nil, 0x400000, 0x1000000000008) [ 841.612799][T11890] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:11:53 executing program 2: add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "67149cb479e5013269eadc1d1102c5da68a24495611516ec8167cbf1835056c563f58eafa7500b18e85208a19d1d3ee5f1136a2138e519f30f8e67f307bcfd93"}, 0x48, 0xfffffffffffffffe) 04:11:53 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) [ 841.835952][T11894] device bond71 entered promiscuous mode 04:11:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) 04:11:53 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1300}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:54 executing program 2: openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) 04:11:54 executing program 0: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, r0) [ 842.164323][T11950] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:11:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000070601020000000800000000000000000500010006"], 0x1c}}, 0x0) 04:11:54 executing program 2: io_setup(0x9, &(0x7f0000000400)=0x0) io_cancel(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 04:11:54 executing program 1: openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/cgroup\x00') [ 842.416228][T11955] device bond72 entered promiscuous mode 04:11:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000002680)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000002500)={&(0x7f00000000c0), 0x6e, &(0x7f00000024c0)=[{&(0x7f0000000140)=""/60, 0x3c}, {0x0}], 0x2}, 0x0) 04:11:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:54 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1400}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:54 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000007440)='ns/uts\x00') 04:11:54 executing program 2: socket$inet(0x2, 0x0, 0xfffffffa) 04:11:54 executing program 0: openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug', 0x200000, 0x0) [ 842.858220][T12020] device bond73 entered promiscuous mode 04:11:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:54 executing program 1: clock_gettime(0x0, &(0x7f0000007480)) 04:11:54 executing program 2: request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='#,]%\x00', 0xfffffffffffffff8) 04:11:55 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1500}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:55 executing program 0: openat$sysfs(0xffffff9c, &(0x7f00000007c0)='/sys/dev/char', 0x2002, 0x0) [ 843.209966][T12060] validate_nla: 1 callbacks suppressed [ 843.209986][T12060] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:11:55 executing program 1: socket$inet(0x2, 0x1, 0xbe) 04:11:55 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000040), 0x8200, 0x0) [ 843.438757][T12064] device bond74 entered promiscuous mode 04:11:55 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000001640)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) 04:11:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:55 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1600}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:55 executing program 2: openat$sysfs(0xffffff9c, &(0x7f0000000240)='/sys/kernel/fscaps', 0x2002, 0x0) 04:11:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={0x0}}, 0x0) 04:11:55 executing program 0: openat$bsg(0xffffff9c, &(0x7f00000000c0), 0x2103, 0x0) [ 843.838050][T12117] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 843.987681][T12120] device bond75 entered promiscuous mode 04:11:56 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) 04:11:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:56 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1700}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:56 executing program 1: sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) 04:11:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 844.318117][T12171] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:11:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x1ca, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2001, 0x0) [ 844.485527][T12175] __nla_validate_parse: 19 callbacks suppressed [ 844.485545][T12175] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 04:11:56 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@private1, @mcast1, @rand_addr=' \x01\x00'}) 04:11:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @in={0x2, 0x0, @private}, @ethernet={0x0, @multicast}, @sco}) [ 844.573610][T12175] device bond76 entered promiscuous mode [ 844.599781][T12185] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) [ 844.699984][T12211] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:56 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1800}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 04:11:56 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000003400)={0x0, 0x0}) [ 844.877412][T12226] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:11:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000002680)={0x0, 0x0, 0x0}, 0x0) [ 845.032185][T12230] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 845.078396][T12230] device bond77 entered promiscuous mode [ 845.123816][T12269] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:57 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 04:11:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) [ 845.185082][T12270] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:57 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1900}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) [ 845.354926][T12279] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:11:57 executing program 0: perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = dup(r0) write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) readv(r1, &(0x7f0000000040), 0x5a) 04:11:57 executing program 1: fork() openat$sysfs(0xffffff9c, &(0x7f0000000b00)='/sys/dev/char', 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) 04:11:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) r2 = fcntl$dupfd(r1, 0x406, r1) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x100}) r4 = socket(0x11, 0x800000003, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000100000007000000000000003d0000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000020000007e0000000700000000000000000000fe0f00000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000082f5c4e10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000"]) r5 = socket(0x11, 0x800000003, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000240)={0x0, 0x6, 0x0, 0x3, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[r6, r6, 0x0], 0x8, 0x5, 0x6, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000400)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x2, 0x9}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000480)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[r6, r6, r7, 0x0, r6], 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000400)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f00000004c0)={&(0x7f00000000c0)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, r8], 0x1}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000008, 0x2010, r5, 0xabba3000) [ 845.476191][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 04:11:57 executing program 2: openat$hwrng(0xffffff9c, &(0x7f00000099c0), 0x202080, 0x0) [ 845.545716][T12284] device bond78 entered promiscuous mode [ 845.598819][T12315] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 845.632975][T12326] input: syz1 as /devices/virtual/input/input6 [ 845.680266][T12319] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:11:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:57 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1a00}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) [ 845.794112][T12326] input: syz1 as /devices/virtual/input/input7 04:11:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 04:11:57 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 04:11:57 executing program 0: io_setup(0x281, &(0x7f00000000c0)) 04:11:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x40e000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) write(r4, &(0x7f00000001c0)="b699f10185164280192ca3520153a3f74feb509c9487f187a556be7d0980f5b939d959303921c552e245a287e358fe8f550cd10b4a52505b9415f45ca456fd94c061bd451e7e26d161bef1a95d9bcefe1deffa6f7d10ed8fc549b93fd29bd600b27a39bc17bcb7874c7b6c0e70c2e733e90c7b131bd9be5355fcc5afb109acf5e7221a77f9032ff2a50b481848472d7c79fac032ea3a465531ddfff2f5707ef98e298880cfc5e21416da5663431154ffe54d9895feeb9825f789f2bd69a9abd9df62d017cae4067e65df3df09312d157d24f4bfc0a2fa83435a96e444a77a048e4271cd9318bae3a28f7", 0xea) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x13) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000300)='/dev/kvm\x00', 0x0, r2) [ 845.977232][T12357] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 846.070078][T12361] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 846.112294][T12361] device bond79 entered promiscuous mode 04:11:58 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@private1, @mcast1, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000008}) 04:11:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:58 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1b00}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:58 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000003400)={0x2, &(0x7f00000033c0)=[{0x3}, {}]}) 04:11:58 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@private1, @mcast1, @rand_addr=' \x01\x00', 0x0, 0x0, 0x101}) 04:11:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f00000000c0), &(0x7f00000001c0)=@ng={0x4, 0xa, "6873e8c9ceb3235e6520"}, 0xc, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000180)={0x1000, 0xb000, 0x0, 0x1}) [ 846.439420][T12422] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 846.600449][T12429] device bond80 entered promiscuous mode 04:11:58 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000004080)={'ip6_vti0\x00', 0x0}) 04:11:58 executing program 0: add_key$user(&(0x7f0000000140), 0x0, &(0x7f0000000280)='`', 0x1, 0xfffffffffffffffa) 04:11:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(r0, &(0x7f0000002b80)=[{{&(0x7f0000000140)=@ieee802154, 0x80, 0x0}}], 0x1, 0x0) 04:11:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x244, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x0, 0xe327]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x20000000}) 04:11:58 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1c00}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) [ 846.915349][T12482] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:11:59 executing program 2: r0 = socket(0x2, 0x3, 0x6) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, 0x0, 0x0, 0x8002, 0x0, 0x0) sendto$inet(r0, &(0x7f0000001800)="6381ae18debebc2e8d6927d58990ae410545a786", 0x14, 0x0, 0x0, 0x0) 04:11:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000009b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 04:11:59 executing program 1: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000001280)=@in={0x2, 0x0, @rand_addr=0x640100ff}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000380)=[{0x18, 0x84, 0x0, "06"}], 0x18, 0x3e8}, 0xfc) [ 847.138292][T12490] device bond81 entered promiscuous mode 04:11:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:59 executing program 5: ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f00000002c0)={0x3, &(0x7f0000000240)=[{0x9, 0x3f, &(0x7f0000000180)="125485859ee88ad502c458dea5fbb9775d2587bdcd3f9d6dbe80531d414ab855d48375c59d3eea00934b5649e6fd6e4bb8e8713d1bd06cfee258f89c89bfe2", 0x0, 0x1}, {0x1, 0x29, &(0x7f00000001c0)="42a58765e58b5f355927ee28f61a7c9a4e541f947c4110967a1c7454be2cd4dae97448d4e7592ae962", 0x1}, {0x5, 0x38, &(0x7f0000000200)="b51e50b7e656a7ae7f36bf6f5d4d2b8e7ab557598e01de52c26def6f0cf667150779a56a2e6e68b1d1ba4ea985af08316736ad4ff8dc3dd3", 0x1, 0x1}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) 04:11:59 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1d00}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:59 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004480)={0x19, 0x3, &(0x7f0000004240)=@framed, &(0x7f00000042c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 04:11:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/238, 0xee}], 0x1, &(0x7f00000006c0)=ANY=[], 0x68}, 0x0) sendmsg$unix(r0, &(0x7f0000003340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003280)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0) 04:11:59 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004480)={0x18, 0x5, &(0x7f0000004240)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10}]}, &(0x7f00000042c0)='GPL\x00', 0x7, 0xf6, &(0x7f0000004300)=""/246, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 847.429349][T12546] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 847.616631][T12550] bond82: (slave bridge80): making interface the new active one 04:11:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x0, 0x0, 0xc4, 0xfffffffffffffffd]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f00000001c0)={0x74, 0x0, [0x3, 0x0, 0x0, 0x800]}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9, 0x13, r4, 0xdba4e000) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2, 0x1f}) 04:11:59 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004480)={0x18, 0x9, &(0x7f0000004240)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @map={0x18, 0x0, 0x1, 0x0, 0x1}, @map={0x18, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f00000042c0)='GPL\x00', 0x7, 0xf6, &(0x7f0000004300)=""/246, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 847.695278][T12550] bond82: (slave bridge80): Enslaving as an active interface with an up link [ 847.752934][T12546] device bond82 entered promiscuous mode [ 847.764195][T12546] device bridge80 entered promiscuous mode 04:11:59 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)={0x1, 0x7, 0x10000, 0x5}, 0x40) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0xf, &(0x7f0000001340)={r0, 0x0, 0x0}, 0x20) 04:11:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:11:59 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1e00}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:11:59 executing program 0: socketpair(0xf, 0x3, 0x0, &(0x7f0000001280)) 04:11:59 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)={0x1, 0x7, 0x10000, 0x5}, 0x40) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x805, r0}, 0x38) [ 848.155450][T12624] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:12:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x9, 0x100000000000000]}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x3e, 0x0) write$nbd(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="dcc4e21894e5c6356fcc1cda889780c4daaaa4a0ea2474f905009b91bc12ac7288f9575e90ddb5132c932b8e5ed086d7d8122151fbdbedeb97f789d54b71a4e612275ae7d2a548b4e242180e37562f975ff9b2aab3687b0104000000000000f85975cb9003ed1f9b000000000000000000b8527f22b601694bca979139268e8ccf1c5865531e49173c7991396af5f8b6406491670c953987a8a3d847c5892b39c4c6a400237221afb729ffcacca1ccc4cbb1457c76ad8dac07b2d0be3bbb5d67e4c1998903"], 0x68) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000480), 0x10b000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x7, 0x4, 0x800004, 0x2]}) r5 = openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x10000, 0x10, 0x1c}, 0x18) r6 = fsmount(r2, 0x0, 0x70) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_GET_FPU(r7, 0x81a0ae8c, &(0x7f0000000240)) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) 04:12:00 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)={0x1, 0x7, 0x10000, 0x5, 0x148}, 0x40) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001340)={r0, 0x0, 0x0}, 0x20) 04:12:00 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004480)={0x0, 0xf4240, &(0x7f0000004240)=@framed={{}, [@func, @map={0x18, 0x0, 0x1, 0x0, 0x1}, @map={0x18, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f00000042c0)='GPL\x00', 0x0, 0xf6, &(0x7f0000004300)=""/246, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 04:12:00 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000002740)={&(0x7f0000000040)=@id, 0xf, &(0x7f0000002580)=[{&(0x7f0000000080)="33ae2368b97399f3b288a5e9096aabac3991ce9f9ce4e045b185b9bdd1", 0x1d}, {&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="2ce8a5a267eb107d746beee894e09cc9a1b786aae6aaded6f5d0f297ba493fa1544bae5a0efaf88ce2c158367cd95ec03e46951e7340845b0c69357fd6b771156ce9939259bccbf9e9104e75c6590c22fd6d100772f568a8f5c133c4b56e195d", 0x60}, {&(0x7f0000001140)="909aa9f6a91dbacc9e683656fd860ed61817840fb4c43fa2b0d4dbdb5fac62b643adf983864c8f043c71872f59228b638a642cdfac868a2a0d8a5999a4b5d49ee00bafc18bb27e26a4ca460ed962b3816c5176341d7faf59a6510a6e0ee004582deb97a08743bd50daa3eb22aeb60947031d59787ccf5c5ca1cef92be594aaff8d679847310a054d4d048e530cb1c3d018fc1f940a08fc5b1d4958b02f70a85af7a4a3574267a407a03c3148779df7f0ae2428b4ab8765", 0xb7}, {&(0x7f0000001580)="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", 0xc8d}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) [ 848.414249][T12628] bond83: (slave bridge81): making interface the new active one 04:12:00 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)={0x1, 0x7, 0x10000, 0x5}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000000c0)}, 0x20) [ 848.461314][T12628] bond83: (slave bridge81): Enslaving as an active interface with an up link [ 848.537693][T12658] device bond83 entered promiscuous mode [ 848.555387][T12658] device bridge81 entered promiscuous mode 04:12:00 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1f00}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:12:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, [0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) 04:12:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:12:00 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)={0x1, 0x7, 0x10000, 0x5}, 0x40) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x4, &(0x7f0000001340)={r0, 0x0, 0x0}, 0x20) 04:12:00 executing program 2: socketpair(0x14, 0x0, 0x0, &(0x7f0000000140)) 04:12:00 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)={0x1, 0x7, 0x10000, 0x5}, 0x40) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) [ 848.837056][T12691] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 849.080445][T12727] device bond84 entered promiscuous mode 04:12:01 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)={0x1, 0x7, 0x10000, 0x5}, 0x40) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x2, &(0x7f0000001340)={r0, 0x0, 0x0}, 0x20) 04:12:01 executing program 5: r0 = add_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="2fe4080209182f699598a5fa85bbee2ec2137c01c56f8660082adb169bdbdbfe6ea58a6b91b8ce96999a129cdb1381805a9d835e86a6a745960f4df8cba50ce0fc740dcce9a64357cd77ac2aa2af0a66370e9147c4b6ee9fe88f170feae4dec9e58d335fa7aca59ea338b48782b79d868f948a4dd7755c8bb3ec9000a3698a5ef0437e7437a2c840b4cd89341caa072a0f4688d23e36175e12cf50eb739ec11b9ade489b98488503c301cc5b75cb72bf375ccabcf3a0f29eb0353e7e196fc4311527286e78e27b2a81cb004c6f6f7630444065170196334ecb3a7f7f2de2ae", 0xdf, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3, 0x380a, 0x0, 0xfffffffffffffffc]}) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x1000, 0x6}) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 04:12:01 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)={0x1, 0x7, 0x10000, 0x5}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 04:12:01 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x2000}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:12:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:12:01 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001200)={0xa, 0x7, 0x10000, 0x5}, 0x40) 04:12:01 executing program 2: bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f000000bb80)={&(0x7f000000b880)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f000000bb40)}, 0x40000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000001280)=@in={0x2, 0x0, @rand_addr=0x640100ff}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x3}], 0x1, &(0x7f0000000380)=[{0x18, 0x84, 0x0, "c6d6"}], 0x18, 0x3e8}, 0xfc) socket$kcm(0x29, 0x7, 0x0) 04:12:01 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)={0x1, 0x7, 0x10000, 0x5}, 0x40) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x2, &(0x7f0000001340)={r0, 0x0, 0x0}, 0x20) [ 849.464951][T12763] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:12:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) fremovexattr(r2, &(0x7f00000001c0)=@known='user.incfs.metadata\x00') r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000180)={0x6, 0x1, 0x1, 0x80000000, 0x8001, 0x5}) [ 849.549362][T12760] __nla_validate_parse: 16 callbacks suppressed [ 849.549380][T12760] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:12:01 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001200)={0x1b}, 0x51) [ 849.644362][T12771] device bridge83 entered promiscuous mode [ 849.716240][T12763] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 849.771870][T12763] device bond85 entered promiscuous mode [ 849.844143][T12760] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:12:01 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004480)={0x18, 0x4, &(0x7f0000004240)=@framed={{}, [@func={0x85, 0x0, 0x2}]}, &(0x7f00000042c0)='GPL\x00', 0x7, 0xf6, &(0x7f0000004300)=""/246, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 04:12:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000180)={0x10000, 0x114000}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) 04:12:01 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004480)={0x18, 0x8, &(0x7f0000004240)=@framed={{0x19}, [@map={0x18, 0x0, 0x1, 0x0, 0x1}, @map={0x18, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f00000042c0)='GPL\x00', 0x7, 0xf6, &(0x7f0000004300)=""/246, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 04:12:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:12:02 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x2100}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) [ 850.223083][T12837] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:12:02 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$kcm(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) 04:12:02 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)={0x1, 0x7, 0x10000, 0x5}, 0x40) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x3, &(0x7f0000001340)={r0, 0x0, 0x0}, 0x20) 04:12:02 executing program 2: clone3(&(0x7f0000000540)={0x104181000, 0x0, 0x0, &(0x7f00000002c0), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 850.417768][T12863] device bridge84 entered promiscuous mode [ 850.434387][T12874] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 850.510280][T12837] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 850.548312][T12837] device bond86 entered promiscuous mode 04:12:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000180)={0x0, 0x0, @pic={0x3, 0x2, 0x2, 0x4, 0x3e, 0x0, 0x7, 0x5, 0x2, 0x20, 0xff, 0x3, 0x1, 0x8, 0x5, 0x8}}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x10, 0xffffffffffffffff, 0x0, 0x8000000000]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) [ 850.578854][T12879] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:12:02 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8955, 0x0) 04:12:02 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x5452, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b438931a25ae967dbc112befabff9ddda9a3b576d0f1854f46ef63f870d59ee417da43cfbeabdbdae754a8e09c62dbabd35c71d3765090012c17aaa737c0e4d7", "dd7969865b7b55416aaeb6cdb9c63b33394fd25e4af3227c5d1797af920bfa36d685dad08947fc9cc4c1d85143262058612e7aa62a5b68dc71f25b49e8b7fdf1", "b95b73a6c3b4eeffdddd1e279864458e8ef7d6ae4b20bdff4cebd40d7d226b4d"}) 04:12:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:12:02 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x2200}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:12:02 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1265, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b438931a25ae967dbc112befabff9ddda9a3b576d0f1854f46ef63f870d59ee417da43cfbeabdbdae754a8e09c62dbabd35c71d3765090012c17aaa737c0e4d7", "dd7969865b7b55416aaeb6cdb9c63b33394fd25e4af3227c5d1797af920bfa36d685dad08947fc9cc4c1d85143262058612e7aa62a5b68dc71f25b49e8b7fdf1", "b95b73a6c3b4eeffdddd1e279864458e8ef7d6ae4b20bdff4cebd40d7d226b4d"}) [ 850.905744][T12915] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:12:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x25, &(0x7f0000000200), 0x4) 04:12:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x6, 0x5, &(0x7f0000000000)="7c09a828", 0x4) 04:12:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) [ 851.075399][T12918] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 851.181985][T12922] device bridge85 entered promiscuous mode [ 851.216873][T12958] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 04:12:03 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x4b47, 0x0) [ 851.248193][T12958] device bond87 entered promiscuous mode [ 851.281774][T12918] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:12:03 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8907, 0x0) 04:12:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:12:03 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4020940d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b438931a25ae967dbc112befabff9ddda9a3b576d0f1854f46ef63f870d59ee417da43cfbeabdbdae754a8e09c62dbabd35c71d3765090012c17aaa737c0e4d7", "dd7969865b7b55416aaeb6cdb9c63b33394fd25e4af3227c5d1797af920bfa36d685dad08947fc9cc4c1d85143262058612e7aa62a5b68dc71f25b49e8b7fdf1", "b95b73a6c3b4eeffdddd1e279864458e8ef7d6ae4b20bdff4cebd40d7d226b4d"}) 04:12:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) 04:12:03 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x2300}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:12:03 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8918, 0x0) 04:12:03 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x2, &(0x7f0000000200), 0x4) [ 851.571703][T12990] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:12:03 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x401870c8, 0x0) 04:12:03 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) [ 851.839846][T12997] device bridge86 entered promiscuous mode [ 851.866282][T12999] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:12:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x501002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) 04:12:03 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x4b49, 0x0) 04:12:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b5b0807303100333b0000000000000040"], 0x78) 04:12:03 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x31, &(0x7f0000000200), 0x4) [ 851.951597][T13020] device bond88 entered promiscuous mode 04:12:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:12:04 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x2400}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:12:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) 04:12:04 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x127c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b438931a25ae967dbc112befabff9ddda9a3b576d0f1854f46ef63f870d59ee417da43cfbeabdbdae754a8e09c62dbabd35c71d3765090012c17aaa737c0e4d7", "dd7969865b7b55416aaeb6cdb9c63b33394fd25e4af3227c5d1797af920bfa36d685dad08947fc9cc4c1d85143262058612e7aa62a5b68dc71f25b49e8b7fdf1", "b95b73a6c3b4eeffdddd1e279864458e8ef7d6ae4b20bdff4cebd40d7d226b4d"}) 04:12:04 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x80081270, 0x0) 04:12:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10060, 0x0, 0x0) [ 852.269842][T13067] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:12:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa0900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x220800, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x81, 0x0, [0x80000000, 0x3, 0x1000, 0x3]}) 04:12:04 executing program 2: perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 852.523220][T13074] device bridge87 entered promiscuous mode [ 852.558451][T13104] device bond89 entered promiscuous mode 04:12:04 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1260, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b438931a25ae967dbc112befabff9ddda9a3b576d0f1854f46ef63f870d59ee417da43cfbeabdbdae754a8e09c62dbabd35c71d3765090012c17aaa737c0e4d7", "dd7969865b7b55416aaeb6cdb9c63b33394fd25e4af3227c5d1797af920bfa36d685dad08947fc9cc4c1d85143262058612e7aa62a5b68dc71f25b49e8b7fdf1", "b95b73a6c3b4eeffdddd1e279864458e8ef7d6ae4b20bdff4cebd40d7d226b4d"}) 04:12:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x6, 0x3, &(0x7f0000000000)="7c09a828", 0x4) 04:12:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:12:04 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x2500}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:12:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='net/arp\x00') read$char_usb(r0, &(0x7f0000000000)=""/105, 0x69) read$char_usb(r0, &(0x7f00000000c0)=""/224, 0x2) 04:12:04 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x401870cc, 0x0) [ 852.902296][T13147] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:12:04 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x6, 0x0, 0x0, "b438931a25ae967dbc112befabff9ddda9a3b576d0f1854f46ef63f870d59ee417da43cfbeabdbdae754a8e09c62dbabd35c71d3765090012c17aaa737c0e4d7", "dd7969865b7b55416aaeb6cdb9c63b33394fd25e4af3227c5d1797af920bfa36d685dad08947fc9cc4c1d85143262058612e7aa62a5b68dc71f25b49e8b7fdf1", "b95b73a6c3b4eeffdddd1e279864458e8ef7d6ae4b20bdff4cebd40d7d226b4d", [0x0, 0x1]}) 04:12:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) [ 853.011410][T13147] device bridge88 entered promiscuous mode [ 853.020370][T13147] device bond90 entered promiscuous mode 04:12:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x0, 0x0, 0xffffffffffffffff, 0x4]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000180)={0x74, 0x0, [0x6, 0x1, 0x1f, 0x3]}) [ 853.096774][T13193] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:12:05 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x2600}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:12:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/rt6_stats\x00') read$char_usb(r0, &(0x7f0000000000)=""/253, 0xfd) 04:12:05 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x2c, &(0x7f0000000040)={0x4}, 0x4) [ 853.218388][T13199] device bond91 entered promiscuous mode 04:12:05 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) 04:12:05 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x220040, 0x0) readlinkat(r1, &(0x7f0000000040)='\x00', &(0x7f0000002340)=""/43, 0x2b) 04:12:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:12:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x5, &(0x7f0000000200), 0x4) 04:12:05 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c07, 0x0) 04:12:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r2 = socket(0x11, 0x800000003, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) fcntl$getflags(r2, 0xb) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000180)={0x0, "b60fbb4d22704c16efcf763770c16fc7"}) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) 04:12:05 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x2700}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) [ 853.653223][T13258] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:12:05 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x891b, 0x0) [ 853.851016][T13258] device bond92 entered promiscuous mode 04:12:05 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x2800}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:12:05 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x45, &(0x7f0000000040)={0x4}, 0x4) 04:12:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:12:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) 04:12:06 executing program 2: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:12:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x6, 0xc, &(0x7f0000000000)="7c09a828", 0x4) 04:12:06 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1265, 0x0) [ 854.229092][T13323] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:12:06 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90) 04:12:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000002a40)={0x1248, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@nested={0xa9, 0x0, 0x0, 0x1, [@generic="40b2b9bdcc00125ac8e1dc4dc73a5617bda91d19b310553acf0756d171ab180cc59cdc2a3601a5baa6a30ef5c453e6fa58ee77c6cef5482d1ccdd8600540394f17ac390859f0dba4c647e84a742174e7d2a85c057012adb30a411f31c62185965edd3bb381e54ccd2e441d680478164bfc56d73b3f1d6f2de5696c68cd9a44cbe7a6e393bb7fd3b8da167565e796dd2b79eae8ac9514edb3d865d112f380b2e4c49080054a"]}, @nested={0x2c9, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@empty}, @generic="24ff4db098c537aae4e075586f1e396e0ac6a1ef0a6a3ee92ababb88e4e0682cd5df7677e8d1d331f07741fb3bc8dfa167209a", @generic="6712931caf28ab24bc72742f00bbba14d95fe4df978b2b1b84c31b80e123978b417102fba56e7aa3ca2530606fc91d46418635eb02b9a18727fa00f865b4ef7c82bc3761a88c1550b5f9de4c88c0ea19bf498f0f91f6f8de3c140619e56e8a8e4a3e8f75d4a5821498edd3b7a3df51705f93d0cc940579ddd27ff5b39e9c5503468714cfc32f8ec64df14084ff1f60ce56a5e6ff72da9a078f71460d07fdce72abefdff07d68efa71475acfef48124d174c7531c6b2ae2e74934bcdd46e425ea67a05955a20a8297262316fe8ac9a3162ee2d02f2d98dddf97fdf0ba7811ac609d2387ae8b6617cbd3d4c2cf861b", @generic="0b8b552bc0a8af7e6f5af579384baef2af4babf3f2bebffcb6996253cac862ded04ba9abed9476410c825976ab11ef78af52e6ea1afbbf5c48f650f842", @generic="46e9a18e6a5321735d3918be44397e1c4aec90ff12fceaa75e874514eca05ee5286e077ffb4f0aa1f177182cd1c260adc0d627b7d2a8b19b08141973ae5067db1279e58c914ea02d4bfd29f272e6a741d13fe8d859a1560709819a6d443f64f90bdbfac91b1d058c1be789b21bed382e5be51f4e8986d410e86222b1cd45b7bc1f1154d84f104cac84875ab2ffc244033ae9d9b3ca071d9bca1a08aa752842526c1970a09e615ad26541852c7033107ffc7d14fb143ec172527cc372522721c584ba64d90550ff7868e9af835f81b28f318c3e39f05128b5c855dec99cdbee037e88", @typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="460a2caa650bcf0a0e7049995d90c83e5938342e670e973f02ac43630c01a42a724bbb4d493caf8fa6160cb00cc2", @generic="dbdc8b0f7f22418adb077179451e2f2a200b7c162178d3e7e59cc092a06db3e3ed2c74b789f63d0a3a91d8dd0e1e54073519c65eab6df30fb8272d"]}, @typed={0x4}, @nested={0xeb5, 0x0, 0x0, 0x1, [@generic="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"]}]}, 0x1248}}, 0x0) recvmsg$unix(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001a40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000640)=""/30, 0x1e}], 0x3}, 0x0) [ 854.420877][T13363] device bond93 entered promiscuous mode 04:12:06 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x2900}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:12:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:12:06 executing program 1: syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x100c0) 04:12:06 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, 0x0) 04:12:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}}, 0x0) [ 854.729299][T13393] __nla_validate_parse: 17 callbacks suppressed [ 854.729319][T13393] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:12:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) 04:12:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x49, &(0x7f0000000000)="7c09a828", 0x4) [ 854.877871][T13396] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:12:06 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x80041285, 0x0) 04:12:06 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x3e, &(0x7f0000000200), 0x4) 04:12:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x2d, &(0x7f0000000200), 0x4) [ 855.052271][T13400] device bridge89 entered promiscuous mode [ 855.110123][T13400] bond94: (slave bridge89): making interface the new active one [ 855.152651][T13400] bond94: (slave bridge89): Enslaving as an active interface with an up link [ 855.197723][T13408] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 04:12:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x151001, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x632000, 0x0) mmap(&(0x7f00006e1000/0x2000)=nil, 0x2000, 0x3, 0x103010, r3, 0x14d25000) r4 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x0, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001540)='/sys/module/em28xx_dvb', 0x8100, 0x100) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000001700)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001600)={0x90, r6, 0x4, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x24040804) 04:12:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="f8030000070103b7"], 0x3f8}}, 0x0) [ 855.261498][T13393] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:12:07 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x2a00}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:12:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:12:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x6, 0x6, &(0x7f0000000000)="7c09a828", 0x4) 04:12:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x6, 0x4, &(0x7f0000000000)="02000000", 0x4) [ 855.496275][T13479] netlink: 996 bytes leftover after parsing attributes in process `syz-executor.0'. 04:12:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000001200)={0x1ff, 0x20000926, &(0x7f0000000180)="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", &(0x7f0000001180)="fa24ae30efedd47f82b68c6e8f405f8fdd4376d13afe187cf4ea1692681385d4f4bb423e167c0f309c5a576db558f976c22ca31fc9e5cc07bcd7983a3e7752829788ba23745904e5a58b461e57", 0x1000, 0x4d}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = open(&(0x7f0000001240)='./file0\x00', 0x2000, 0x1b) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001300)=[@text32={0x20, &(0x7f0000001280)="66b806008ee866b80b008ec0650fc7380f20c035100000000f22c0360f086781a3b1fc1d0000000f235eb9380b00000f32c74424002a000000c744240200000000c7442406000000000f011c24b9b40a0000b8c66a348bba000000000f30", 0x5e}], 0x1, 0x11, &(0x7f0000001340), 0x0) 04:12:07 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x15, &(0x7f0000000200), 0x4) [ 855.598564][T13485] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:12:07 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x80041284, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b438931a25ae967dbc112befabff9ddda9a3b576d0f1854f46ef63f870d59ee417da43cfbeabdbdae754a8e09c62dbabd35c71d3765090012c17aaa737c0e4d7", "dd7969865b7b55416aaeb6cdb9c63b33394fd25e4af3227c5d1797af920bfa36d685dad08947fc9cc4c1d85143262058612e7aa62a5b68dc71f25b49e8b7fdf1", "b95b73a6c3b4eeffdddd1e279864458e8ef7d6ae4b20bdff4cebd40d7d226b4d"}) 04:12:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x6, 0x7, &(0x7f0000000000)="7c09a828", 0x4) [ 855.701880][T13486] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 855.798007][T13489] device bridge90 entered promiscuous mode 04:12:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000180)="67f26e66b803d700000f23d00f21f86635000000090f23f80fbc3d6766c7442400007000006766c7442402467cd8216766c744240600000000670f011c242ef30f1ef60fc79c0080650fc71bb8d8008ec03e0fbdf40f30", 0x57}], 0x1, 0x0, &(0x7f0000000240)=[@cstype3, @flags={0x3, 0x197402}], 0x2) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f00000002c0)={0x7, 0x0, [{0x7, 0x1, 0x0, 0x0, @sint={0x4, 0x109eaaf}}, {0x9, 0x3, 0x0, 0x0, @sint={0xffff, 0x101}}, {0x7, 0x2, 0x0, 0x0, @adapter={0x3ff, 0x4, 0x430, 0xc77, 0x7}}, {0x8001, 0x4, 0x0, 0x0, @adapter={0x0, 0x80, 0x823, 0x1, 0x7bc2}}, {0x9, 0x5, 0x0, 0x0, @msi={0x80, 0x59a04aa4, 0x6, 0xffff}}, {0x8, 0x2, 0x0, 0x0, @adapter={0xacc, 0x2, 0x4, 0x3, 0x4}}, {0x8, 0x2, 0x0, 0x0, @sint={0x8001, 0x64}}]}) [ 855.930873][T13489] bond95: (slave bridge90): making interface the new active one 04:12:07 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1278, 0x0) 04:12:07 executing program 2: perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1810, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 855.972673][T13489] bond95: (slave bridge90): Enslaving as an active interface with an up link [ 856.001082][T13496] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 04:12:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x48, &(0x7f0000000000)="7c09a828", 0x4) [ 856.035899][T13485] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:12:08 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x2b00}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:12:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="0001"], 0x28}}, 0x0) 04:12:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) 04:12:08 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8941, 0x0) 04:12:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x6, 0x1b, &(0x7f0000000000)="7c09a828", 0x4) 04:12:08 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) [ 856.332627][T13563] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:12:08 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x125d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b438931a25ae967dbc112befabff9ddda9a3b576d0f1854f46ef63f870d59ee417da43cfbeabdbdae754a8e09c62dbabd35c71d3765090012c17aaa737c0e4d7", "dd7969865b7b55416aaeb6cdb9c63b33394fd25e4af3227c5d1797af920bfa36d685dad08947fc9cc4c1d85143262058612e7aa62a5b68dc71f25b49e8b7fdf1", "b95b73a6c3b4eeffdddd1e279864458e8ef7d6ae4b20bdff4cebd40d7d226b4d"}) [ 856.520185][T13564] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:12:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) [ 856.616519][T13567] device bridge91 entered promiscuous mode 04:12:08 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x29, &(0x7f0000000200), 0x4) 04:12:08 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000001c0)=@getpolicy={0x50, 0x26, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local}}}, 0x50}}, 0x0) 04:12:08 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0xf, &(0x7f0000000200), 0x4) [ 856.683112][T13567] bond96: (slave bridge91): making interface the new active one [ 856.731905][T13567] bond96: (slave bridge91): Enslaving as an active interface with an up link [ 856.793151][T13595] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 856.824055][T13564] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 856.855919][T13638] ================================================================================ 04:12:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x541b, 0x0) [ 856.903545][T13638] UBSAN: shift-out-of-bounds in net/xfrm/xfrm_user.c:1969:18 [ 856.967261][T13638] shift exponent 254 is too large for 32-bit type 'int' [ 856.986863][T13638] CPU: 0 PID: 13638 Comm: syz-executor.0 Not tainted 5.14.0-rc3-next-20210730-syzkaller #0 [ 856.996980][T13638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 857.007049][T13638] Call Trace: [ 857.010367][T13638] dump_stack_lvl+0xcd/0x134 [ 857.014993][T13638] ubsan_epilogue+0xb/0x5a [ 857.019436][T13638] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 857.026239][T13638] xfrm_set_default.cold+0x21/0x102 [ 857.031494][T13638] ? xfrm_netlink_rcv+0x90/0x90 [ 857.036420][T13638] xfrm_user_rcv_msg+0x430/0xa20 [ 857.041383][T13638] ? xfrm_do_migrate+0x7f0/0x7f0 [ 857.046348][T13638] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 857.052352][T13638] ? find_held_lock+0x2d/0x110 [ 857.057178][T13638] ? __mutex_lock+0x21c/0x1300 [ 857.061970][T13638] netlink_rcv_skb+0x153/0x420 [ 857.066821][T13638] ? xfrm_do_migrate+0x7f0/0x7f0 [ 857.071780][T13638] ? netlink_ack+0xa60/0xa60 [ 857.076409][T13638] xfrm_netlink_rcv+0x6b/0x90 [ 857.081097][T13638] netlink_unicast+0x533/0x7d0 [ 857.085886][T13638] ? netlink_attachskb+0x890/0x890 [ 857.091023][T13638] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 857.097288][T13638] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 857.103549][T13638] ? __phys_addr_symbol+0x2c/0x70 [ 857.108612][T13638] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 857.114352][T13638] ? __check_object_size+0x16e/0x3f0 [ 857.119670][T13638] netlink_sendmsg+0x86d/0xdb0 [ 857.124470][T13638] ? netlink_unicast+0x7d0/0x7d0 [ 857.129441][T13638] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 857.135712][T13638] ? netlink_unicast+0x7d0/0x7d0 [ 857.140679][T13638] sock_sendmsg+0xcf/0x120 [ 857.145114][T13638] ____sys_sendmsg+0x6e8/0x810 [ 857.149897][T13638] ? kernel_sendmsg+0x50/0x50 [ 857.154601][T13638] ? do_recvmmsg+0x6d0/0x6d0 [ 857.159218][T13638] ? sockfd_lookup_light+0x6d/0x180 [ 857.164448][T13638] ___sys_sendmsg+0xf3/0x170 [ 857.169060][T13638] ? sendmsg_copy_msghdr+0x160/0x160 [ 857.174366][T13638] ? __fget_files+0x21b/0x3e0 [ 857.179329][T13638] ? lock_downgrade+0x6e0/0x6e0 [ 857.184227][T13638] ? __fget_files+0x23d/0x3e0 [ 857.188944][T13638] ? __fget_light+0xea/0x280 [ 857.193562][T13638] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 857.199831][T13638] __sys_sendmsg+0xe5/0x1b0 [ 857.204360][T13638] ? __sys_sendmsg_sock+0x30/0x30 [ 857.209417][T13638] ? syscall_enter_from_user_mode+0x21/0x70 [ 857.215343][T13638] do_syscall_64+0x35/0xb0 [ 857.219770][T13638] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 857.225681][T13638] RIP: 0033:0x4665e9 [ 857.229587][T13638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 857.249219][T13638] RSP: 002b:00007fd807212188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 857.257659][T13638] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 04:12:09 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01210019010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x2c00}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:12:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4200, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x3]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x2}) 04:12:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0001"], 0x28}}, 0x0) 04:12:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x6, 0x3, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) [ 857.265644][T13638] RDX: 0000000000000000 RSI: 0000000020001600 RDI: 0000000000000003 [ 857.273643][T13638] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 857.281622][T13638] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 857.289601][T13638] R13: 00007fffbc65219f R14: 00007fd807212300 R15: 0000000000022000 [ 857.340550][T13648] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 857.444096][T13638] ================================================================================ [ 857.453785][T13638] Kernel panic - not syncing: panic_on_warn set ... [ 857.460377][T13638] CPU: 0 PID: 13638 Comm: syz-executor.0 Not tainted 5.14.0-rc3-next-20210730-syzkaller #0 [ 857.470367][T13638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 857.480429][T13638] Call Trace: [ 857.483715][T13638] dump_stack_lvl+0xcd/0x134 [ 857.488335][T13638] panic+0x2b0/0x6dd [ 857.492285][T13638] ? __warn_printk+0xf3/0xf3 [ 857.496909][T13638] ? dump_stack_lvl+0x120/0x134 [ 857.501783][T13638] ? ubsan_epilogue+0x3e/0x5a [ 857.506486][T13638] ubsan_epilogue+0x54/0x5a [ 857.511005][T13638] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 857.517807][T13638] xfrm_set_default.cold+0x21/0x102 [ 857.523029][T13638] ? xfrm_netlink_rcv+0x90/0x90 [ 857.527907][T13638] xfrm_user_rcv_msg+0x430/0xa20 [ 857.532952][T13638] ? xfrm_do_migrate+0x7f0/0x7f0 [ 857.537922][T13638] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 857.543960][T13638] ? find_held_lock+0x2d/0x110 [ 857.548779][T13638] ? __mutex_lock+0x21c/0x1300 [ 857.553562][T13638] netlink_rcv_skb+0x153/0x420 [ 857.558358][T13638] ? xfrm_do_migrate+0x7f0/0x7f0 [ 857.563320][T13638] ? netlink_ack+0xa60/0xa60 [ 857.567946][T13638] xfrm_netlink_rcv+0x6b/0x90 [ 857.572638][T13638] netlink_unicast+0x533/0x7d0 [ 857.577429][T13638] ? netlink_attachskb+0x890/0x890 [ 857.582558][T13638] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 857.588820][T13638] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 857.595085][T13638] ? __phys_addr_symbol+0x2c/0x70 [ 857.600156][T13638] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 857.605890][T13638] ? __check_object_size+0x16e/0x3f0 [ 857.611200][T13638] netlink_sendmsg+0x86d/0xdb0 [ 857.615996][T13638] ? netlink_unicast+0x7d0/0x7d0 [ 857.620963][T13638] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 857.627226][T13638] ? netlink_unicast+0x7d0/0x7d0 [ 857.630626][T13655] device bridge92 entered promiscuous mode [ 857.632182][T13638] sock_sendmsg+0xcf/0x120 [ 857.642470][T13638] ____sys_sendmsg+0x6e8/0x810 [ 857.647262][T13638] ? kernel_sendmsg+0x50/0x50 [ 857.651955][T13638] ? do_recvmmsg+0x6d0/0x6d0 [ 857.656645][T13638] ? sockfd_lookup_light+0x6d/0x180 [ 857.661881][T13638] ___sys_sendmsg+0xf3/0x170 [ 857.666493][T13638] ? sendmsg_copy_msghdr+0x160/0x160 [ 857.671803][T13638] ? __fget_files+0x21b/0x3e0 [ 857.676501][T13638] ? lock_downgrade+0x6e0/0x6e0 [ 857.681398][T13638] ? __fget_files+0x23d/0x3e0 [ 857.686101][T13638] ? __fget_light+0xea/0x280 [ 857.690702][T13638] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 857.696967][T13638] __sys_sendmsg+0xe5/0x1b0 [ 857.701490][T13638] ? __sys_sendmsg_sock+0x30/0x30 [ 857.706559][T13638] ? syscall_enter_from_user_mode+0x21/0x70 [ 857.712564][T13638] do_syscall_64+0x35/0xb0 [ 857.717018][T13638] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 857.723359][T13638] RIP: 0033:0x4665e9 [ 857.727268][T13638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 857.746890][T13638] RSP: 002b:00007fd807212188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 857.748154][T13655] bond97: (slave bridge92): making interface the new active one [ 857.755310][T13638] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 857.755330][T13638] RDX: 0000000000000000 RSI: 0000000020001600 RDI: 0000000000000003 [ 857.755347][T13638] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 857.755363][T13638] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 857.755380][T13638] R13: 00007fffbc65219f R14: 00007fd807212300 R15: 0000000000022000 [ 857.764385][T13638] Kernel Offset: disabled [ 857.808472][T13638] Rebooting in 86400 seconds..