139c433dc4cdcb8de98e7fac22cfc408c54f952"}) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x8001}) (async) openat$cgroup_ro(r1, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000002c0)={0x2, @raw_data="51b0f2c5b7fc6ba420e428e595a2b52d4e7e3ac4a1f9f26a9b7eafe7ea44d0df4cd70cfd3cb6d26d0c2cee3a5fd380be73e231463e8c549751514ef1c9ad6dfd20d8ea8b6eb3ac02923fbf63c0b9dc57abfbf9cef2da2f957c8ee134323b5b3817f1976d6c4b6d42f4b0d08555ac17f70f9893c81d353bec02b6e290079714f2d8760ed1239d1c634f68766d144dd1aa00760d2a1cdec735439b348ab43b6963934a4ad71114dae13ec307e5fca65154bd4373f1b139c433dc4cdcb8de98e7fac22cfc408c54f952"}) (async) [ 2562.849948] bond1192: making interface vlan1030 the new active one [ 2562.865427] bond1192: Enslaving vlan1030 as an active interface with an up link 06:29:47 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x8900) 06:29:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xf0}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) [ 2562.905918] FAT-fs (loop2): Directory bread(block 6) failed 06:29:47 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x80, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000240)="b3929063cc091ec282a000314356131273fab2610af9cbf0d83820802b745cd13ba673930084d1513c9dbe06be0e11d175b95bc2bb6e4eafbf04c7683f95f8fabfb1f736356682b0626f88dfee1e25c42fa735d3d0a3d226806a12ca63e352b6e7ecab29de73be544449eaf3942fa6582a86f6707dbebda16b90d4427fb6c8e4ee7b8864ae7f39734a33643d9e77e929a63027ecf4e41d1d714c36500a2f08f3a325b520fe9bf28a428e72ed47d1c403f0c92bc2e69801c06ea39f2df38fcc3bac60a15f1627f6", 0xc7, 0x1}, {&(0x7f0000000340)="5daf0b6290a4dc605976d78cfe5c106221f781bf789c683d2772e3bc9f5ef993ec7c27", 0x23, 0x1}, {&(0x7f0000000d00)="31ba5a8cd4bbb0d43592c2651a7cd48f658df315fea1d9880353569b86fd30ab25ea0c03bfcc71fb7b31e6da6055348e53f44c664a37c3e2766c44c968710e3296f3c432f2321500000300000057210c97979002eb3776314d0ebdbed81e1f5941bf3d98f25536dac40c34edc9cd0dc83ce426c79e8c46aae14e7dd8b4800bad45ab40580a169afc08387eb72334be66cc4d94e3", 0x94, 0x7}, {&(0x7f00000003c0)="b7289a60b7d882668d810537f6aa2d9a90ec2dc2cb52a3685a7a20b464fba0f078d69a4de1559a387f3f7366d878a5e63bb0202a5060fe912ffe3be806a09620af38f7d9cac0092e28dd9b4cc1de33a808e3fdb68b33fb7936d64bcfa8c017fc608c42818fc38d2012b8f1de70b0ec38c7f3bddb6acd6366e92b6b08f131742f634c7e43ae0b4be730dc8d959e471657be25692633fb71686198b5f3c6058348972c06e4c0e236bf69c1948e7d03977ad86877c64fe398d55b1affc598cd746535c4dbed06e3d4422a96c18dc7709aef1932522222f6824b944a533c9bb7d9ac", 0xe0, 0x6}], 0x100000, &(0x7f0000000540)=ANY=[@ANYBLOB="726566bcc92a065d5f7665726966792c72657363616e5f757569645f747265652c6e6f626172726965722c6e6f7373642c6e6f747265656c6f672c6175746f6465667261672c736d61636b6673726f6f743d2e232c5575486a5f7479"]) preadv(r1, &(0x7f0000000c00)=[{&(0x7f00000005c0)=""/251, 0xfb}, {&(0x7f00000006c0)=""/236, 0xec}, {&(0x7f00000007c0)=""/10, 0xa}, {&(0x7f0000000800)=""/130, 0x82}, {&(0x7f00000008c0)=""/204, 0xcc}, {&(0x7f00000009c0)=""/244, 0xf4}, {&(0x7f0000000c80)=""/72, 0x48}, {&(0x7f0000000b40)=""/180, 0xb4}], 0x8, 0xe17, 0x3c5) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x80, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000240)="b3929063cc091ec282a000314356131273fab2610af9cbf0d83820802b745cd13ba673930084d1513c9dbe06be0e11d175b95bc2bb6e4eafbf04c7683f95f8fabfb1f736356682b0626f88dfee1e25c42fa735d3d0a3d226806a12ca63e352b6e7ecab29de73be544449eaf3942fa6582a86f6707dbebda16b90d4427fb6c8e4ee7b8864ae7f39734a33643d9e77e929a63027ecf4e41d1d714c36500a2f08f3a325b520fe9bf28a428e72ed47d1c403f0c92bc2e69801c06ea39f2df38fcc3bac60a15f1627f6", 0xc7, 0x1}, {&(0x7f0000000340)="5daf0b6290a4dc605976d78cfe5c106221f781bf789c683d2772e3bc9f5ef993ec7c27", 0x23, 0x1}, {&(0x7f0000000d00)="31ba5a8cd4bbb0d43592c2651a7cd48f658df315fea1d9880353569b86fd30ab25ea0c03bfcc71fb7b31e6da6055348e53f44c664a37c3e2766c44c968710e3296f3c432f2321500000300000057210c97979002eb3776314d0ebdbed81e1f5941bf3d98f25536dac40c34edc9cd0dc83ce426c79e8c46aae14e7dd8b4800bad45ab40580a169afc08387eb72334be66cc4d94e3", 0x94, 0x7}, {&(0x7f00000003c0)="b7289a60b7d882668d810537f6aa2d9a90ec2dc2cb52a3685a7a20b464fba0f078d69a4de1559a387f3f7366d878a5e63bb0202a5060fe912ffe3be806a09620af38f7d9cac0092e28dd9b4cc1de33a808e3fdb68b33fb7936d64bcfa8c017fc608c42818fc38d2012b8f1de70b0ec38c7f3bddb6acd6366e92b6b08f131742f634c7e43ae0b4be730dc8d959e471657be25692633fb71686198b5f3c6058348972c06e4c0e236bf69c1948e7d03977ad86877c64fe398d55b1affc598cd746535c4dbed06e3d4422a96c18dc7709aef1932522222f6824b944a533c9bb7d9ac", 0xe0, 0x6}], 0x100000, &(0x7f0000000540)=ANY=[@ANYBLOB="726566bcc92a065d5f7665726966792c72657363616e5f757569645f747265652c6e6f626172726965722c6e6f7373642c6e6f747265656c6f672c6175746f6465667261672c736d61636b6673726f6f743d2e232c5575486a5f7479"]) (async) preadv(r1, &(0x7f0000000c00)=[{&(0x7f00000005c0)=""/251, 0xfb}, {&(0x7f00000006c0)=""/236, 0xec}, {&(0x7f00000007c0)=""/10, 0xa}, {&(0x7f0000000800)=""/130, 0x82}, {&(0x7f00000008c0)=""/204, 0xcc}, {&(0x7f00000009c0)=""/244, 0xf4}, {&(0x7f0000000c80)=""/72, 0x48}, {&(0x7f0000000b40)=""/180, 0xb4}], 0x8, 0xe17, 0x3c5) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) (async) 06:29:47 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x8001}) openat$cgroup_ro(r1, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000002c0)={0x2, @raw_data="51b0f2c5b7fc6ba420e428e595a2b52d4e7e3ac4a1f9f26a9b7eafe7ea44d0df4cd70cfd3cb6d26d0c2cee3a5fd380be73e231463e8c549751514ef1c9ad6dfd20d8ea8b6eb3ac02923fbf63c0b9dc57abfbf9cef2da2f957c8ee134323b5b3817f1976d6c4b6d42f4b0d08555ac17f70f9893c81d353bec02b6e290079714f2d8760ed1239d1c634f68766d144dd1aa00760d2a1cdec735439b348ab43b6963934a4ad71114dae13ec307e5fca65154bd4373f1b139c433dc4cdcb8de98e7fac22cfc408c54f952"}) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x8001}) (async) openat$cgroup_ro(r1, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000002c0)={0x2, @raw_data="51b0f2c5b7fc6ba420e428e595a2b52d4e7e3ac4a1f9f26a9b7eafe7ea44d0df4cd70cfd3cb6d26d0c2cee3a5fd380be73e231463e8c549751514ef1c9ad6dfd20d8ea8b6eb3ac02923fbf63c0b9dc57abfbf9cef2da2f957c8ee134323b5b3817f1976d6c4b6d42f4b0d08555ac17f70f9893c81d353bec02b6e290079714f2d8760ed1239d1c634f68766d144dd1aa00760d2a1cdec735439b348ab43b6963934a4ad71114dae13ec307e5fca65154bd4373f1b139c433dc4cdcb8de98e7fac22cfc408c54f952"}) (async) 06:29:47 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xac00) 06:29:47 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xfeffffffffffffff) [ 2562.992762] FAT-fs (loop2): Directory bread(block 6) failed [ 2562.995713] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:29:47 executing program 1: syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x47, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x2) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000009c0)={0x1, 0x80, 0x0, 0x6, 0x3, 0x9, 0x0, 0x4, 0x60100, 0xd, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffff800, 0x2, @perf_bp={&(0x7f0000000980), 0x4}, 0x80, 0x6cc, 0x4, 0x7, 0x0, 0x5f1, 0x0, 0x0, 0x7, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x3, r2, 0xc) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0xff, 0x8, 0x6, 0x0, 0xe55, 0x8802, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x101, 0x2, @perf_bp={&(0x7f0000000140), 0xc}, 0x40, 0x5, 0x2, 0x5, 0x6, 0x3, 0x7, 0x0, 0x3, 0x0, 0x3}, 0x0, 0x3, r2, 0xb) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x2, @sliced={0x5, [0x0, 0x9, 0x8, 0x4, 0xfbff, 0x400, 0xfffa, 0x100, 0x9, 0x5, 0x7, 0x8, 0x4cb, 0x5, 0x7, 0xfff, 0x1f, 0xfd9, 0x400, 0x1, 0x6, 0xc7b1, 0x8001, 0x1000, 0x170, 0x0, 0x0, 0x2, 0x4, 0x8, 0x2a, 0x4, 0xfffe, 0xbb, 0x9, 0x8000, 0x3, 0x0, 0x0, 0x8, 0x1, 0xff, 0x7, 0xbd, 0x4, 0x1, 0x0, 0xa3d0], 0x77}}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)=ANY=[@ANYBLOB="000000fc0e049700000000683b1500", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @mcast1, 0x12b}, 0x1c) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0285629, &(0x7f00000001c0)={0x3, @sliced={0x9, [0xfffe, 0x3, 0x6, 0x47, 0xdf, 0xfff7, 0x1, 0x1000, 0x6, 0x40, 0x3, 0x5, 0x2, 0x80, 0x6, 0x401, 0x100, 0xfe40, 0xae, 0xfff, 0x7fff, 0x7ff, 0x2a77, 0xfffa, 0x2, 0x7ff, 0x8, 0x0, 0xff, 0x3ff, 0x857, 0xfffc, 0x5, 0x7fff, 0x7, 0x1, 0x1, 0x6, 0x7fff, 0x6, 0x9, 0x4, 0x101, 0x3e4, 0x3, 0xfff8, 0x9, 0x1], 0x5}}) 06:29:47 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xffffff7f00000000) 06:29:47 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xad00) 06:29:47 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xd600) [ 2563.474470] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2563.526758] device batadv1191 entered promiscuous mode [ 2563.565452] 8021q: adding VLAN 0 to HW filter on device batadv1191 [ 2563.598103] bond1193: making interface vlan1031 the new active one 06:29:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0xebe0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:29:47 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xd800) 06:29:47 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) r1 = syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x80, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000240)="b3929063cc091ec282a000314356131273fab2610af9cbf0d83820802b745cd13ba673930084d1513c9dbe06be0e11d175b95bc2bb6e4eafbf04c7683f95f8fabfb1f736356682b0626f88dfee1e25c42fa735d3d0a3d226806a12ca63e352b6e7ecab29de73be544449eaf3942fa6582a86f6707dbebda16b90d4427fb6c8e4ee7b8864ae7f39734a33643d9e77e929a63027ecf4e41d1d714c36500a2f08f3a325b520fe9bf28a428e72ed47d1c403f0c92bc2e69801c06ea39f2df38fcc3bac60a15f1627f6", 0xc7, 0x1}, {&(0x7f0000000340)="5daf0b6290a4dc605976d78cfe5c106221f781bf789c683d2772e3bc9f5ef993ec7c27", 0x23, 0x1}, {&(0x7f0000000d00)="31ba5a8cd4bbb0d43592c2651a7cd48f658df315fea1d9880353569b86fd30ab25ea0c03bfcc71fb7b31e6da6055348e53f44c664a37c3e2766c44c968710e3296f3c432f2321500000300000057210c97979002eb3776314d0ebdbed81e1f5941bf3d98f25536dac40c34edc9cd0dc83ce426c79e8c46aae14e7dd8b4800bad45ab40580a169afc08387eb72334be66cc4d94e3", 0x94, 0x7}, {&(0x7f00000003c0)="b7289a60b7d882668d810537f6aa2d9a90ec2dc2cb52a3685a7a20b464fba0f078d69a4de1559a387f3f7366d878a5e63bb0202a5060fe912ffe3be806a09620af38f7d9cac0092e28dd9b4cc1de33a808e3fdb68b33fb7936d64bcfa8c017fc608c42818fc38d2012b8f1de70b0ec38c7f3bddb6acd6366e92b6b08f131742f634c7e43ae0b4be730dc8d959e471657be25692633fb71686198b5f3c6058348972c06e4c0e236bf69c1948e7d03977ad86877c64fe398d55b1affc598cd746535c4dbed06e3d4422a96c18dc7709aef1932522222f6824b944a533c9bb7d9ac", 0xe0, 0x6}], 0x100000, &(0x7f0000000540)=ANY=[@ANYBLOB="726566bcc92a065d5f7665726966792c72657363616e5f757569645f747265652c6e6f626172726965722c6e6f7373642c6e6f747265656c6f672c6175746f6465667261672c736d61636b6673726f6f743d2e232c5575486a5f7479"]) preadv(r1, &(0x7f0000000c00)=[{&(0x7f00000005c0)=""/251, 0xfb}, {&(0x7f00000006c0)=""/236, 0xec}, {&(0x7f00000007c0)=""/10, 0xa}, {&(0x7f0000000800)=""/130, 0x82}, {&(0x7f00000008c0)=""/204, 0xcc}, {&(0x7f00000009c0)=""/244, 0xf4}, {&(0x7f0000000c80)=""/72, 0x48}, {&(0x7f0000000b40)=""/180, 0xb4}], 0x8, 0xe17, 0x3c5) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) [ 2563.611939] bond1193: Enslaving vlan1031 as an active interface with an up link 06:29:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2f5}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:29:47 executing program 1: syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x47, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x2) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000009c0)={0x1, 0x80, 0x0, 0x6, 0x3, 0x9, 0x0, 0x4, 0x60100, 0xd, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffff800, 0x2, @perf_bp={&(0x7f0000000980), 0x4}, 0x80, 0x6cc, 0x4, 0x7, 0x0, 0x5f1, 0x0, 0x0, 0x7, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x3, r2, 0xc) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0xff, 0x8, 0x6, 0x0, 0xe55, 0x8802, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x101, 0x2, @perf_bp={&(0x7f0000000140), 0xc}, 0x40, 0x5, 0x2, 0x5, 0x6, 0x3, 0x7, 0x0, 0x3, 0x0, 0x3}, 0x0, 0x3, r2, 0xb) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x2, @sliced={0x5, [0x0, 0x9, 0x8, 0x4, 0xfbff, 0x400, 0xfffa, 0x100, 0x9, 0x5, 0x7, 0x8, 0x4cb, 0x5, 0x7, 0xfff, 0x1f, 0xfd9, 0x400, 0x1, 0x6, 0xc7b1, 0x8001, 0x1000, 0x170, 0x0, 0x0, 0x2, 0x4, 0x8, 0x2a, 0x4, 0xfffe, 0xbb, 0x9, 0x8000, 0x3, 0x0, 0x0, 0x8, 0x1, 0xff, 0x7, 0xbd, 0x4, 0x1, 0x0, 0xa3d0], 0x77}}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)=ANY=[@ANYBLOB="000000fc0e049700000000683b1500", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @mcast1, 0x12b}, 0x1c) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0285629, &(0x7f00000001c0)={0x3, @sliced={0x9, [0xfffe, 0x3, 0x6, 0x47, 0xdf, 0xfff7, 0x1, 0x1000, 0x6, 0x40, 0x3, 0x5, 0x2, 0x80, 0x6, 0x401, 0x100, 0xfe40, 0xae, 0xfff, 0x7fff, 0x7ff, 0x2a77, 0xfffa, 0x2, 0x7ff, 0x8, 0x0, 0xff, 0x3ff, 0x857, 0xfffc, 0x5, 0x7fff, 0x7, 0x1, 0x1, 0x6, 0x7fff, 0x6, 0x9, 0x4, 0x101, 0x3e4, 0x3, 0xfff8, 0x9, 0x1], 0x5}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x47, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f00000009c0)={0x1, 0x80, 0x0, 0x6, 0x3, 0x9, 0x0, 0x4, 0x60100, 0xd, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffff800, 0x2, @perf_bp={&(0x7f0000000980), 0x4}, 0x80, 0x6cc, 0x4, 0x7, 0x0, 0x5f1, 0x0, 0x0, 0x7, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x3, r2, 0xc) (async) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0xff, 0x8, 0x6, 0x0, 0xe55, 0x8802, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x101, 0x2, @perf_bp={&(0x7f0000000140), 0xc}, 0x40, 0x5, 0x2, 0x5, 0x6, 0x3, 0x7, 0x0, 0x3, 0x0, 0x3}, 0x0, 0x3, r2, 0xb) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x2, @sliced={0x5, [0x0, 0x9, 0x8, 0x4, 0xfbff, 0x400, 0xfffa, 0x100, 0x9, 0x5, 0x7, 0x8, 0x4cb, 0x5, 0x7, 0xfff, 0x1f, 0xfd9, 0x400, 0x1, 0x6, 0xc7b1, 0x8001, 0x1000, 0x170, 0x0, 0x0, 0x2, 0x4, 0x8, 0x2a, 0x4, 0xfffe, 0xbb, 0x9, 0x8000, 0x3, 0x0, 0x0, 0x8, 0x1, 0xff, 0x7, 0xbd, 0x4, 0x1, 0x0, 0xa3d0], 0x77}}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)=ANY=[@ANYBLOB="000000fc0e049700000000683b1500", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) socket$igmp6(0xa, 0x3, 0x2) (async) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @mcast1, 0x12b}, 0x1c) (async) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0285629, &(0x7f00000001c0)={0x3, @sliced={0x9, [0xfffe, 0x3, 0x6, 0x47, 0xdf, 0xfff7, 0x1, 0x1000, 0x6, 0x40, 0x3, 0x5, 0x2, 0x80, 0x6, 0x401, 0x100, 0xfe40, 0xae, 0xfff, 0x7fff, 0x7ff, 0x2a77, 0xfffa, 0x2, 0x7ff, 0x8, 0x0, 0xff, 0x3ff, 0x857, 0xfffc, 0x5, 0x7fff, 0x7, 0x1, 0x1, 0x6, 0x7fff, 0x6, 0x9, 0x4, 0x101, 0x3e4, 0x3, 0xfff8, 0x9, 0x1], 0x5}}) (async) 06:29:47 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xffffffff00000000) [ 2564.001234] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2564.052645] device batadv1192 entered promiscuous mode 06:29:48 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xdc00) [ 2564.074321] 8021q: adding VLAN 0 to HW filter on device batadv1192 06:29:48 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000240)=""/124, 0x7c}, {&(0x7f00000002c0)=""/212, 0xd4}, {&(0x7f00000003c0)=""/206, 0xce}], 0x3, 0x3ff, 0x1) move_pages(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) 06:29:48 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xfeff) 06:29:48 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xffffffffffffffe0) 06:29:48 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000240)=""/124, 0x7c}, {&(0x7f00000002c0)=""/212, 0xd4}, {&(0x7f00000003c0)=""/206, 0xce}], 0x3, 0x3ff, 0x1) move_pages(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000240)=""/124, 0x7c}, {&(0x7f00000002c0)=""/212, 0xd4}, {&(0x7f00000003c0)=""/206, 0xce}], 0x3, 0x3ff, 0x1) (async) move_pages(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) (async) 06:29:48 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xfffffffffffffffe) 06:29:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0xf000000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:29:48 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xfffe) 06:29:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:29:48 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x40000) 06:29:48 executing program 1: syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x47, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000009c0)={0x1, 0x80, 0x0, 0x6, 0x3, 0x9, 0x0, 0x4, 0x60100, 0xd, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffff800, 0x2, @perf_bp={&(0x7f0000000980), 0x4}, 0x80, 0x6cc, 0x4, 0x7, 0x0, 0x5f1, 0x0, 0x0, 0x7, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x3, r2, 0xc) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0xff, 0x8, 0x6, 0x0, 0xe55, 0x8802, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x101, 0x2, @perf_bp={&(0x7f0000000140), 0xc}, 0x40, 0x5, 0x2, 0x5, 0x6, 0x3, 0x7, 0x0, 0x3, 0x0, 0x3}, 0x0, 0x3, r2, 0xb) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x2, @sliced={0x5, [0x0, 0x9, 0x8, 0x4, 0xfbff, 0x400, 0xfffa, 0x100, 0x9, 0x5, 0x7, 0x8, 0x4cb, 0x5, 0x7, 0xfff, 0x1f, 0xfd9, 0x400, 0x1, 0x6, 0xc7b1, 0x8001, 0x1000, 0x170, 0x0, 0x0, 0x2, 0x4, 0x8, 0x2a, 0x4, 0xfffe, 0xbb, 0x9, 0x8000, 0x3, 0x0, 0x0, 0x8, 0x1, 0xff, 0x7, 0xbd, 0x4, 0x1, 0x0, 0xa3d0], 0x77}}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)=ANY=[@ANYBLOB="000000fc0e049700000000683b1500", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @mcast1, 0x12b}, 0x1c) (async) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0285629, &(0x7f00000001c0)={0x3, @sliced={0x9, [0xfffe, 0x3, 0x6, 0x47, 0xdf, 0xfff7, 0x1, 0x1000, 0x6, 0x40, 0x3, 0x5, 0x2, 0x80, 0x6, 0x401, 0x100, 0xfe40, 0xae, 0xfff, 0x7fff, 0x7ff, 0x2a77, 0xfffa, 0x2, 0x7ff, 0x8, 0x0, 0xff, 0x3ff, 0x857, 0xfffc, 0x5, 0x7fff, 0x7, 0x1, 0x1, 0x6, 0x7fff, 0x6, 0x9, 0x4, 0x101, 0x3e4, 0x3, 0xfff8, 0x9, 0x1], 0x5}}) 06:29:48 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mincore(&(0x7f00004a2000/0x4000)=nil, 0x4000, &(0x7f0000000140)=""/47) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:29:48 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000240)=""/124, 0x7c}, {&(0x7f00000002c0)=""/212, 0xd4}, {&(0x7f00000003c0)=""/206, 0xce}], 0x3, 0x3ff, 0x1) (async) move_pages(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) 06:29:48 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x1000000) 06:29:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0xfbe0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) [ 2564.769888] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:29:49 executing program 1: ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:29:49 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x2000000) 06:29:49 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mincore(&(0x7f00004a2000/0x4000)=nil, 0x4000, &(0x7f0000000140)=""/47) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:29:49 executing program 1: ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 2564.951986] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:29:49 executing program 5: sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x90, 0x0, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}]}, @NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, 0x90}, 0x1, 0x0, 0x0, 0x40081}, 0x24044040) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) [ 2565.011591] device batadv1193 entered promiscuous mode [ 2565.043240] 8021q: adding VLAN 0 to HW filter on device batadv1193 06:29:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:29:49 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x3000000) 06:29:49 executing program 1: ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) 06:29:49 executing program 5: sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x90, 0x0, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}]}, @NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, 0x90}, 0x1, 0x0, 0x0, 0x40081}, 0x24044040) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) 06:29:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x10000000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:29:49 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mincore(&(0x7f00004a2000/0x4000)=nil, 0x4000, &(0x7f0000000140)=""/47) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:29:49 executing program 5: sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x90, 0x0, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}]}, @NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, 0x90}, 0x1, 0x0, 0x0, 0x40081}, 0x24044040) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x90, 0x0, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}]}, @NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, 0x90}, 0x1, 0x0, 0x0, 0x40081}, 0x24044040) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) (async) 06:29:49 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x4000000) [ 2565.222542] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:29:49 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) r1 = socket(0xf, 0x800, 0xc8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_proto_private(r2, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x3, 0xa) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRESDEC=r6, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r2], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:29:49 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000078b000/0x1000)=nil) gettid() move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) 06:29:49 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x5000000) 06:29:49 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000078b000/0x1000)=nil) (async) gettid() (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) [ 2565.388746] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2565.476590] device batadv1194 entered promiscuous mode [ 2565.503777] 8021q: adding VLAN 0 to HW filter on device batadv1194 06:29:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:29:49 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x7000000) 06:29:49 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x5f67cdc4888cf3c3, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:29:49 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000078b000/0x1000)=nil) (async) gettid() move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) [ 2565.543880] bond1195: making interface vlan1033 the new active one [ 2565.556680] bond1195: Enslaving vlan1033 as an active interface with an up link [ 2565.568287] bond0: Error: cannot enslave VLAN challenged slave lo on VLAN enabled bond bond0 06:29:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x10be0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:29:49 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x8000000) 06:29:49 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) getpid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) socket(0xf, 0x800, 0xc8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_proto_private(r5, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000340)=r4) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) 06:29:49 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x5f67cdc4888cf3c3, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:29:49 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) r1 = socket(0xf, 0x800, 0xc8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_proto_private(r2, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x3, 0xa) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRESDEC=r6, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r2], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) socket(0xf, 0x800, 0xc8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_proto_private(r2, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$inet6(0xa, 0x3, 0xa) (async) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRESDEC=r6, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r2], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) 06:29:49 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x9000000) 06:29:50 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x5f67cdc4888cf3c3, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x5f67cdc4888cf3c3, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) (async) gettid() (async) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) [ 2565.788031] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:29:50 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xa000000) [ 2565.877899] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2565.908472] fat__get_entry: 9 callbacks suppressed [ 2565.908483] FAT-fs (loop2): Directory bread(block 6) failed [ 2565.941397] device batadv1195 entered promiscuous mode [ 2565.964170] 8021q: adding VLAN 0 to HW filter on device batadv1195 [ 2565.998600] bond0: Error: cannot enslave VLAN challenged slave lo on VLAN enabled bond bond0 [ 2566.070408] bond1196: making interface vlan1034 the new active one [ 2566.086321] bond1196: Enslaving vlan1034 as an active interface with an up link 06:29:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x700}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:29:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x11be0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:29:50 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xf000000) 06:29:50 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) getpid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) socket(0xf, 0x800, 0xc8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_proto_private(r5, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000340)=r4) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) (async) getpid() (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) (async) socket(0xf, 0x800, 0xc8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_proto_private(r5, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000340)=r4) (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) (async) 06:29:50 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) r1 = socket(0xf, 0x800, 0xc8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_proto_private(r2, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x3, 0xa) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRESDEC=r6, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r2], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) socket(0xf, 0x800, 0xc8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_proto_private(r2, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$inet6(0xa, 0x3, 0xa) (async) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRESDEC=r6, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r2], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) 06:29:50 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000443000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x8000, 0x5, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000), 0x0, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x20000, 0x3) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000ffd000/0x2000)=nil}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) move_pages(r2, 0x1, &(0x7f0000000040)=[&(0x7f00008d2000/0x4000)=nil], &(0x7f0000000040), &(0x7f0000000100), 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000001c0)={&(0x7f0000000140)=[0x6, 0x9f08175f, 0x4, 0xf7, 0x2, 0x0], 0x6, 0x6, 0x2, 0x3, 0x3bebd77f, 0x8, 0x2, {0x1, 0x5, 0x45b0, 0x7d37, 0x1, 0xfffd, 0x5, 0x9, 0x9, 0xda, 0x0, 0x2, 0x3ff, 0x9, "43177e8135acc737ec9d39c837a38eec34d23ae850829c0d6b4e2a30a7f00e2b"}}) r3 = shmget$private(0x0, 0x1000, 0x80, &(0x7f000080a000/0x1000)=nil) shmat(r3, &(0x7f0000fff000/0x1000)=nil, 0x3000) 06:29:50 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000443000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x8000, 0x5, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000), 0x0, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x20000, 0x3) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000ffd000/0x2000)=nil}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) move_pages(r2, 0x1, &(0x7f0000000040)=[&(0x7f00008d2000/0x4000)=nil], &(0x7f0000000040), &(0x7f0000000100), 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000001c0)={&(0x7f0000000140)=[0x6, 0x9f08175f, 0x4, 0xf7, 0x2, 0x0], 0x6, 0x6, 0x2, 0x3, 0x3bebd77f, 0x8, 0x2, {0x1, 0x5, 0x45b0, 0x7d37, 0x1, 0xfffd, 0x5, 0x9, 0x9, 0xda, 0x0, 0x2, 0x3ff, 0x9, "43177e8135acc737ec9d39c837a38eec34d23ae850829c0d6b4e2a30a7f00e2b"}}) r3 = shmget$private(0x0, 0x1000, 0x80, &(0x7f000080a000/0x1000)=nil) shmat(r3, &(0x7f0000fff000/0x1000)=nil, 0x3000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mbind(&(0x7f0000443000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x8000, 0x5, 0x0) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000), 0x0, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x20000, 0x3) (async) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000ffd000/0x2000)=nil}) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) (async) move_pages(r2, 0x1, &(0x7f0000000040)=[&(0x7f00008d2000/0x4000)=nil], &(0x7f0000000040), &(0x7f0000000100), 0x0) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000001c0)={&(0x7f0000000140)=[0x6, 0x9f08175f, 0x4, 0xf7, 0x2, 0x0], 0x6, 0x6, 0x2, 0x3, 0x3bebd77f, 0x8, 0x2, {0x1, 0x5, 0x45b0, 0x7d37, 0x1, 0xfffd, 0x5, 0x9, 0x9, 0xda, 0x0, 0x2, 0x3ff, 0x9, "43177e8135acc737ec9d39c837a38eec34d23ae850829c0d6b4e2a30a7f00e2b"}}) (async) shmget$private(0x0, 0x1000, 0x80, &(0x7f000080a000/0x1000)=nil) (async) shmat(r3, &(0x7f0000fff000/0x1000)=nil, 0x3000) (async) 06:29:50 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x12000000) [ 2566.176410] FAT-fs (loop2): Directory bread(block 6) failed [ 2566.200929] bond0: Error: cannot enslave VLAN challenged slave lo on VLAN enabled bond bond0 [ 2566.273513] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:29:50 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000443000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x8000, 0x5, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000), 0x0, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x20000, 0x3) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000ffd000/0x2000)=nil}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) move_pages(r2, 0x1, &(0x7f0000000040)=[&(0x7f00008d2000/0x4000)=nil], &(0x7f0000000040), &(0x7f0000000100), 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000001c0)={&(0x7f0000000140)=[0x6, 0x9f08175f, 0x4, 0xf7, 0x2, 0x0], 0x6, 0x6, 0x2, 0x3, 0x3bebd77f, 0x8, 0x2, {0x1, 0x5, 0x45b0, 0x7d37, 0x1, 0xfffd, 0x5, 0x9, 0x9, 0xda, 0x0, 0x2, 0x3ff, 0x9, "43177e8135acc737ec9d39c837a38eec34d23ae850829c0d6b4e2a30a7f00e2b"}}) r3 = shmget$private(0x0, 0x1000, 0x80, &(0x7f000080a000/0x1000)=nil) shmat(r3, &(0x7f0000fff000/0x1000)=nil, 0x3000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mbind(&(0x7f0000443000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x8000, 0x5, 0x0) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000), 0x0, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x20000, 0x3) (async) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000ffd000/0x2000)=nil}) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) (async) move_pages(r2, 0x1, &(0x7f0000000040)=[&(0x7f00008d2000/0x4000)=nil], &(0x7f0000000040), &(0x7f0000000100), 0x0) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000001c0)={&(0x7f0000000140)=[0x6, 0x9f08175f, 0x4, 0xf7, 0x2, 0x0], 0x6, 0x6, 0x2, 0x3, 0x3bebd77f, 0x8, 0x2, {0x1, 0x5, 0x45b0, 0x7d37, 0x1, 0xfffd, 0x5, 0x9, 0x9, 0xda, 0x0, 0x2, 0x3ff, 0x9, "43177e8135acc737ec9d39c837a38eec34d23ae850829c0d6b4e2a30a7f00e2b"}}) (async) shmget$private(0x0, 0x1000, 0x80, &(0x7f000080a000/0x1000)=nil) (async) shmat(r3, &(0x7f0000fff000/0x1000)=nil, 0x3000) (async) 06:29:50 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x16000000) 06:29:50 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x1c000000) [ 2566.387952] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:29:50 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2566.437074] device batadv1196 entered promiscuous mode [ 2566.462015] 8021q: adding VLAN 0 to HW filter on device batadv1196 [ 2566.506930] FAT-fs (loop2): Directory bread(block 6) failed [ 2566.542762] bond1197: making interface vlan1035 the new active one 06:29:50 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x1d000000) 06:29:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x12be0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:29:50 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() (async) shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) getpid() (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) socket(0xf, 0x800, 0xc8) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_proto_private(r5, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000340)=r4) (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) 06:29:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:29:50 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:29:50 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x40000000005, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000002c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@overlay={0x0, 0x3, 0x4, 0x2, 0x56599bcd, {0x0, 0xea60}, {0x2, 0x0, 0x7, 0x7f, 0x8, 0x7, "ac10fd39"}, 0x80000000, 0x3, {}, 0x400}) [ 2566.563965] bond1197: Enslaving vlan1035 as an active interface with an up link 06:29:50 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x40000000005, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x4, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000002c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@overlay={0x0, 0x3, 0x4, 0x2, 0x56599bcd, {0x0, 0xea60}, {0x2, 0x0, 0x7, 0x7f, 0x8, 0x7, "ac10fd39"}, 0x80000000, 0x3, {}, 0x400}) 06:29:50 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x20000000) [ 2566.617092] FAT-fs (loop2): Directory bread(block 6) failed [ 2566.650821] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:29:50 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:29:50 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x40000000005, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x4, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000002c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@overlay={0x0, 0x3, 0x4, 0x2, 0x56599bcd, {0x0, 0xea60}, {0x2, 0x0, 0x7, 0x7f, 0x8, 0x7, "ac10fd39"}, 0x80000000, 0x3, {}, 0x400}) 06:29:51 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x2b000000) 06:29:51 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xa) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=r0, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800010042d9e636f05bf0710f484746b04a91c183610c9d381ebb791cbdb344e5", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0500000000a587ba2ae77ff91b5a0f931fa1d000000000", @ANYRES32=r1, @ANYBLOB="0a0034000202020202020000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\"J^~', @ANYRES16, @ANYBLOB='\x00'/11, @ANYRES32, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1400c480}, 0x4004) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800184000000000000000000000f604950000000000bb43140000", @ANYRES16], &(0x7f0000000480)='syzkaller\x00', 0x7, 0xec, &(0x7f00000004c0)=""/236, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x7fff, 0x8, 0x9}, &(0x7f0000000300)=0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00008fd000/0x4000)=nil, 0x4000, 0x16) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x7a}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) mlock2(&(0x7f0000908000/0x1000)=nil, 0x1000, 0x1) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f0000535000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) msync(&(0x7f000039d000/0x3000)=nil, 0x3000, 0x3) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:29:51 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000340)=@multiplanar_userptr={0x4, 0x0, 0x4, 0x20, 0x2, {0x0, 0x2710}, {0x4, 0x2, 0x40, 0x9, 0x77, 0x5, "08de0785"}, 0x2000006, 0x2, {&(0x7f00000002c0)=[{0xfffffffb, 0x7ff, {&(0x7f0000000040)}, 0x3}, {0x6, 0x6, {&(0x7f0000000100)}, 0x4}]}, 0x6}) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x80000000, 0x2, 0x2, "1c5a66e15b85e1a211094cd46ecd35c35f00f4bc08741729a046b3f5de3389fc", 0x34363248}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@mpls_delroute={0x4c, 0x19, 0x400, 0x70bd29, 0x25dfdbfe, {0x1c, 0x80, 0x0, 0x40, 0xfd, 0x0, 0x0, 0xb, 0x2000}, [@RTA_OIF={0x8}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x5}, @RTA_VIA={0x14, 0x12, {0x6, "3783c4c4cd900c3322d47ba5f63a"}}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x11, 0x5}}]}, 0x4c}}, 0x800) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r2 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x5, 0x7, 0x0, 0x1f, 0x0, 0x7, 0x60901, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x81, 0x1, @perf_bp={&(0x7f0000000140), 0x2}, 0x11800, 0x2, 0x59, 0x4, 0x101, 0x5, 0x7f, 0x0, 0xa5125e3, 0x0, 0x2}, r2, 0x9, r1, 0x9) [ 2566.841021] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2566.921696] device batadv1197 entered promiscuous mode [ 2566.957777] 8021q: adding VLAN 0 to HW filter on device batadv1197 [ 2567.024971] bond1198: making interface vlan1036 the new active one [ 2567.064958] bond1198: Enslaving vlan1036 as an active interface with an up link 06:29:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x13be0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:29:51 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x35000000) 06:29:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa00}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:29:51 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xa) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=r0, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800010042d9e636f05bf0710f484746b04a91c183610c9d381ebb791cbdb344e5", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0500000000a587ba2ae77ff91b5a0f931fa1d000000000", @ANYRES32=r1, @ANYBLOB="0a0034000202020202020000"], 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\"J^~', @ANYRES16, @ANYBLOB='\x00'/11, @ANYRES32, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1400c480}, 0x4004) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800184000000000000000000000f604950000000000bb43140000", @ANYRES16], &(0x7f0000000480)='syzkaller\x00', 0x7, 0xec, &(0x7f00000004c0)=""/236, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x7fff, 0x8, 0x9}, &(0x7f0000000300)=0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) madvise(&(0x7f00008fd000/0x4000)=nil, 0x4000, 0x16) (async) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x7a}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) (async) mlock2(&(0x7f0000908000/0x1000)=nil, 0x1000, 0x1) (async) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f0000535000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) msync(&(0x7f000039d000/0x3000)=nil, 0x3000, 0x3) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:29:51 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)=0x6, 0x795ee466) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000001380)=[{&(0x7f0000000040)=""/246, 0xf6}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/90, 0x5a}, {&(0x7f0000001280)=""/249, 0xf9}], 0x4, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/218, 0xda}], 0x1, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001600)=[{&(0x7f00000013c0)=""/237, 0xed}, {&(0x7f00000014c0)=""/109, 0x6d}, {&(0x7f0000001540)=""/177, 0xb1}], 0x3, &(0x7f0000001840)=[@fadd={0x58, 0x114, 0x6, {{0x3f000000, 0x2f39c8d9}, &(0x7f0000001640)=0x4, &(0x7f0000001680)=0x3, 0x0, 0x5, 0x8, 0xffffffffffff11e0, 0x8, 0x2}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000016c0)=""/40, 0x28}, &(0x7f0000001700), 0x3c436b703704aa94}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001740)=""/159, 0x9f}, &(0x7f0000001800), 0x11}}], 0xb8, 0x24040000}, 0x30008040) move_pages(0x0, 0x2, &(0x7f0000000140)=[&(0x7f00001f1000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f000026bfec), 0x0, 0x0) [ 2567.111696] FAT-fs (loop2): Directory bread(block 6) failed 06:29:51 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000340)=@multiplanar_userptr={0x4, 0x0, 0x4, 0x20, 0x2, {0x0, 0x2710}, {0x4, 0x2, 0x40, 0x9, 0x77, 0x5, "08de0785"}, 0x2000006, 0x2, {&(0x7f00000002c0)=[{0xfffffffb, 0x7ff, {&(0x7f0000000040)}, 0x3}, {0x6, 0x6, {&(0x7f0000000100)}, 0x4}]}, 0x6}) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x80000000, 0x2, 0x2, "1c5a66e15b85e1a211094cd46ecd35c35f00f4bc08741729a046b3f5de3389fc", 0x34363248}) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@mpls_delroute={0x4c, 0x19, 0x400, 0x70bd29, 0x25dfdbfe, {0x1c, 0x80, 0x0, 0x40, 0xfd, 0x0, 0x0, 0xb, 0x2000}, [@RTA_OIF={0x8}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x5}, @RTA_VIA={0x14, 0x12, {0x6, "3783c4c4cd900c3322d47ba5f63a"}}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x11, 0x5}}]}, 0x4c}}, 0x800) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) r2 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x5, 0x7, 0x0, 0x1f, 0x0, 0x7, 0x60901, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x81, 0x1, @perf_bp={&(0x7f0000000140), 0x2}, 0x11800, 0x2, 0x59, 0x4, 0x101, 0x5, 0x7f, 0x0, 0xa5125e3, 0x0, 0x2}, r2, 0x9, r1, 0x9) 06:29:51 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)=0x6, 0x795ee466) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000001380)=[{&(0x7f0000000040)=""/246, 0xf6}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/90, 0x5a}, {&(0x7f0000001280)=""/249, 0xf9}], 0x4, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/218, 0xda}], 0x1, 0x0) (async) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001600)=[{&(0x7f00000013c0)=""/237, 0xed}, {&(0x7f00000014c0)=""/109, 0x6d}, {&(0x7f0000001540)=""/177, 0xb1}], 0x3, &(0x7f0000001840)=[@fadd={0x58, 0x114, 0x6, {{0x3f000000, 0x2f39c8d9}, &(0x7f0000001640)=0x4, &(0x7f0000001680)=0x3, 0x0, 0x5, 0x8, 0xffffffffffff11e0, 0x8, 0x2}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000016c0)=""/40, 0x28}, &(0x7f0000001700), 0x3c436b703704aa94}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001740)=""/159, 0x9f}, &(0x7f0000001800), 0x11}}], 0xb8, 0x24040000}, 0x30008040) (async) move_pages(0x0, 0x2, &(0x7f0000000140)=[&(0x7f00001f1000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f000026bfec), 0x0, 0x0) [ 2567.182806] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2567.196114] FAT-fs (loop2): Directory bread(block 6) failed 06:29:51 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x3f000000) 06:29:51 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xa) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=r0, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800010042d9e636f05bf0710f484746b04a91c183610c9d381ebb791cbdb344e5", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0500000000a587ba2ae77ff91b5a0f931fa1d000000000", @ANYRES32=r1, @ANYBLOB="0a0034000202020202020000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\"J^~', @ANYRES16, @ANYBLOB='\x00'/11, @ANYRES32, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1400c480}, 0x4004) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800184000000000000000000000f604950000000000bb43140000", @ANYRES16], &(0x7f0000000480)='syzkaller\x00', 0x7, 0xec, &(0x7f00000004c0)=""/236, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x7fff, 0x8, 0x9}, &(0x7f0000000300)=0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00008fd000/0x4000)=nil, 0x4000, 0x16) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x7a}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) mlock2(&(0x7f0000908000/0x1000)=nil, 0x1000, 0x1) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f0000535000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) msync(&(0x7f000039d000/0x3000)=nil, 0x3000, 0x3) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) socket$inet6(0xa, 0x3, 0xa) (async) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=r0, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800010042d9e636f05bf0710f484746b04a91c183610c9d381ebb791cbdb344e5", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0500000000a587ba2ae77ff91b5a0f931fa1d000000000", @ANYRES32=r1, @ANYBLOB="0a0034000202020202020000"], 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\"J^~', @ANYRES16, @ANYBLOB='\x00'/11, @ANYRES32, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) (async) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1400c480}, 0x4004) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800184000000000000000000000f604950000000000bb43140000", @ANYRES16], &(0x7f0000000480)='syzkaller\x00', 0x7, 0xec, &(0x7f00000004c0)=""/236, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x7fff, 0x8, 0x9}, &(0x7f0000000300)=0x10) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) madvise(&(0x7f00008fd000/0x4000)=nil, 0x4000, 0x16) (async) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x7a}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) (async) mlock2(&(0x7f0000908000/0x1000)=nil, 0x1000, 0x1) (async) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) mremap(&(0x7f0000535000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) (async) msync(&(0x7f000039d000/0x3000)=nil, 0x3000, 0x3) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) 06:29:51 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)=0x6, 0x795ee466) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000001380)=[{&(0x7f0000000040)=""/246, 0xf6}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/90, 0x5a}, {&(0x7f0000001280)=""/249, 0xf9}], 0x4, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/218, 0xda}], 0x1, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001600)=[{&(0x7f00000013c0)=""/237, 0xed}, {&(0x7f00000014c0)=""/109, 0x6d}, {&(0x7f0000001540)=""/177, 0xb1}], 0x3, &(0x7f0000001840)=[@fadd={0x58, 0x114, 0x6, {{0x3f000000, 0x2f39c8d9}, &(0x7f0000001640)=0x4, &(0x7f0000001680)=0x3, 0x0, 0x5, 0x8, 0xffffffffffff11e0, 0x8, 0x2}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000016c0)=""/40, 0x28}, &(0x7f0000001700), 0x3c436b703704aa94}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001740)=""/159, 0x9f}, &(0x7f0000001800), 0x11}}], 0xb8, 0x24040000}, 0x30008040) move_pages(0x0, 0x2, &(0x7f0000000140)=[&(0x7f00001f1000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f000026bfec), 0x0, 0x0) 06:29:51 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x87000000) 06:29:51 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000340)=@multiplanar_userptr={0x4, 0x0, 0x4, 0x20, 0x2, {0x0, 0x2710}, {0x4, 0x2, 0x40, 0x9, 0x77, 0x5, "08de0785"}, 0x2000006, 0x2, {&(0x7f00000002c0)=[{0xfffffffb, 0x7ff, {&(0x7f0000000040)}, 0x3}, {0x6, 0x6, {&(0x7f0000000100)}, 0x4}]}, 0x6}) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x80000000, 0x2, 0x2, "1c5a66e15b85e1a211094cd46ecd35c35f00f4bc08741729a046b3f5de3389fc", 0x34363248}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@mpls_delroute={0x4c, 0x19, 0x400, 0x70bd29, 0x25dfdbfe, {0x1c, 0x80, 0x0, 0x40, 0xfd, 0x0, 0x0, 0xb, 0x2000}, [@RTA_OIF={0x8}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x5}, @RTA_VIA={0x14, 0x12, {0x6, "3783c4c4cd900c3322d47ba5f63a"}}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x11, 0x5}}]}, 0x4c}}, 0x800) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r2 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x5, 0x7, 0x0, 0x1f, 0x0, 0x7, 0x60901, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x81, 0x1, @perf_bp={&(0x7f0000000140), 0x2}, 0x11800, 0x2, 0x59, 0x4, 0x101, 0x5, 0x7f, 0x0, 0xa5125e3, 0x0, 0x2}, r2, 0x9, r1, 0x9) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000340)=@multiplanar_userptr={0x4, 0x0, 0x4, 0x20, 0x2, {0x0, 0x2710}, {0x4, 0x2, 0x40, 0x9, 0x77, 0x5, "08de0785"}, 0x2000006, 0x2, {&(0x7f00000002c0)=[{0xfffffffb, 0x7ff, {&(0x7f0000000040)}, 0x3}, {0x6, 0x6, {&(0x7f0000000100)}, 0x4}]}, 0x6}) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x80000000, 0x2, 0x2, "1c5a66e15b85e1a211094cd46ecd35c35f00f4bc08741729a046b3f5de3389fc", 0x34363248}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@mpls_delroute={0x4c, 0x19, 0x400, 0x70bd29, 0x25dfdbfe, {0x1c, 0x80, 0x0, 0x40, 0xfd, 0x0, 0x0, 0xb, 0x2000}, [@RTA_OIF={0x8}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x5}, @RTA_VIA={0x14, 0x12, {0x6, "3783c4c4cd900c3322d47ba5f63a"}}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x11, 0x5}}]}, 0x4c}}, 0x800) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) getpgid(0xffffffffffffffff) (async) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x5, 0x7, 0x0, 0x1f, 0x0, 0x7, 0x60901, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x81, 0x1, @perf_bp={&(0x7f0000000140), 0x2}, 0x11800, 0x2, 0x59, 0x4, 0x101, 0x5, 0x7f, 0x0, 0xa5125e3, 0x0, 0x2}, r2, 0x9, r1, 0x9) (async) [ 2567.356707] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2567.445380] device batadv1198 entered promiscuous mode [ 2567.492107] 8021q: adding VLAN 0 to HW filter on device batadv1198 [ 2567.547733] bond1199: making interface vlan1037 the new active one [ 2567.563439] bond1199: Enslaving vlan1037 as an active interface with an up link 06:29:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x14be0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:29:51 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x89000000) 06:29:51 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f00000001c0)={0x1fd, 0x0, &(0x7f00005d6000/0x1000)=nil}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x608e9a323b2c48ac}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) 06:29:51 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x100}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x38) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:29:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xb00}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:29:51 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000357000/0x4000)=nil) mmap$dsp(&(0x7f0000858000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000270000/0x1000)=nil) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) r1 = getpgid(0x0) capget(&(0x7f00000003c0)={0x20080522, r1}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0xa64, 0xad, {r1}, {0xffffffffffffffff}, 0x0, 0x10000}) 06:29:51 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xac000000) 06:29:51 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x100}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x38) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 2567.644411] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:29:51 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x100}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async, rerun: 32) mkdir(&(0x7f0000000000)='./file0\x00', 0x38) (async, rerun: 32) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:29:52 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xad000000) 06:29:52 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f00000001c0)={0x1fd, 0x0, &(0x7f00005d6000/0x1000)=nil}) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (rerun: 32) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x608e9a323b2c48ac}) (async) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) [ 2567.791872] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2567.846038] device batadv1199 entered promiscuous mode 06:29:52 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000357000/0x4000)=nil) mmap$dsp(&(0x7f0000858000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000270000/0x1000)=nil) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) r1 = getpgid(0x0) capget(&(0x7f00000003c0)={0x20080522, r1}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0xa64, 0xad, {r1}, {0xffffffffffffffff}, 0x0, 0x10000}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000357000/0x4000)=nil) (async) mmap$dsp(&(0x7f0000858000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000270000/0x1000)=nil) (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) getpgid(0x0) (async) capget(&(0x7f00000003c0)={0x20080522, r1}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0xa64, 0xad, {r1}, {0xffffffffffffffff}, 0x0, 0x10000}) (async) [ 2567.884608] 8021q: adding VLAN 0 to HW filter on device batadv1199 [ 2567.923548] bond1200: making interface vlan1038 the new active one 06:29:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x15be0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:29:52 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xd6000000) 06:29:52 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x1, 0x41564e57, 0x2, @stepwise={0x801, 0x3d6, 0x5, 0x2000004, 0x0, 0x6}}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c653020240ab99731261624e0d4f338d0bd623d5f5a5c7bbbb8c9462186f707858a5d2985"], 0x2c) read$proc_mixer(r2, &(0x7f00000002c0)=""/159, 0x9f) 06:29:52 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f00000001c0)={0x1fd, 0x0, &(0x7f00005d6000/0x1000)=nil}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x608e9a323b2c48ac}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f00000001c0)={0x1fd, 0x0, &(0x7f00005d6000/0x1000)=nil}) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x608e9a323b2c48ac}) (async) gettid() (async) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) (async) [ 2567.964379] bond1200: Enslaving vlan1038 as an active interface with an up link 06:29:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xc00}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:29:52 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000357000/0x4000)=nil) mmap$dsp(&(0x7f0000858000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000270000/0x1000)=nil) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) r1 = getpgid(0x0) capget(&(0x7f00000003c0)={0x20080522, r1}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0xa64, 0xad, {r1}, {0xffffffffffffffff}, 0x0, 0x10000}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000357000/0x4000)=nil) (async) mmap$dsp(&(0x7f0000858000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000270000/0x1000)=nil) (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) getpgid(0x0) (async) capget(&(0x7f00000003c0)={0x20080522, r1}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0xa64, 0xad, {r1}, {0xffffffffffffffff}, 0x0, 0x10000}) (async) [ 2568.018258] FAT-fs (loop2): Directory bread(block 6) failed 06:29:52 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x1, 0x41564e57, 0x2, @stepwise={0x801, 0x3d6, 0x5, 0x2000004, 0x0, 0x6}}) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c653020240ab99731261624e0d4f338d0bd623d5f5a5c7bbbb8c9462186f707858a5d2985"], 0x2c) (async) read$proc_mixer(r2, &(0x7f00000002c0)=""/159, 0x9f) 06:29:52 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xd8000000) [ 2568.087609] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2568.095977] FAT-fs (loop2): Directory bread(block 6) failed 06:29:52 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x1, 0x41564e57, 0x2, @stepwise={0x801, 0x3d6, 0x5, 0x2000004, 0x0, 0x6}}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c653020240ab99731261624e0d4f338d0bd623d5f5a5c7bbbb8c9462186f707858a5d2985"], 0x2c) (async, rerun: 32) read$proc_mixer(r2, &(0x7f00000002c0)=""/159, 0x9f) (rerun: 32) 06:29:52 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(r0, 0x2, &(0x7f0000000140)=[&(0x7f00007ce000/0x2000)=nil, &(0x7f0000232000/0x3000)=nil], &(0x7f00000001c0)=[0x3], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) r1 = syz_mount_image$ntfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x200, 0x1, &(0x7f0000000400)=[{&(0x7f0000000300)="6e13b283f74bff3d3d2f5f1adde4cf341d36c31a83812f0a08a0745aef485a399cb7c02ab3b7e7f54e00ae7f51532af6065241e5e82e804700f7353148ca3eb978956f4fb7b112b504a808702ded60d000d505c637f2d0d3f6b15af14d2a3371abcef4fd5d7d394870637270f34882f9f019ff9626717b7730f85987f5bbd86a0d39daad8a5f3c349e6d3a61a16fa9e336843027eb6c976105905eea5eb528168648b87e3f1071e021fc0e94311b532cda15b4c45ee1e806c1005e9b7001eafa28c9201e501dcc9d34f499f7cbeb1a3a191740326275786865912a5b02d2f6eccb19049917ad85a70d06de186764d8e502", 0xf1, 0x4}], 0x18, &(0x7f0000000440)={[{@errors_continue}, {@fmask}, {@utf8}, {@dmask={'dmask', 0x3d, 0x8000000000000001}}, {@dmask={'dmask', 0x3d, 0x7fff}}, {@case_sensitive_no}], [{@audit}, {@measure}, {@euid_gt={'euid>', 0xee01}}, {@subj_type={'subj_type', 0x3d, '\','}}, {@fowner_lt={'fowner<', 0xee00}}]}) preadv(r1, &(0x7f0000001a40)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/107, 0x6b}, {&(0x7f00000015c0)=""/134, 0x86}, {&(0x7f0000001680)=""/142, 0x8e}, {&(0x7f0000001740)}, {&(0x7f0000001780)=""/182, 0xb6}, {&(0x7f0000001840)=""/113, 0x71}, {&(0x7f00000018c0)=""/241, 0xf1}, {&(0x7f00000019c0)=""/102, 0x66}], 0x9, 0x3f398d4f, 0x711053c9) 06:29:52 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xdc000000) 06:29:52 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000075b000/0x3000)=nil, 0x3000, 0x1000, 0x6, &(0x7f0000ffe000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2568.281605] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2568.356192] device batadv1200 entered promiscuous mode [ 2568.396049] 8021q: adding VLAN 0 to HW filter on device batadv1200 [ 2568.466734] bond1201: making interface vlan1039 the new active one [ 2568.497933] bond1201: Enslaving vlan1039 as an active interface with an up link 06:29:52 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)=@multiplanar_overlay={0x20000, 0x2, 0x4, 0x2, 0xfffffff7, {r2, r3/1000+60000}, {0x2, 0x8, 0x0, 0x81, 0x20, 0xcc, "a9e0c5cf"}, 0x3, 0x3, {&(0x7f0000000100)=[{0x4, 0x3f, {}, 0x1}, {0x6, 0x3f, {0x2}, 0x4}]}}) openat$cgroup_ro(r1, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) 06:29:52 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(r0, 0x2, &(0x7f0000000140)=[&(0x7f00007ce000/0x2000)=nil, &(0x7f0000232000/0x3000)=nil], &(0x7f00000001c0)=[0x3], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) (async) r1 = syz_mount_image$ntfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x200, 0x1, &(0x7f0000000400)=[{&(0x7f0000000300)="6e13b283f74bff3d3d2f5f1adde4cf341d36c31a83812f0a08a0745aef485a399cb7c02ab3b7e7f54e00ae7f51532af6065241e5e82e804700f7353148ca3eb978956f4fb7b112b504a808702ded60d000d505c637f2d0d3f6b15af14d2a3371abcef4fd5d7d394870637270f34882f9f019ff9626717b7730f85987f5bbd86a0d39daad8a5f3c349e6d3a61a16fa9e336843027eb6c976105905eea5eb528168648b87e3f1071e021fc0e94311b532cda15b4c45ee1e806c1005e9b7001eafa28c9201e501dcc9d34f499f7cbeb1a3a191740326275786865912a5b02d2f6eccb19049917ad85a70d06de186764d8e502", 0xf1, 0x4}], 0x18, &(0x7f0000000440)={[{@errors_continue}, {@fmask}, {@utf8}, {@dmask={'dmask', 0x3d, 0x8000000000000001}}, {@dmask={'dmask', 0x3d, 0x7fff}}, {@case_sensitive_no}], [{@audit}, {@measure}, {@euid_gt={'euid>', 0xee01}}, {@subj_type={'subj_type', 0x3d, '\','}}, {@fowner_lt={'fowner<', 0xee00}}]}) preadv(r1, &(0x7f0000001a40)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/107, 0x6b}, {&(0x7f00000015c0)=""/134, 0x86}, {&(0x7f0000001680)=""/142, 0x8e}, {&(0x7f0000001740)}, {&(0x7f0000001780)=""/182, 0xb6}, {&(0x7f0000001840)=""/113, 0x71}, {&(0x7f00000018c0)=""/241, 0xf1}, {&(0x7f00000019c0)=""/102, 0x66}], 0x9, 0x3f398d4f, 0x711053c9) 06:29:52 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xf0ffffff) 06:29:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x16be0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:29:52 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mremap(&(0x7f000075b000/0x3000)=nil, 0x3000, 0x1000, 0x6, &(0x7f0000ffe000/0x1000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:29:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xe00}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:29:52 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)=@multiplanar_overlay={0x20000, 0x2, 0x4, 0x2, 0xfffffff7, {r2, r3/1000+60000}, {0x2, 0x8, 0x0, 0x81, 0x20, 0xcc, "a9e0c5cf"}, 0x3, 0x3, {&(0x7f0000000100)=[{0x4, 0x3f, {}, 0x1}, {0x6, 0x3f, {0x2}, 0x4}]}}) (async) openat$cgroup_ro(r1, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) [ 2568.566158] FAT-fs (loop2): Directory bread(block 6) failed [ 2568.602186] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:29:52 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xfeffffff) [ 2568.638458] FAT-fs (loop2): Directory bread(block 6) failed 06:29:52 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)=@multiplanar_overlay={0x20000, 0x2, 0x4, 0x2, 0xfffffff7, {r2, r3/1000+60000}, {0x2, 0x8, 0x0, 0x81, 0x20, 0xcc, "a9e0c5cf"}, 0x3, 0x3, {&(0x7f0000000100)=[{0x4, 0x3f, {}, 0x1}, {0x6, 0x3f, {0x2}, 0x4}]}}) (async) openat$cgroup_ro(r1, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) 06:29:52 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xffffff7f) 06:29:53 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(r0, 0x2, &(0x7f0000000140)=[&(0x7f00007ce000/0x2000)=nil, &(0x7f0000232000/0x3000)=nil], &(0x7f00000001c0)=[0x3], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) r1 = syz_mount_image$ntfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x200, 0x1, &(0x7f0000000400)=[{&(0x7f0000000300)="6e13b283f74bff3d3d2f5f1adde4cf341d36c31a83812f0a08a0745aef485a399cb7c02ab3b7e7f54e00ae7f51532af6065241e5e82e804700f7353148ca3eb978956f4fb7b112b504a808702ded60d000d505c637f2d0d3f6b15af14d2a3371abcef4fd5d7d394870637270f34882f9f019ff9626717b7730f85987f5bbd86a0d39daad8a5f3c349e6d3a61a16fa9e336843027eb6c976105905eea5eb528168648b87e3f1071e021fc0e94311b532cda15b4c45ee1e806c1005e9b7001eafa28c9201e501dcc9d34f499f7cbeb1a3a191740326275786865912a5b02d2f6eccb19049917ad85a70d06de186764d8e502", 0xf1, 0x4}], 0x18, &(0x7f0000000440)={[{@errors_continue}, {@fmask}, {@utf8}, {@dmask={'dmask', 0x3d, 0x8000000000000001}}, {@dmask={'dmask', 0x3d, 0x7fff}}, {@case_sensitive_no}], [{@audit}, {@measure}, {@euid_gt={'euid>', 0xee01}}, {@subj_type={'subj_type', 0x3d, '\','}}, {@fowner_lt={'fowner<', 0xee00}}]}) preadv(r1, &(0x7f0000001a40)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/107, 0x6b}, {&(0x7f00000015c0)=""/134, 0x86}, {&(0x7f0000001680)=""/142, 0x8e}, {&(0x7f0000001740)}, {&(0x7f0000001780)=""/182, 0xb6}, {&(0x7f0000001840)=""/113, 0x71}, {&(0x7f00000018c0)=""/241, 0xf1}, {&(0x7f00000019c0)=""/102, 0x66}], 0x9, 0x3f398d4f, 0x711053c9) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(r0, 0x2, &(0x7f0000000140)=[&(0x7f00007ce000/0x2000)=nil, &(0x7f0000232000/0x3000)=nil], &(0x7f00000001c0)=[0x3], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) (async) syz_mount_image$ntfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x200, 0x1, &(0x7f0000000400)=[{&(0x7f0000000300)="6e13b283f74bff3d3d2f5f1adde4cf341d36c31a83812f0a08a0745aef485a399cb7c02ab3b7e7f54e00ae7f51532af6065241e5e82e804700f7353148ca3eb978956f4fb7b112b504a808702ded60d000d505c637f2d0d3f6b15af14d2a3371abcef4fd5d7d394870637270f34882f9f019ff9626717b7730f85987f5bbd86a0d39daad8a5f3c349e6d3a61a16fa9e336843027eb6c976105905eea5eb528168648b87e3f1071e021fc0e94311b532cda15b4c45ee1e806c1005e9b7001eafa28c9201e501dcc9d34f499f7cbeb1a3a191740326275786865912a5b02d2f6eccb19049917ad85a70d06de186764d8e502", 0xf1, 0x4}], 0x18, &(0x7f0000000440)={[{@errors_continue}, {@fmask}, {@utf8}, {@dmask={'dmask', 0x3d, 0x8000000000000001}}, {@dmask={'dmask', 0x3d, 0x7fff}}, {@case_sensitive_no}], [{@audit}, {@measure}, {@euid_gt={'euid>', 0xee01}}, {@subj_type={'subj_type', 0x3d, '\','}}, {@fowner_lt={'fowner<', 0xee00}}]}) (async) preadv(r1, &(0x7f0000001a40)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/107, 0x6b}, {&(0x7f00000015c0)=""/134, 0x86}, {&(0x7f0000001680)=""/142, 0x8e}, {&(0x7f0000001740)}, {&(0x7f0000001780)=""/182, 0xb6}, {&(0x7f0000001840)=""/113, 0x71}, {&(0x7f00000018c0)=""/241, 0xf1}, {&(0x7f00000019c0)=""/102, 0x66}], 0x9, 0x3f398d4f, 0x711053c9) (async) 06:29:53 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xfffffff0) [ 2568.774867] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:29:53 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4c01, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f00000002c0)={{r2}, 0x0, 0x4, @unused=[0x8000, 0xffffffffffffff44, 0x2, 0x5], @subvolid=0x8535}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:29:53 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000075b000/0x3000)=nil, 0x3000, 0x1000, 0x6, &(0x7f0000ffe000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mremap(&(0x7f000075b000/0x3000)=nil, 0x3000, 0x1000, 0x6, &(0x7f0000ffe000/0x1000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) 06:29:53 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xfffffffe) [ 2568.866207] device batadv1201 entered promiscuous mode [ 2568.924630] 8021q: adding VLAN 0 to HW filter on device batadv1201 06:29:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x17be0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:29:53 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4c01, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f00000002c0)={{r2}, 0x0, 0x4, @unused=[0x8000, 0xffffffffffffff44, 0x2, 0x5], @subvolid=0x8535}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 2569.032834] bond1202: making interface vlan1040 the new active one [ 2569.056618] bond1202: Enslaving vlan1040 as an active interface with an up link 06:29:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffe}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:29:53 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x1000000000000) 06:29:53 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000609000/0x2000)=nil, 0x2000, 0x10) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) 06:29:53 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x2) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x1) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x4, 0x1, 0x8b}) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:29:53 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4c01, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f00000002c0)={{r2}, 0x0, 0x4, @unused=[0x8000, 0xffffffffffffff44, 0x2, 0x5], @subvolid=0x8535}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 2569.161194] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:29:53 executing program 1: ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x10001) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:29:53 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000609000/0x2000)=nil, 0x2000, 0x10) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) madvise(&(0x7f0000609000/0x2000)=nil, 0x2000, 0x10) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) (async) 06:29:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x18010000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:29:53 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x2) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async, rerun: 64) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x1) (rerun: 64) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x4, 0x1, 0x8b}) (async, rerun: 32) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (rerun: 32) 06:29:53 executing program 1: ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x10001) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 2569.328694] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:29:53 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x4000000000000) 06:29:53 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x2) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x1) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x4, 0x1, 0x8b}) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) pipe(&(0x7f0000000240)) (async) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x2) (async) gettid() (async) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) creat(&(0x7f0000000140)='./file0\x00', 0x1) (async) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x4, 0x1, 0x8b}) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) [ 2569.432079] device batadv1202 entered promiscuous mode [ 2569.471615] 8021q: adding VLAN 0 to HW filter on device batadv1202 06:29:53 executing program 1: ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x10001) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x10001) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) 06:29:53 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000609000/0x2000)=nil, 0x2000, 0x10) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) madvise(&(0x7f0000609000/0x2000)=nil, 0x2000, 0x10) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) (async) 06:29:53 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x100000000000000) 06:29:53 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = getpgid(0x0) capget(&(0x7f00000003c0)={0x20080522, r0}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) move_pages(r0, 0x4, &(0x7f0000000140)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f00005fa000/0x2000)=nil, &(0x7f00003fe000/0x4000)=nil, &(0x7f000055d000/0x1000)=nil], &(0x7f00000001c0)=[0x2, 0x9, 0x42, 0x4], &(0x7f0000000240)=[0x0, 0x0], 0x5) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:29:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1f00}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) [ 2569.571165] bond1203: making interface vlan1041 the new active one [ 2569.584544] bond1203: Enslaving vlan1041 as an active interface with an up link 06:29:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x18be0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:29:53 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_userptr={0x1ea, 0x2, 0x4, 0x20, 0x2, {}, {0x3, 0xc, 0x1, 0x4, 0x9f, 0x7, "f3913218"}, 0x80, 0x2, {&(0x7f0000000100)=[{0x9, 0x0, {}, 0x7ff}, {0xfff, 0x10001, {&(0x7f0000000040)}, 0x732}]}, 0x5}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x6, 0x0, 0x0, 0x0, 0x0}}) [ 2569.706770] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:29:54 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_userptr={0x1ea, 0x2, 0x4, 0x20, 0x2, {}, {0x3, 0xc, 0x1, 0x4, 0x9f, 0x7, "f3913218"}, 0x80, 0x2, {&(0x7f0000000100)=[{0x9, 0x0, {}, 0x7ff}, {0xfff, 0x10001, {&(0x7f0000000040)}, 0x732}]}, 0x5}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x6, 0x0, 0x0, 0x0, 0x0}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_userptr={0x1ea, 0x2, 0x4, 0x20, 0x2, {}, {0x3, 0xc, 0x1, 0x4, 0x9f, 0x7, "f3913218"}, 0x80, 0x2, {&(0x7f0000000100)=[{0x9, 0x0, {}, 0x7ff}, {0xfff, 0x10001, {&(0x7f0000000040)}, 0x732}]}, 0x5}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x6, 0x0, 0x0, 0x0, 0x0}}) (async) 06:29:54 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) r0 = getpgid(0x0) capget(&(0x7f00000003c0)={0x20080522, r0}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) (async) move_pages(r0, 0x4, &(0x7f0000000140)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f00005fa000/0x2000)=nil, &(0x7f00003fe000/0x4000)=nil, &(0x7f000055d000/0x1000)=nil], &(0x7f00000001c0)=[0x2, 0x9, 0x42, 0x4], &(0x7f0000000240)=[0x0, 0x0], 0x5) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:29:54 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x200000000000000) 06:29:54 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_userptr={0x1ea, 0x2, 0x4, 0x20, 0x2, {}, {0x3, 0xc, 0x1, 0x4, 0x9f, 0x7, "f3913218"}, 0x80, 0x2, {&(0x7f0000000100)=[{0x9, 0x0, {}, 0x7ff}, {0xfff, 0x10001, {&(0x7f0000000040)}, 0x732}]}, 0x5}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x6, 0x0, 0x0, 0x0, 0x0}}) [ 2569.893414] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:29:54 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x402000, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={0xffffffffffffffff, r0, 0xfff}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f00007d1000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000026e000/0x1000)=nil) mmap(&(0x7f000071b000/0x1000)=nil, 0x1000, 0x300000b, 0x1010, 0xffffffffffffffff, 0xbb87d000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) process_vm_writev(r1, &(0x7f0000000000), 0x0, &(0x7f0000000340), 0x0, 0x0) r2 = getpgid(0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="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"]) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) r4 = getpgid(0x0) capget(&(0x7f0000000080)={0x20080522, r4}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x81, 0x1, 0x1, 0x6, 0x0, 0x2b, 0xa87cd4e111d11d, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x41d2, 0x6, @perf_config_ext={0x7ffe, 0xa}, 0x4188c, 0x100, 0x0, 0x2, 0xffffffffffff8af6, 0x3, 0x1, 0x0, 0x63, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x1) r5 = getpgid(0x0) capget(&(0x7f00000003c0)={0x20080522, r5}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) capget(&(0x7f00000003c0)={0x20080522, r5}, &(0x7f00000000c0)={0x5, 0x3, 0x16f9, 0x805, 0x9, 0x1ff}) move_pages(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) 06:29:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@can_newroute={0x154, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x5}}, @CGW_CS_CRC8={0x11e, 0x6, {0x0, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "41adf140ba832d3c9e6a7f0ec531997fa3904602"}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "1e669d8949969ac3"}, 0xcb9ff265ecc46966}}]}, 0x154}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) 06:29:54 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x402000, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={0xffffffffffffffff, r0, 0xfff}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f00007d1000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000026e000/0x1000)=nil) mmap(&(0x7f000071b000/0x1000)=nil, 0x1000, 0x300000b, 0x1010, 0xffffffffffffffff, 0xbb87d000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) process_vm_writev(r1, &(0x7f0000000000), 0x0, &(0x7f0000000340), 0x0, 0x0) r2 = getpgid(0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="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"]) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) r4 = getpgid(0x0) capget(&(0x7f0000000080)={0x20080522, r4}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x81, 0x1, 0x1, 0x6, 0x0, 0x2b, 0xa87cd4e111d11d, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x41d2, 0x6, @perf_config_ext={0x7ffe, 0xa}, 0x4188c, 0x100, 0x0, 0x2, 0xffffffffffff8af6, 0x3, 0x1, 0x0, 0x63, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x1) r5 = getpgid(0x0) capget(&(0x7f00000003c0)={0x20080522, r5}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) capget(&(0x7f00000003c0)={0x20080522, r5}, &(0x7f00000000c0)={0x5, 0x3, 0x16f9, 0x805, 0x9, 0x1ff}) move_pages(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x402000, 0x0) (async) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={0xffffffffffffffff, r0, 0xfff}) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f00007d1000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000026e000/0x1000)=nil) (async) mmap(&(0x7f000071b000/0x1000)=nil, 0x1000, 0x300000b, 0x1010, 0xffffffffffffffff, 0xbb87d000) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) (async) process_vm_writev(r1, &(0x7f0000000000), 0x0, &(0x7f0000000340), 0x0, 0x0) (async) getpgid(0x0) (async) socket$phonet(0x23, 0x2, 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="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"]) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) (async) getpgid(0x0) (async) capget(&(0x7f0000000080)={0x20080522, r4}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) (async) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x81, 0x1, 0x1, 0x6, 0x0, 0x2b, 0xa87cd4e111d11d, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x41d2, 0x6, @perf_config_ext={0x7ffe, 0xa}, 0x4188c, 0x100, 0x0, 0x2, 0xffffffffffff8af6, 0x3, 0x1, 0x0, 0x63, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x1) (async) getpgid(0x0) (async) capget(&(0x7f00000003c0)={0x20080522, r5}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) (async) capget(&(0x7f00000003c0)={0x20080522, r5}, &(0x7f00000000c0)={0x5, 0x3, 0x16f9, 0x805, 0x9, 0x1ff}) (async) move_pages(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) (async) [ 2569.975189] device batadv1203 entered promiscuous mode 06:29:54 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) r0 = getpgid(0x0) capget(&(0x7f00000003c0)={0x20080522, r0}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) move_pages(r0, 0x4, &(0x7f0000000140)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f00005fa000/0x2000)=nil, &(0x7f00003fe000/0x4000)=nil, &(0x7f000055d000/0x1000)=nil], &(0x7f00000001c0)=[0x2, 0x9, 0x42, 0x4], &(0x7f0000000240)=[0x0, 0x0], 0x5) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2570.054480] 8021q: adding VLAN 0 to HW filter on device batadv1203 06:29:54 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x300000000000000) [ 2570.148621] bond1204: making interface vlan1042 the new active one [ 2570.178436] bond1204: Enslaving vlan1042 as an active interface with an up link 06:29:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:29:54 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f00003bd000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f000075b000/0x3000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) dup2(r1, r2) 06:29:54 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x402000, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={0xffffffffffffffff, r0, 0xfff}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f00007d1000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000026e000/0x1000)=nil) (async) mmap(&(0x7f000071b000/0x1000)=nil, 0x1000, 0x300000b, 0x1010, 0xffffffffffffffff, 0xbb87d000) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) process_vm_writev(r1, &(0x7f0000000000), 0x0, &(0x7f0000000340), 0x0, 0x0) (async) r2 = getpgid(0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="00f200002e48a335927006b3c26f295d87c3442f66696c653000f76ab4bfe42611e62b3406158189cec3fd9235a9dc83870face27d13ae2376588a6f6f398d5178080cc088a70cab30a88391e25c9a052fbc0dc869d779003e7166edb5230bc90a94bb9da1d2cbe9559788ac4791c46bc80f44411d2dcbc6032a84b0a067e41ce579ccc9b04c1cb2c6d35f0e116f6558d43dcd37cb4af89ae2e2faaf03148ab16c955cefae1904784bdc7c949dab2cd00424ad7de438a0dc66ce7501975d76b6d07948be7964e0e8ba239da0dd72dcd4da4c87e56c904f70336435d7d5c30030183b667342226fd1f900a99465dace427c87da1ce42226b7e7bd779ecc9b533feb6ca3e5318e063b8b7e30719bc35033a85c3e4752f88770a1e6b34adfebd5d8c48163a99d739adccd735d79f9064cbcb76928158a1ec533876e6db85d3beae9fb101a9704e8ebd99f03890bba229546de7f132d28d9017cb489c3c4d817efbbc7329c579996ae1672f5a0d9a19739d2e255dd9e7b3e27c4dd506549ab6a13c8a1d9b8228b2210e11cea41afa6c84331a65ac9e5ae04"]) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) r4 = getpgid(0x0) capget(&(0x7f0000000080)={0x20080522, r4}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x81, 0x1, 0x1, 0x6, 0x0, 0x2b, 0xa87cd4e111d11d, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x41d2, 0x6, @perf_config_ext={0x7ffe, 0xa}, 0x4188c, 0x100, 0x0, 0x2, 0xffffffffffff8af6, 0x3, 0x1, 0x0, 0x63, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x1) (async) r5 = getpgid(0x0) capget(&(0x7f00000003c0)={0x20080522, r5}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) capget(&(0x7f00000003c0)={0x20080522, r5}, &(0x7f00000000c0)={0x5, 0x3, 0x16f9, 0x805, 0x9, 0x1ff}) move_pages(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) 06:29:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x19be0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:29:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@can_newroute={0x154, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x5}}, @CGW_CS_CRC8={0x11e, 0x6, {0x0, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "41adf140ba832d3c9e6a7f0ec531997fa3904602"}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "1e669d8949969ac3"}, 0xcb9ff265ecc46966}}]}, 0x154}}, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) 06:29:54 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() madvise(&(0x7f00002ff000/0x2000)=nil, 0x2000, 0x64) process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f00000034c0)=""/260, 0xf6}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xfe}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/71, 0x47}, {&(0x7f00000022c0)=""/182, 0xb6}, {&(0x7f0000002380)=""/154, 0x9a}], 0x5, 0x7f, 0x8) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000344000/0x1000)=nil, 0x1000, 0x2000000, r1) pkey_alloc(0x0, 0x1) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) [ 2570.279731] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:29:54 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x400000000000000) [ 2570.423236] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2570.487550] device batadv1204 entered promiscuous mode [ 2570.524223] 8021q: adding VLAN 0 to HW filter on device batadv1204 06:29:54 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() madvise(&(0x7f00002ff000/0x2000)=nil, 0x2000, 0x64) process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f00000034c0)=""/260, 0xf6}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xfe}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/71, 0x47}, {&(0x7f00000022c0)=""/182, 0xb6}, {&(0x7f0000002380)=""/154, 0x9a}], 0x5, 0x7f, 0x8) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000344000/0x1000)=nil, 0x1000, 0x2000000, r1) pkey_alloc(0x0, 0x1) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) madvise(&(0x7f00002ff000/0x2000)=nil, 0x2000, 0x64) (async) process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f00000034c0)=""/260, 0xf6}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xfe}], 0x1, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/71, 0x47}, {&(0x7f00000022c0)=""/182, 0xb6}, {&(0x7f0000002380)=""/154, 0x9a}], 0x5, 0x7f, 0x8) (async) pkey_alloc(0x0, 0x1) (async) pkey_mprotect(&(0x7f0000344000/0x1000)=nil, 0x1000, 0x2000000, r1) (async) pkey_alloc(0x0, 0x1) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) (async) 06:29:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@can_newroute={0x154, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x5}}, @CGW_CS_CRC8={0x11e, 0x6, {0x0, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "41adf140ba832d3c9e6a7f0ec531997fa3904602"}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "1e669d8949969ac3"}, 0xcb9ff265ecc46966}}]}, 0x154}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (rerun: 32) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) 06:29:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) [ 2570.633947] bond1205: making interface vlan1043 the new active one [ 2570.650956] bond1205: Enslaving vlan1043 as an active interface with an up link 06:29:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x1abe0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:29:54 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x500000000000000) 06:29:54 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f00003bd000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f000075b000/0x3000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) dup2(r1, r2) 06:29:54 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1, 0x0, 0x20000000, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @vbi={0x9, 0xfffffff7, 0xd9, 0x34343459, [0xe53], [0x8], 0x2}}) 06:29:54 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() madvise(&(0x7f00002ff000/0x2000)=nil, 0x2000, 0x64) (async) process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f00000034c0)=""/260, 0xf6}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xfe}], 0x1, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/71, 0x47}, {&(0x7f00000022c0)=""/182, 0xb6}, {&(0x7f0000002380)=""/154, 0x9a}], 0x5, 0x7f, 0x8) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000344000/0x1000)=nil, 0x1000, 0x2000000, r1) (async) pkey_alloc(0x0, 0x1) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) [ 2570.746597] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:29:55 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1, 0x0, 0x20000000, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @vbi={0x9, 0xfffffff7, 0xd9, 0x34343459, [0xe53], [0x8], 0x2}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1, 0x0, 0x20000000, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @vbi={0x9, 0xfffffff7, 0xd9, 0x34343459, [0xe53], [0x8], 0x2}}) (async) [ 2570.913100] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:29:55 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1, 0x0, 0x20000000, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @vbi={0x9, 0xfffffff7, 0xd9, 0x34343459, [0xe53], [0x8], 0x2}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1, 0x0, 0x20000000, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @vbi={0x9, 0xfffffff7, 0xd9, 0x34343459, [0xe53], [0x8], 0x2}}) (async) 06:29:55 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x700000000000000) [ 2570.992996] device batadv1205 entered promiscuous mode 06:29:55 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap$fb(&(0x7f0000392000/0x3000)=nil, 0x3000, 0x4, 0x20010, 0xffffffffffffffff, 0xc5000) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000548000/0x1000)=nil) r0 = getpgid(0x0) capget(&(0x7f00000003c0)={0x20080522, r0}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) move_pages(r0, 0x7, &(0x7f00000001c0)=[&(0x7f0000880000/0x2000)=nil, &(0x7f00004f5000/0x4000)=nil, &(0x7f000039a000/0x4000)=nil, &(0x7f0000723000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00008ac000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil], &(0x7f0000000240)=[0x200, 0xff, 0x7, 0x2, 0x1fe00000, 0x2, 0x4, 0x2, 0x3, 0x43], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f0000000140)=[0x6, 0x2, 0x20, 0x8, 0x9, 0xffffffff], 0x0, 0x0) [ 2571.033259] 8021q: adding VLAN 0 to HW filter on device batadv1205 06:29:55 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap$fb(&(0x7f0000392000/0x3000)=nil, 0x3000, 0x4, 0x20010, 0xffffffffffffffff, 0xc5000) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000548000/0x1000)=nil) r0 = getpgid(0x0) capget(&(0x7f00000003c0)={0x20080522, r0}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) move_pages(r0, 0x7, &(0x7f00000001c0)=[&(0x7f0000880000/0x2000)=nil, &(0x7f00004f5000/0x4000)=nil, &(0x7f000039a000/0x4000)=nil, &(0x7f0000723000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00008ac000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil], &(0x7f0000000240)=[0x200, 0xff, 0x7, 0x2, 0x1fe00000, 0x2, 0x4, 0x2, 0x3, 0x43], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f0000000140)=[0x6, 0x2, 0x20, 0x8, 0x9, 0xffffffff], 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mmap$fb(&(0x7f0000392000/0x3000)=nil, 0x3000, 0x4, 0x20010, 0xffffffffffffffff, 0xc5000) (async) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000548000/0x1000)=nil) (async) getpgid(0x0) (async) capget(&(0x7f00000003c0)={0x20080522, r0}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) (async) move_pages(r0, 0x7, &(0x7f00000001c0)=[&(0x7f0000880000/0x2000)=nil, &(0x7f00004f5000/0x4000)=nil, &(0x7f000039a000/0x4000)=nil, &(0x7f0000723000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00008ac000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil], &(0x7f0000000240)=[0x200, 0xff, 0x7, 0x2, 0x1fe00000, 0x2, 0x4, 0x2, 0x3, 0x43], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4) (async) gettid() (async) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f0000000140)=[0x6, 0x2, 0x20, 0x8, 0x9, 0xffffffff], 0x0, 0x0) (async) 06:29:55 executing program 1: syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2571.127533] bond1206: making interface vlan1044 the new active one [ 2571.161385] bond1206: Enslaving vlan1044 as an active interface with an up link 06:29:55 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f00003bd000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f000075b000/0x3000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) dup2(r1, r2) 06:29:55 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x800000000000000) 06:29:55 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap$fb(&(0x7f0000392000/0x3000)=nil, 0x3000, 0x4, 0x20010, 0xffffffffffffffff, 0xc5000) (async) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000548000/0x1000)=nil) (async) r0 = getpgid(0x0) capget(&(0x7f00000003c0)={0x20080522, r0}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) move_pages(r0, 0x7, &(0x7f00000001c0)=[&(0x7f0000880000/0x2000)=nil, &(0x7f00004f5000/0x4000)=nil, &(0x7f000039a000/0x4000)=nil, &(0x7f0000723000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00008ac000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil], &(0x7f0000000240)=[0x200, 0xff, 0x7, 0x2, 0x1fe00000, 0x2, 0x4, 0x2, 0x3, 0x43], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4) (async) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f0000000140)=[0x6, 0x2, 0x20, 0x8, 0x9, 0xffffffff], 0x0, 0x0) 06:29:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4800}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:29:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x1bbe0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:29:55 executing program 1: syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) [ 2571.243393] fat__get_entry: 10 callbacks suppressed [ 2571.243404] FAT-fs (loop2): Directory bread(block 6) failed 06:29:55 executing program 1: syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:29:55 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = getpgid(0x0) capget(&(0x7f00000003c0)={0x20080522, r1}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) move_pages(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000294000/0x4000)=nil) [ 2571.320183] FAT-fs (loop2): Directory bread(block 6) failed [ 2571.330091] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:29:55 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@fd={0x4, 0x3, 0x4, 0x800, 0xaf00, {r2, r3/1000+60000}, {0x4, 0x0, 0x6, 0x9, 0x81, 0x6, "b4e86c9c"}, 0x0, 0x4, {}, 0x7, 0x0, r4}) 06:29:55 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x900000000000000) 06:29:55 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@fd={0x4, 0x3, 0x4, 0x800, 0xaf00, {r2, r3/1000+60000}, {0x4, 0x0, 0x6, 0x9, 0x81, 0x6, "b4e86c9c"}, 0x0, 0x4, {}, 0x7, 0x0, r4}) [ 2571.482576] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:29:55 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = getpgid(0x0) capget(&(0x7f00000003c0)={0x20080522, r1}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) move_pages(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000294000/0x4000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) getpgid(0x0) (async) capget(&(0x7f00000003c0)={0x20080522, r1}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) (async) move_pages(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) (async) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000294000/0x4000)=nil) (async) [ 2571.563062] device batadv1206 entered promiscuous mode [ 2571.586643] 8021q: adding VLAN 0 to HW filter on device batadv1206 [ 2571.654765] bond1207: making interface vlan1045 the new active one [ 2571.684540] bond1207: Enslaving vlan1045 as an active interface with an up link 06:29:55 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f00008d4000/0x3000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f00000000c0), 0x0, &(0x7f0000000040), 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:29:55 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@fd={0x4, 0x3, 0x4, 0x800, 0xaf00, {r2, r3/1000+60000}, {0x4, 0x0, 0x6, 0x9, 0x81, 0x6, "b4e86c9c"}, 0x0, 0x4, {}, 0x7, 0x0, r4}) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) (async) openat$cgroup_ro(r4, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@fd={0x4, 0x3, 0x4, 0x800, 0xaf00, {r2, r3/1000+60000}, {0x4, 0x0, 0x6, 0x9, 0x81, 0x6, "b4e86c9c"}, 0x0, 0x4, {}, 0x7, 0x0, r4}) (async) 06:29:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4c00}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:29:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x1cbe0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:29:55 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xa00000000000000) [ 2571.728105] FAT-fs (loop2): Directory bread(block 6) failed 06:29:56 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f00008d4000/0x3000)=nil) (async, rerun: 64) r0 = gettid() (rerun: 64) process_vm_writev(r0, &(0x7f00000000c0), 0x0, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (rerun: 32) 06:29:56 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async, rerun: 32) r1 = getpgid(0x0) (rerun: 32) capget(&(0x7f00000003c0)={0x20080522, r1}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) move_pages(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) (async, rerun: 64) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000294000/0x4000)=nil) (rerun: 64) 06:29:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000100)={0x0, 0x2, 0x5}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 2571.821511] FAT-fs (loop2): Directory bread(block 6) failed [ 2571.844905] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:29:56 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async, rerun: 64) mremap(&(0x7f0000a96000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f00008d4000/0x3000)=nil) (async, rerun: 64) r0 = gettid() process_vm_writev(r0, &(0x7f00000000c0), 0x0, &(0x7f0000000040), 0x0, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:29:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000100)={0x0, 0x2, 0x5}) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:29:56 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap$binder(&(0x7f0000622000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001940)=""/62, 0x3e}, {&(0x7f0000000240)=""/73, 0x49}, {&(0x7f00000002c0)=""/108, 0x6c}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x4, &(0x7f0000001340)=""/134, 0x86}, 0xffffff00}, {{&(0x7f0000001400)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001480)=""/158, 0x9e}, {&(0x7f0000001540)=""/130, 0x82}, {&(0x7f0000001600)=""/54, 0x36}, {&(0x7f0000001640)=""/166, 0xa6}, {&(0x7f0000001700)=""/67, 0x43}], 0x5, &(0x7f0000001800)=""/110, 0x6e}, 0x6}], 0x2, 0x40000000, &(0x7f0000001900)) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) r1 = shmget$private(0x0, 0x4000, 0x20, &(0x7f00006c4000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x2000) 06:29:56 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xf00000000000000) [ 2572.020073] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:29:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000100)={0x0, 0x2, 0x5}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000100)={0x0, 0x2, 0x5}) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) [ 2572.065051] device batadv1207 entered promiscuous mode 06:29:56 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000001c0)={0xa, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 2572.127686] 8021q: adding VLAN 0 to HW filter on device batadv1207 [ 2572.279912] bond1208: making interface vlan1046 the new active one [ 2572.308197] bond1208: Enslaving vlan1046 as an active interface with an up link 06:29:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5865}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:29:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:29:56 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mmap$binder(&(0x7f0000622000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x8) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001940)=""/62, 0x3e}, {&(0x7f0000000240)=""/73, 0x49}, {&(0x7f00000002c0)=""/108, 0x6c}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x4, &(0x7f0000001340)=""/134, 0x86}, 0xffffff00}, {{&(0x7f0000001400)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001480)=""/158, 0x9e}, {&(0x7f0000001540)=""/130, 0x82}, {&(0x7f0000001600)=""/54, 0x36}, {&(0x7f0000001640)=""/166, 0xa6}, {&(0x7f0000001700)=""/67, 0x43}], 0x5, &(0x7f0000001800)=""/110, 0x6e}, 0x6}], 0x2, 0x40000000, &(0x7f0000001900)) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) r1 = shmget$private(0x0, 0x4000, 0x20, &(0x7f00006c4000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x2000) 06:29:56 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x1200000000000000) 06:29:56 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000001c0)={0xa, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:29:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x1dbe0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) [ 2572.344974] FAT-fs (loop2): Directory bread(block 6) failed 06:29:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) [ 2572.415160] FAT-fs (loop2): Directory bread(block 6) failed [ 2572.425253] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:29:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 2572.534798] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2572.567461] device batadv1208 entered promiscuous mode 06:29:56 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap$binder(&(0x7f0000622000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001940)=""/62, 0x3e}, {&(0x7f0000000240)=""/73, 0x49}, {&(0x7f00000002c0)=""/108, 0x6c}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x4, &(0x7f0000001340)=""/134, 0x86}, 0xffffff00}, {{&(0x7f0000001400)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001480)=""/158, 0x9e}, {&(0x7f0000001540)=""/130, 0x82}, {&(0x7f0000001600)=""/54, 0x36}, {&(0x7f0000001640)=""/166, 0xa6}, {&(0x7f0000001700)=""/67, 0x43}], 0x5, &(0x7f0000001800)=""/110, 0x6e}, 0x6}], 0x2, 0x40000000, &(0x7f0000001900)) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) r1 = shmget$private(0x0, 0x4000, 0x20, &(0x7f00006c4000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x2000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mmap$binder(&(0x7f0000622000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x8) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001940)=""/62, 0x3e}, {&(0x7f0000000240)=""/73, 0x49}, {&(0x7f00000002c0)=""/108, 0x6c}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x4, &(0x7f0000001340)=""/134, 0x86}, 0xffffff00}, {{&(0x7f0000001400)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001480)=""/158, 0x9e}, {&(0x7f0000001540)=""/130, 0x82}, {&(0x7f0000001600)=""/54, 0x36}, {&(0x7f0000001640)=""/166, 0xa6}, {&(0x7f0000001700)=""/67, 0x43}], 0x5, &(0x7f0000001800)=""/110, 0x6e}, 0x6}], 0x2, 0x40000000, &(0x7f0000001900)) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) shmget$private(0x0, 0x4000, 0x20, &(0x7f00006c4000/0x4000)=nil) (async) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x2000) (async) 06:29:56 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000001c0)={0xa, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:29:56 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x1600000000000000) [ 2572.587971] 8021q: adding VLAN 0 to HW filter on device batadv1208 06:29:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = socket$netlink(0x10, 0x3, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB="f1cdae42771adbbf37779032fca6907fd8267a24751fdccc0acf34acf5fd416742209541d29abcbbe5184bdbd7b1fe8a9ee442f7b6c4cfb4ea8f3c8df1fcc1c7f7dfd8e7342f0e96a037", @ANYRES16=r3, @ANYBLOB], 0x10c}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r3, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@delqdisc={0xd8, 0x25, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0x2}, {0xf, 0xe}}, [@TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x28, 0x5, 0x4, 0x1, 0x3, 0x1, 0x1}}, {0x6, 0x2, [0x2be1]}}, {{0x1c, 0x1, {0xf9, 0x6, 0x800, 0x7ff, 0x1, 0x1, 0x8, 0x2}}, {0x8, 0x2, [0xffff, 0x7]}}, {{0x1c, 0x1, {0xf7, 0x1, 0xff00, 0x7f, 0x1, 0x8126, 0x8, 0x4}}, {0xc, 0x2, [0x800, 0x406, 0x0, 0x9]}}]}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x80, 0x1, 0x0, 0x2, 0x0, 0x7f, 0x6}}, {0x10, 0x2, [0x4, 0xff, 0x4, 0x2, 0x5, 0x9]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa027}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4041}, 0x15) [ 2572.704567] bond1209: making interface vlan1047 the new active one [ 2572.761740] bond1209: Enslaving vlan1047 as an active interface with an up link 06:29:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:29:57 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = socket$netlink(0x10, 0x3, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB="f1cdae42771adbbf37779032fca6907fd8267a24751fdccc0acf34acf5fd416742209541d29abcbbe5184bdbd7b1fe8a9ee442f7b6c4cfb4ea8f3c8df1fcc1c7f7dfd8e7342f0e96a037", @ANYRES16=r3, @ANYBLOB], 0x10c}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r3, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@delqdisc={0xd8, 0x25, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0x2}, {0xf, 0xe}}, [@TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x28, 0x5, 0x4, 0x1, 0x3, 0x1, 0x1}}, {0x6, 0x2, [0x2be1]}}, {{0x1c, 0x1, {0xf9, 0x6, 0x800, 0x7ff, 0x1, 0x1, 0x8, 0x2}}, {0x8, 0x2, [0xffff, 0x7]}}, {{0x1c, 0x1, {0xf7, 0x1, 0xff00, 0x7f, 0x1, 0x8126, 0x8, 0x4}}, {0xc, 0x2, [0x800, 0x406, 0x0, 0x9]}}]}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x80, 0x1, 0x0, 0x2, 0x0, 0x7f, 0x6}}, {0x10, 0x2, [0x4, 0xff, 0x4, 0x2, 0x5, 0x9]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa027}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4041}, 0x15) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) socket$netlink(0x10, 0x3, 0x15) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB="f1cdae42771adbbf37779032fca6907fd8267a24751fdccc0acf34acf5fd416742209541d29abcbbe5184bdbd7b1fe8a9ee442f7b6c4cfb4ea8f3c8df1fcc1c7f7dfd8e7342f0e96a037", @ANYRES16=r3, @ANYBLOB], 0x10c}}, 0x0) (async) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r3, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@delqdisc={0xd8, 0x25, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0x2}, {0xf, 0xe}}, [@TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x28, 0x5, 0x4, 0x1, 0x3, 0x1, 0x1}}, {0x6, 0x2, [0x2be1]}}, {{0x1c, 0x1, {0xf9, 0x6, 0x800, 0x7ff, 0x1, 0x1, 0x8, 0x2}}, {0x8, 0x2, [0xffff, 0x7]}}, {{0x1c, 0x1, {0xf7, 0x1, 0xff00, 0x7f, 0x1, 0x8126, 0x8, 0x4}}, {0xc, 0x2, [0x800, 0x406, 0x0, 0x9]}}]}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x80, 0x1, 0x0, 0x2, 0x0, 0x7f, 0x6}}, {0x10, 0x2, [0x4, 0xff, 0x4, 0x2, 0x5, 0x9]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa027}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4041}, 0x15) (async) 06:29:57 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000001c0)='net/rt6_stats\x00') r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f00003e7000/0x3000)=nil) mmap$binder(&(0x7f000090c000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x6) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:29:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x1ebe0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:29:57 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x1c00000000000000) 06:29:57 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() r1 = syz_mount_image$ocfs2(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000400)=[{&(0x7f0000000240)="103c04d4c05d8367184aa384e94a2e413067ff98b41a879e4addd7da93ce42deeea58963c8a74dcfd90660f98feef78bec1230d811e02baac2bce3343d3b9c56", 0x40, 0x1bba}, {&(0x7f0000000280), 0x0, 0xffffffffffffa7a0}, {&(0x7f00000002c0)="611bc199b1a0", 0x6, 0x119312f1}, {&(0x7f0000000300)="f0497cc17282b49516a1073d687b1bfa561c0681c920d9ac8966a16442578da2d74230d5fb1073a00dbdb8e023697bfd0bdecf48dd8f065641170c945131f9e813d06fac647d9d2d00f1e7166ef456e39ec03fec0ea0c7f18053945e991ba0234bbeaa101dbf8246e41a9a072f6c06077619261b1c0921797c1d16f96ee0b07652b6f3f56f7304f4c0d303685e7f55d92b8060e87cdb907a098d4a01cae3d745ab48534c5b78f22860120262b226be364ae2afc4804eb30dc04ae519be8b6cbdbbf063b6bfd069", 0xc7, 0x1}], 0x4050, &(0x7f0000000480)={[{')\']'}, {}, {'\\)^!\x95/(^{\''}, {'['}, {'\'\x85[%&[@'}], [{@subj_role={'subj_role', 0x3d, '!:-{*'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@subj_type={'subj_type', 0x3d, '.'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}) mmap(&(0x7f00002a1000/0x3000)=nil, 0x3000, 0x1000000, 0x110, r1, 0xb8cae000) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x0, &(0x7f0000000200), &(0x7f000026bfec), 0x0, 0x6) [ 2572.831713] FAT-fs (loop2): Directory bread(block 6) failed 06:29:57 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() (async) r1 = syz_mount_image$ocfs2(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000400)=[{&(0x7f0000000240)="103c04d4c05d8367184aa384e94a2e413067ff98b41a879e4addd7da93ce42deeea58963c8a74dcfd90660f98feef78bec1230d811e02baac2bce3343d3b9c56", 0x40, 0x1bba}, {&(0x7f0000000280), 0x0, 0xffffffffffffa7a0}, {&(0x7f00000002c0)="611bc199b1a0", 0x6, 0x119312f1}, {&(0x7f0000000300)="f0497cc17282b49516a1073d687b1bfa561c0681c920d9ac8966a16442578da2d74230d5fb1073a00dbdb8e023697bfd0bdecf48dd8f065641170c945131f9e813d06fac647d9d2d00f1e7166ef456e39ec03fec0ea0c7f18053945e991ba0234bbeaa101dbf8246e41a9a072f6c06077619261b1c0921797c1d16f96ee0b07652b6f3f56f7304f4c0d303685e7f55d92b8060e87cdb907a098d4a01cae3d745ab48534c5b78f22860120262b226be364ae2afc4804eb30dc04ae519be8b6cbdbbf063b6bfd069", 0xc7, 0x1}], 0x4050, &(0x7f0000000480)={[{')\']'}, {}, {'\\)^!\x95/(^{\''}, {'['}, {'\'\x85[%&[@'}], [{@subj_role={'subj_role', 0x3d, '!:-{*'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@subj_type={'subj_type', 0x3d, '.'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}) mmap(&(0x7f00002a1000/0x3000)=nil, 0x3000, 0x1000000, 0x110, r1, 0xb8cae000) (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x0, &(0x7f0000000200), &(0x7f000026bfec), 0x0, 0x6) [ 2572.905904] FAT-fs (loop2): Directory bread(block 6) failed [ 2572.931324] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:29:57 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = socket$netlink(0x10, 0x3, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB="f1cdae42771adbbf37779032fca6907fd8267a24751fdccc0acf34acf5fd416742209541d29abcbbe5184bdbd7b1fe8a9ee442f7b6c4cfb4ea8f3c8df1fcc1c7f7dfd8e7342f0e96a037", @ANYRES16=r3, @ANYBLOB], 0x10c}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r3, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@delqdisc={0xd8, 0x25, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0x2}, {0xf, 0xe}}, [@TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x28, 0x5, 0x4, 0x1, 0x3, 0x1, 0x1}}, {0x6, 0x2, [0x2be1]}}, {{0x1c, 0x1, {0xf9, 0x6, 0x800, 0x7ff, 0x1, 0x1, 0x8, 0x2}}, {0x8, 0x2, [0xffff, 0x7]}}, {{0x1c, 0x1, {0xf7, 0x1, 0xff00, 0x7f, 0x1, 0x8126, 0x8, 0x4}}, {0xc, 0x2, [0x800, 0x406, 0x0, 0x9]}}]}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x80, 0x1, 0x0, 0x2, 0x0, 0x7f, 0x6}}, {0x10, 0x2, [0x4, 0xff, 0x4, 0x2, 0x5, 0x9]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa027}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4041}, 0x15) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) socket$netlink(0x10, 0x3, 0x15) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB="f1cdae42771adbbf37779032fca6907fd8267a24751fdccc0acf34acf5fd416742209541d29abcbbe5184bdbd7b1fe8a9ee442f7b6c4cfb4ea8f3c8df1fcc1c7f7dfd8e7342f0e96a037", @ANYRES16=r3, @ANYBLOB], 0x10c}}, 0x0) (async) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r3, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@delqdisc={0xd8, 0x25, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0x2}, {0xf, 0xe}}, [@TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x28, 0x5, 0x4, 0x1, 0x3, 0x1, 0x1}}, {0x6, 0x2, [0x2be1]}}, {{0x1c, 0x1, {0xf9, 0x6, 0x800, 0x7ff, 0x1, 0x1, 0x8, 0x2}}, {0x8, 0x2, [0xffff, 0x7]}}, {{0x1c, 0x1, {0xf7, 0x1, 0xff00, 0x7f, 0x1, 0x8126, 0x8, 0x4}}, {0xc, 0x2, [0x800, 0x406, 0x0, 0x9]}}]}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x80, 0x1, 0x0, 0x2, 0x0, 0x7f, 0x6}}, {0x10, 0x2, [0x4, 0xff, 0x4, 0x2, 0x5, 0x9]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa027}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4041}, 0x15) (async) 06:29:57 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) syz_open_procfs(r0, &(0x7f00000001c0)='net/rt6_stats\x00') (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f00003e7000/0x3000)=nil) (async) mmap$binder(&(0x7f000090c000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x6) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:29:57 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() r1 = syz_mount_image$ocfs2(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000400)=[{&(0x7f0000000240)="103c04d4c05d8367184aa384e94a2e413067ff98b41a879e4addd7da93ce42deeea58963c8a74dcfd90660f98feef78bec1230d811e02baac2bce3343d3b9c56", 0x40, 0x1bba}, {&(0x7f0000000280), 0x0, 0xffffffffffffa7a0}, {&(0x7f00000002c0)="611bc199b1a0", 0x6, 0x119312f1}, {&(0x7f0000000300)="f0497cc17282b49516a1073d687b1bfa561c0681c920d9ac8966a16442578da2d74230d5fb1073a00dbdb8e023697bfd0bdecf48dd8f065641170c945131f9e813d06fac647d9d2d00f1e7166ef456e39ec03fec0ea0c7f18053945e991ba0234bbeaa101dbf8246e41a9a072f6c06077619261b1c0921797c1d16f96ee0b07652b6f3f56f7304f4c0d303685e7f55d92b8060e87cdb907a098d4a01cae3d745ab48534c5b78f22860120262b226be364ae2afc4804eb30dc04ae519be8b6cbdbbf063b6bfd069", 0xc7, 0x1}], 0x4050, &(0x7f0000000480)={[{')\']'}, {}, {'\\)^!\x95/(^{\''}, {'['}, {'\'\x85[%&[@'}], [{@subj_role={'subj_role', 0x3d, '!:-{*'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@subj_type={'subj_type', 0x3d, '.'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}) mmap(&(0x7f00002a1000/0x3000)=nil, 0x3000, 0x1000000, 0x110, r1, 0xb8cae000) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x0, &(0x7f0000000200), &(0x7f000026bfec), 0x0, 0x6) 06:29:57 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000001c0)='net/rt6_stats\x00') r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f00003e7000/0x3000)=nil) (async) mmap$binder(&(0x7f000090c000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x6) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:29:57 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000002c0)={0x2, @sdr={0x39555659, 0x6}}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1020}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 2573.167173] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2573.226076] device batadv1209 entered promiscuous mode [ 2573.258202] 8021q: adding VLAN 0 to HW filter on device batadv1209 06:29:57 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x1d00000000000000) 06:29:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_proto_private(r0, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x3, 0xa) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=r5, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r0], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\"J^~', @ANYRES16=r4, @ANYBLOB='\x00'/11, @ANYRES32=r2, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) vmsplice(r0, &(0x7f0000001580)=[{&(0x7f0000000240)="bdf5a459458f88a338219f792e525bf8b393de54dabc6fb2402d7f6decad83aceec432556506d7d9c8341049aa190ab42a66fd528930591f219f5259808e05858001e6b6b8b607dcb335c4c8ca195606cb8ea5a4ab2bb870ad5fdc91", 0x5c}, {&(0x7f0000000140)="c9c2dd49abaede62f5b102a4efb17c03aca64198765cc823b0b51f9196cd370be4fa41990832b70b0ef387f1be91db989e5fb9745e8ed3f36ceeca21", 0x3c}, {&(0x7f00000002c0)="7a5ffb47fac76087394a1ba2dd2f7e12214ac20f7677782eb999c2ef9462f88fca09c1d566488ae80d9964dbd1d7d2a92c9a7ea1f4007801dfd1d535122b326fc6c635827a53e2cba6c98f899dec92defe950f068c1d0b28e4a78cb89a28a6d9f05432ada04da5776bfbedd8e939b0fe2ae24857702a0d76dedd1af518320ec3745a5ef5090531dd52d2b7ebb07f05eaa2840a8c8de31be3c5ca7f2360c3", 0x9e}, {&(0x7f00000001c0)="769ce156589acf", 0x7}, {&(0x7f0000000380)="fbdfe97e8d1b109fcdd5e553990dbfb735bea58873eadfce6d762c9a8ee4f36e9c455e218df0325201330f5c743423c9a444b80d6f888a76e1e2db2fbee9957b54e2f14d1b97c0e29036d32df8450f77794d25f2f310609421336f85e73aee23ea727f4823444ee5bf6ae224bb713f08913cb2cf26c8c3efe7ecadb71833deacdd7e1ed067b0c9c6415bab509ade6de0ccfcd49cbe36ab8cede4139e0c0f733f944a241b4f62144843a916b41985c1e0a480e8eeb1d1119f7388ef23", 0xbc}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)}, {&(0x7f0000001480)="d9463fd37b4c6b1ac1bdf4052f77b76a483b8cc955d55e3370560bffb3683ba835d3042bfce6ae6e32388a8aa19745f607bc4f871530538ce3495753952171ff8139a173a2db479cccf265ae93952c3e868ba7982e5d88c88ca86188e818064655e6d2d94545925cb6c844bdf417fc16f98a16fd59cd0b92c4670f4de0a647b488b2fb28666822cd71af69cb6e1854a3676a9814b3a856ccf25cd72a20520d7b52bb28a12f8c74470b1fd16efc504d3fa452c35ae07540a6d6b44cbd196b69d3357768ee834f477986", 0xc9}], 0x8, 0x2) mmap$fb(&(0x7f0000141000/0x1000)=nil, 0x1000, 0x1000002, 0x810, 0xffffffffffffffff, 0xfb000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r8 = getpid() move_pages(r8, 0x1, &(0x7f0000000200)=[&(0x7f0000536000/0x4000)=nil], &(0x7f000026bfec), 0x0, 0x0) 06:29:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6558}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:29:57 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000002c0)={0x2, @sdr={0x39555659, 0x6}}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1020}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:29:57 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = getpid() move_pages(r0, 0x7, &(0x7f0000000140)=[&(0x7f0000418000/0x13000)=nil, &(0x7f00001c5000/0x2000)=nil, &(0x7f000019f000/0x3000)=nil, &(0x7f000019c000/0x1000)=nil, &(0x7f0000523000/0x4000)=nil, &(0x7f0000000000/0xc00000)=nil, &(0x7f0000255000/0x4000)=nil], &(0x7f00000001c0)=[0x6, 0x8, 0x5868, 0x7fffffff, 0x6, 0x9, 0x6], &(0x7f0000000240)=[0x0, 0x0], 0x6) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:29:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x1f000000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) [ 2573.301515] bond1210: making interface vlan1048 the new active one [ 2573.313548] bond1210: Enslaving vlan1048 as an active interface with an up link [ 2573.340587] FAT-fs (loop2): Directory bread(block 6) failed 06:29:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_proto_private(r0, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x3, 0xa) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=r5, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r0], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\"J^~', @ANYRES16=r4, @ANYBLOB='\x00'/11, @ANYRES32=r2, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) vmsplice(r0, &(0x7f0000001580)=[{&(0x7f0000000240)="bdf5a459458f88a338219f792e525bf8b393de54dabc6fb2402d7f6decad83aceec432556506d7d9c8341049aa190ab42a66fd528930591f219f5259808e05858001e6b6b8b607dcb335c4c8ca195606cb8ea5a4ab2bb870ad5fdc91", 0x5c}, {&(0x7f0000000140)="c9c2dd49abaede62f5b102a4efb17c03aca64198765cc823b0b51f9196cd370be4fa41990832b70b0ef387f1be91db989e5fb9745e8ed3f36ceeca21", 0x3c}, {&(0x7f00000002c0)="7a5ffb47fac76087394a1ba2dd2f7e12214ac20f7677782eb999c2ef9462f88fca09c1d566488ae80d9964dbd1d7d2a92c9a7ea1f4007801dfd1d535122b326fc6c635827a53e2cba6c98f899dec92defe950f068c1d0b28e4a78cb89a28a6d9f05432ada04da5776bfbedd8e939b0fe2ae24857702a0d76dedd1af518320ec3745a5ef5090531dd52d2b7ebb07f05eaa2840a8c8de31be3c5ca7f2360c3", 0x9e}, {&(0x7f00000001c0)="769ce156589acf", 0x7}, {&(0x7f0000000380)="fbdfe97e8d1b109fcdd5e553990dbfb735bea58873eadfce6d762c9a8ee4f36e9c455e218df0325201330f5c743423c9a444b80d6f888a76e1e2db2fbee9957b54e2f14d1b97c0e29036d32df8450f77794d25f2f310609421336f85e73aee23ea727f4823444ee5bf6ae224bb713f08913cb2cf26c8c3efe7ecadb71833deacdd7e1ed067b0c9c6415bab509ade6de0ccfcd49cbe36ab8cede4139e0c0f733f944a241b4f62144843a916b41985c1e0a480e8eeb1d1119f7388ef23", 0xbc}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)}, {&(0x7f0000001480)="d9463fd37b4c6b1ac1bdf4052f77b76a483b8cc955d55e3370560bffb3683ba835d3042bfce6ae6e32388a8aa19745f607bc4f871530538ce3495753952171ff8139a173a2db479cccf265ae93952c3e868ba7982e5d88c88ca86188e818064655e6d2d94545925cb6c844bdf417fc16f98a16fd59cd0b92c4670f4de0a647b488b2fb28666822cd71af69cb6e1854a3676a9814b3a856ccf25cd72a20520d7b52bb28a12f8c74470b1fd16efc504d3fa452c35ae07540a6d6b44cbd196b69d3357768ee834f477986", 0xc9}], 0x8, 0x2) mmap$fb(&(0x7f0000141000/0x1000)=nil, 0x1000, 0x1000002, 0x810, 0xffffffffffffffff, 0xfb000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r8 = getpid() move_pages(r8, 0x1, &(0x7f0000000200)=[&(0x7f0000536000/0x4000)=nil], &(0x7f000026bfec), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_proto_private(r0, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$inet6(0xa, 0x3, 0xa) (async) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=r5, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r0], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\"J^~', @ANYRES16=r4, @ANYBLOB='\x00'/11, @ANYRES32=r2, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) (async) vmsplice(r0, &(0x7f0000001580)=[{&(0x7f0000000240)="bdf5a459458f88a338219f792e525bf8b393de54dabc6fb2402d7f6decad83aceec432556506d7d9c8341049aa190ab42a66fd528930591f219f5259808e05858001e6b6b8b607dcb335c4c8ca195606cb8ea5a4ab2bb870ad5fdc91", 0x5c}, {&(0x7f0000000140)="c9c2dd49abaede62f5b102a4efb17c03aca64198765cc823b0b51f9196cd370be4fa41990832b70b0ef387f1be91db989e5fb9745e8ed3f36ceeca21", 0x3c}, {&(0x7f00000002c0)="7a5ffb47fac76087394a1ba2dd2f7e12214ac20f7677782eb999c2ef9462f88fca09c1d566488ae80d9964dbd1d7d2a92c9a7ea1f4007801dfd1d535122b326fc6c635827a53e2cba6c98f899dec92defe950f068c1d0b28e4a78cb89a28a6d9f05432ada04da5776bfbedd8e939b0fe2ae24857702a0d76dedd1af518320ec3745a5ef5090531dd52d2b7ebb07f05eaa2840a8c8de31be3c5ca7f2360c3", 0x9e}, {&(0x7f00000001c0)="769ce156589acf", 0x7}, {&(0x7f0000000380)="fbdfe97e8d1b109fcdd5e553990dbfb735bea58873eadfce6d762c9a8ee4f36e9c455e218df0325201330f5c743423c9a444b80d6f888a76e1e2db2fbee9957b54e2f14d1b97c0e29036d32df8450f77794d25f2f310609421336f85e73aee23ea727f4823444ee5bf6ae224bb713f08913cb2cf26c8c3efe7ecadb71833deacdd7e1ed067b0c9c6415bab509ade6de0ccfcd49cbe36ab8cede4139e0c0f733f944a241b4f62144843a916b41985c1e0a480e8eeb1d1119f7388ef23", 0xbc}, {&(0x7f0000000440)="99e221ccb860a83d88f36d08630a9488a00c94acf57259b29ccbb8676f2beb3e830acfa152f4e0ecba2c66f11918daad115998e56c8cef483e74710b6a329ab5d21ee2cc09124d62df83b34e7748a34e7701f9f59861e9d80543271a75dc3d46e057afedf8e36c9e73acc250e809412421ee09310ba43adff784569816344dfc57d9edeed11824b2f174336c0c88de0a35cead637f52a118c1c847ee8a34d4f8453c42173e49fadcef39c6df9b3d58e74e007bb35b84ec072b2e6a18c187b12342ac81ed2ed3d36f04875e4976dac9e8fd3d744b55db4bab0b60498d625ba8d1f5d18a8daf345c9664004c72e69278fd3e605f4ac395af5e5b430b099eee63a163bed3fffa10fc942015eb001edc6864fd2e44195c836a6a12ee3cf8f170a4f96371e46656210dd85391cb30684efdc1749636021019bb156e357f49bcc0e26937ae452bc36a21ff4fcb927d344fd9276e6c4689a6f9677f107fd058c6e2439126613aaaf3c3433230756e349153ba583bf98abdb06c3ecb937db2f42e3bdbf810d16e0f1bae28456b8467727cdbfecd20b89ca210d98ec09448cccd3b54ed9a0514b72cf19b6340e597ae9b8897f48c2e03e2cb8b2928c8496565606e8031c783935e9d414bb73e085e3ec78df6aa7ac786648e5db75d4950e7638d085f70443cdf2fc167ed9c2e3c41347786a76b1f4b42f67c81c095f0b79870d15a21809ce8b0e0a86e07e3941dc5262fc5102d6c32a070a325c3d4eb7b0dc3a31951bb14427c4c15810d4c30ab6d998c92d0dd84c5604580248ccd99c538a56a3c77c13c56bfba5152732d0359174c34634181c20eb79734dd957cc072d8bbb54cd65c73098f39ffea4e36f0737e8734635b6be39dbb0d2f1c4d75dffde8dcdd5f7d923d630b9bddb29058f8f7fa6ecc0c08e8ed52a9b6da9b0bf767b9dd90d2a51790d0ec0285a6b55d3b6d4347974316dfa2649cff0a508dda7468840cb12477c5ded5e4def0daaef8c79b750cb64e69afa452b58dc46a417b2bafc35ff754fcdbf20154b57535a7816a4fbd83547016e66aa513ea43af1408065ef7832fbeac5aa0b05c8e5a35c57b9c84297d770b0fb308cf9d63633b2c5a0f0fc288dee7b676337018b48e9f76f832d973da573a7de239b852b7c8a2f0cdb85790f5fbfce83aa1d2564fedf5b58123319a11aa8bfcb575009db60a7ee701d188466421eb22c6e2e580e1b69145d9299cd65ed9d992b43b5aa14ea8958254b849dfaf7778a40754cf55822164512a25c971c919452b5d3f06d3990dabf66da6c72e76442a8cef721f9c97d47a45bc0a46334b5ac4217e3efe3d328c2b9f1cdd4cec14a05d265970c9c6d6aafd13d00da5def3414378311d19cf6e9ba146edc35b182800e48945a8b524249ce0186ac097342ad27430fba913baf157850e3542fe988a518fc4038170bacb16344a7849ecf5a61eb756a1e7cfb43e59e55fee44e6e98fdee68b417a8b62fb00a487e499186e004f6cdd61f1fbf67c42eb56d44283c1d7675f9aed27769881782f908cfbf599c56d81a4535aed154dcc6fb54a71daca0ae305ad7d525db07d5e7885cb95ef4e6c94e7fb50321585f185dc5419c5a5aa9901f22a4dc97dd6ed632aa3cf8564b6783c0948828b192f9b0246f11ec3ea01163356bded9995c58eeb5f1f247000df7baaa76c0eb180d733ccb110c17d7c1eee01a69b7ef1488e7631767ad60d51cb744803b8923d0e84d406c64b89b00a8ebbd1a1c00a6f80246a4b4e329fe6ba5587f40ded7233fa5edbfe37eb0fd27974c4fc778cc1cc95163f970ce34aa385452fcd686f67681d6fc41ba30fbfe1cdf9a7ca967d3476cbada51808de268ab9f29fdd47953093301927664220b2935c7766554b47d06345b06bb2ea6dc024000715477e4504933a60db318d3896ebf378c8831adc4504b77b6f8291ea52ce9b584216f3b9b54cefc114b98bd395db58772d544b5e2fc04bc91390fcd487f3397f01d37fd564061c349f9053f75b27155ab2752444ea54e1691d90b7c714505dfcaca2300b32ed364bcf0dd260f0adb7640166cd6e4ff432618dc4118b395e53dbf7c7945bd6d89396360cb4ca3220ec0042eded0b0d629290a63858f0705222d3a700fdfeff10431a321641bbd866143199b281fc5f91cf92325543f4f55605c5cf891ef6cac009c8a26a3729c197909ae68df4c1e0312ef41ac22f741c64bfc13aea42c89a4e463949465ff5a182a2e1f384678d3ee5b854b5077eade049c7874adb8546f1e31d3608f1c01fafbfbc8a59a50c81c7744e0677107c058182e0999780dabbc414b9f5d555e27f2e38b72a3628a2343441afeac1b9416f6cad4958c69932ac4f2ab7c70cffe6d1170ab410e7606d6cfddb9e9dadce20e0f351c0dbc7341a789fd86a2e358c460138ef1a67e0b24fad5d909eb4a947929ef5e0fb23f9e8621da0657923e769192b50df08eddceaf2e12553af80f960af834f97d6653d4c366f9626912d93ec2977b45b543806febdea9795d6d2059135652cd8468fdb411e90ade069025fe46504717275f4c776259ce8124e80fa18e40e37126304e3ea4586ffeeb602fbe10db92426f27b92dcab4d381b73b0849778fedb5cd82ad60071d9c038439353edf28e7f5abe8c84c267471286fa5cce14d50bc33504ec57c11474eae5e412211b1f3be64f7c87642efd0f318fc15e0ddd330909e82a57087ebdd3c8645ad65004d9f403c925b0ae12e1020f95db237af76da7f51711c95765a67200373c7acf3b06b6cbe6c9895ee1105f7d5654d9b1c77798d0d3475d7ed36b05fa4c52b26d351a28794d572977444691deec2f8db3e33ea01e895f0ac05bbf57e841884e104d580bab65f189db629021c4788fafbd4ab43dc7115800db3709f0d8cee0a5dfd8f12613e33d47f6a9af6e84e041f6c7716f9f62c54d6dbb5bd2fb757ba9858caee3172e2313a5f2d0f553e8917f5d3b53d17e0b46fa9a7b8fdaaa5d7b35a5c7c6535165ef8d72dc58fcd16b90cb76e996e2e8e585208e16a3b932071c4e9cc6053e96a253cfeb794c83f5a618d9fed4518f3ca0a610b671a7f6985d77c90ba56cd2d58bacc91edb6f0cfbb980b910ddcfb1ba3ecb516f8b3459d2e62ccbe3153a161c66b2a16b6e63e76de74e3eb38b4b418739ab7f6109389cd473374b292e9346a5d087fe7e8520089f46a937146cafa487d5c2a61ec3a9f196bc96b33c8d9ab455abd299476b2ec8bc3286df361d312d4b5c6b40b9bdf5da2ff92ea7c53c044ced2de27938b22ae4678177828aed7276e7060e07363058c650d4fe032960e19cc07f6bb22a57ae3cf74f24fca2e63c3233ae058950f228408b797abf124a64ca86d95f7f0198397a7240344e3b36fc2c8029ab7f69b3fae8aab1d4922a5b4e9b545a5a79e7053b3fa145569c48b5aa1376a90557b2d5bfd382e45c1bd4dfe20ab4629221a2931cf42eb3d0284da21d6bad3163d6a01e4d48cc34fd140dfdd05e3014fc58d632f37b6c59e0899af8ea45da516b9ef92c83d8d153cc615fceab8727d6b533e48f0748ce6435955906629c508efbdf06fc43f4d004a17f881845a3a851fb735531a4ac012b97b92e33fa42a96cbd9cf1ad12a1c9f46e01ae7123e7f93126f59f9bce5458864d08598cb39c1dc0743ff80c1d30deb4d32af0bf089aef345e387f7b76eaa53c048bb70c9e82bb4adf75738617062539d7730def3e47dd98a08e64b282490504092a7d5dfea2919731605a38a22a534120da2e1328233f6467f2761262696d8af3ca5a9bcbeefe19a7c83542d737b41deedb29f698c14299bdab4983ca12bb1363ba5627b16016fb5d2d9d316dc752aae876ef14f66fd09dbfd5b2f81a1eb35c0073fda4e0b843b5358b6e79eb258388a77d4f9f3681e82d21561745af787eea2ccb36b15ee727cee76ca48b869fa5462d403ac6d93728fd571aba76083fad51beb15c58c900e173a26bff898a77932ef77acf684a16a85c0d280a559480881732228dfab2ab21a5b187fed838a2c88fd17737ecd3596da4bff3c51815bd7687ece7969f649070b2db7cfb296d0da63bf0401952c1f32d8ee426e1a24ed439ac180e903e1d89a449d95a4b598db24334acce6681aaebcf74116a13851c09accac3aac7a1890f2a4e6b9e22ced9b23e6b8e1c2b3b388b6e69ccd21fe37fce86d91a91c16529cc7047230d9d72c4568b36d27604baf1383a757b5ec5d7ace00786f923acec4176987c1d2888ade1c5d088ef2acf4c3f34129e2e1d90aab88d6bd925f032f9b3ac2bed84d42bd618315ddb0501ab18bb134abaef89ffc180b452766f7be3583287698bd4f83808bed573aa65cbaf2db6fa15decb789df205f7d173b79172b9ae246814fa07548e2d66d3547892f13881da82d6d8951705200706fe252b7e998923e76984c6ef080de6c117077400dc430ce16b2530aea0d56e383ef41e7413946a60ea2ad5d3f34317c9a7adc77fb42617baca3e79f519aee639913d055b1a1ec7ac44b4097730b6fbbe80f4b46ad03c79448887eb1999b97eee42f74629c9bdf4d64ddf3f5837eaa4075e4c2881ffad076410d587c020bcca5a95604fd4025d83cf6bd6d6966702ff2128602737d51081da006f933beb174e50c4534ac69a3a3e4eba66635f67e16dab59b44ee7cbbbf646e899ce58f6e8d445c0955b285d79d10ea7e78dbb6d89d25f3bed5e8fd9c70225286187f053277232731e626f8fe5fab04a693af18918888079f10631a93b9752896a114d0407ac50ff1faf434f1fa9a869437d209da5c64d333f60f257d1b1213f833f3cf847ba377fc964cdc9dc247f83d725ba3818699c2fb8c387bf2a3cc66e13352b6873cb2ffcca3bc1316047bc6c523d512ebc76760a0874f12e748b6c6b3779228ced2c83aa678b53ce60ac2b2005821486a760b9de821098eabdeb83ba74c1e1a70b2350206cdd679f8951503e6b21e14dd3ffff0664c6d17eed2df8e0d6e95cb371aec9e4d328c8c0e43acf469e9262149d55b9dee07e85ff26a9a71a8c8647df366846c6eb76b410972b3d69f637411c4c740a173799161a95b3478a05ad64674d9159595f9a4bd050607f4251e935d218f7fa219eedafafc3f799df67fae4aa168361a5692400e5566785d75e96e8653564875500cbc7fe63696398f3423fa152f73dbdae22b824df3a3df637bc47faceba659d4a789184c4f1034bfc7417bf30e9dd54c12b7d35e49350c17567c458ce4620a88fbb73430ce21e95016a437135c3749b36860e7b525bf5f03127812f73af448a1f686796da42185150b322eaf5df9eaefcf7242c551ed6ae9047b424bed5cbfee7eb918eb6441c8fb7603b8f340c903c0cbfe1ef469a71acea4e1a12ae302ebe993df9043a29c35631b82c1b928c98b0250a4843f4fcf68759e5bd32843ec693ee6c766117fc3c13f1b657fde7a70a6b670b9c749e641f1d609b1566666eb9ba80966f5b522a60eed68cd54c2168bb4e6c6588eaed12b20043c762c617c2dd16f450f0bcdb9c4f1ea5b68cd03a7a251cb1292841d072104b25aeafc873b2332a1b3efc802704639e7d280f6e6d002e83ffba07767f743c6d85edfd3047b062ce5bf2d4b9cd361dbbd2c26bcb051f464057d20b92ecb44c61132207e83882f7b3fb28dedf2d739b792f6e20c8eaaa2e0deeec3144bb59c6ef770aec3b53920f577183b64e691c8ce9e4bbb027f0eed19539a81df1d673b06fcd088ff805aa1798b0fdee557ab306a9260cdb083e31da9649ed", 0x1000}, {&(0x7f0000001440)}, {&(0x7f0000001480)="d9463fd37b4c6b1ac1bdf4052f77b76a483b8cc955d55e3370560bffb3683ba835d3042bfce6ae6e32388a8aa19745f607bc4f871530538ce3495753952171ff8139a173a2db479cccf265ae93952c3e868ba7982e5d88c88ca86188e818064655e6d2d94545925cb6c844bdf417fc16f98a16fd59cd0b92c4670f4de0a647b488b2fb28666822cd71af69cb6e1854a3676a9814b3a856ccf25cd72a20520d7b52bb28a12f8c74470b1fd16efc504d3fa452c35ae07540a6d6b44cbd196b69d3357768ee834f477986", 0xc9}], 0x8, 0x2) (async) mmap$fb(&(0x7f0000141000/0x1000)=nil, 0x1000, 0x1000002, 0x810, 0xffffffffffffffff, 0xfb000) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) getpid() (async) move_pages(r8, 0x1, &(0x7f0000000200)=[&(0x7f0000536000/0x4000)=nil], &(0x7f000026bfec), 0x0, 0x0) (async) 06:29:57 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000002c0)={0x2, @sdr={0x39555659, 0x6}}) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1020}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 2573.397207] FAT-fs (loop2): Directory bread(block 6) failed [ 2573.416641] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:29:57 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = socket(0xf, 0x800, 0xc8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_proto_private(r2, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x3, 0xa) r8 = openat$incfs(0xffffffffffffffff, &(0x7f0000000340)='.pending_reads\x00', 0x400000, 0x98) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000180)={'lo\x00', @ifru_flags=0x800}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRESDEC=r7, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r2], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\"J^~', @ANYRES16=r6, @ANYBLOB='\x00'/11, @ANYRES32=r4, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) write$binfmt_misc(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="c273797a30205cfb038d6b87fc91b6a88b0cccc48e13ff964f5b55a1dd6ffae47720de56f11385aae248a3"], 0x26) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x5, 0xffffff81, 0x4, {0x0, @sliced={0x1, [0x2c, 0x6, 0x8000, 0x4, 0x8f5, 0x5, 0x0, 0x0, 0x0, 0x4, 0x400, 0xfffc, 0x8, 0x20, 0x7, 0x9, 0x0, 0x9, 0xfffc, 0xd060, 0x0, 0x7fff, 0x2, 0x0, 0x2, 0x2, 0x1, 0xff, 0x2, 0x7, 0x4, 0x0, 0xf31, 0x6, 0xf32, 0x81, 0xa, 0x7, 0x80, 0x3, 0x6, 0x7, 0x800, 0xadad, 0x6, 0xe68, 0x3, 0x5], 0x80}}, 0x6}) [ 2573.507553] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:29:57 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = getpid() move_pages(r0, 0x7, &(0x7f0000000140)=[&(0x7f0000418000/0x13000)=nil, &(0x7f00001c5000/0x2000)=nil, &(0x7f000019f000/0x3000)=nil, &(0x7f000019c000/0x1000)=nil, &(0x7f0000523000/0x4000)=nil, &(0x7f0000000000/0xc00000)=nil, &(0x7f0000255000/0x4000)=nil], &(0x7f00000001c0)=[0x6, 0x8, 0x5868, 0x7fffffff, 0x6, 0x9, 0x6], &(0x7f0000000240)=[0x0, 0x0], 0x6) (async) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:29:57 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x2000000000000000) [ 2573.598703] device batadv1210 entered promiscuous mode 06:29:57 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = getpid() move_pages(r0, 0x7, &(0x7f0000000140)=[&(0x7f0000418000/0x13000)=nil, &(0x7f00001c5000/0x2000)=nil, &(0x7f000019f000/0x3000)=nil, &(0x7f000019c000/0x1000)=nil, &(0x7f0000523000/0x4000)=nil, &(0x7f0000000000/0xc00000)=nil, &(0x7f0000255000/0x4000)=nil], &(0x7f00000001c0)=[0x6, 0x8, 0x5868, 0x7fffffff, 0x6, 0x9, 0x6], &(0x7f0000000240)=[0x0, 0x0], 0x6) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2573.639957] 8021q: adding VLAN 0 to HW filter on device batadv1210 [ 2573.713962] bond1211: making interface vlan1049 the new active one 06:29:57 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x2b00000000000000) 06:29:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x1fbe0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) [ 2573.764123] bond1211: Enslaving vlan1049 as an active interface with an up link 06:29:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6800}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:29:58 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) r1 = socket(0xf, 0x800, 0xc8) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_proto_private(r2, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r7 = socket$inet6(0xa, 0x3, 0xa) r8 = openat$incfs(0xffffffffffffffff, &(0x7f0000000340)='.pending_reads\x00', 0x400000, 0x98) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000180)={'lo\x00', @ifru_flags=0x800}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRESDEC=r7, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r2], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\"J^~', @ANYRES16=r6, @ANYBLOB='\x00'/11, @ANYRES32=r4, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) (async) write$binfmt_misc(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="c273797a30205cfb038d6b87fc91b6a88b0cccc48e13ff964f5b55a1dd6ffae47720de56f11385aae248a3"], 0x26) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x5, 0xffffff81, 0x4, {0x0, @sliced={0x1, [0x2c, 0x6, 0x8000, 0x4, 0x8f5, 0x5, 0x0, 0x0, 0x0, 0x4, 0x400, 0xfffc, 0x8, 0x20, 0x7, 0x9, 0x0, 0x9, 0xfffc, 0xd060, 0x0, 0x7fff, 0x2, 0x0, 0x2, 0x2, 0x1, 0xff, 0x2, 0x7, 0x4, 0x0, 0xf31, 0x6, 0xf32, 0x81, 0xa, 0x7, 0x80, 0x3, 0x6, 0x7, 0x800, 0xadad, 0x6, 0xe68, 0x3, 0x5], 0x80}}, 0x6}) 06:29:58 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=0x0) move_pages(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000300)=[0x2000000, 0x7], &(0x7f0000000340)=[0x0], 0x2) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) move_pages(r1, 0x1, &(0x7f0000000140)=[&(0x7f000074f000/0x3000)=nil], &(0x7f00000001c0)=[0x5, 0x5, 0x4, 0x7], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) 06:29:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32) ioctl$sock_proto_private(r0, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) r5 = socket$inet6(0xa, 0x3, 0xa) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=r5, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r0], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (rerun: 32) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\"J^~', @ANYRES16=r4, @ANYBLOB='\x00'/11, @ANYRES32=r2, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) vmsplice(r0, &(0x7f0000001580)=[{&(0x7f0000000240)="bdf5a459458f88a338219f792e525bf8b393de54dabc6fb2402d7f6decad83aceec432556506d7d9c8341049aa190ab42a66fd528930591f219f5259808e05858001e6b6b8b607dcb335c4c8ca195606cb8ea5a4ab2bb870ad5fdc91", 0x5c}, {&(0x7f0000000140)="c9c2dd49abaede62f5b102a4efb17c03aca64198765cc823b0b51f9196cd370be4fa41990832b70b0ef387f1be91db989e5fb9745e8ed3f36ceeca21", 0x3c}, {&(0x7f00000002c0)="7a5ffb47fac76087394a1ba2dd2f7e12214ac20f7677782eb999c2ef9462f88fca09c1d566488ae80d9964dbd1d7d2a92c9a7ea1f4007801dfd1d535122b326fc6c635827a53e2cba6c98f899dec92defe950f068c1d0b28e4a78cb89a28a6d9f05432ada04da5776bfbedd8e939b0fe2ae24857702a0d76dedd1af518320ec3745a5ef5090531dd52d2b7ebb07f05eaa2840a8c8de31be3c5ca7f2360c3", 0x9e}, {&(0x7f00000001c0)="769ce156589acf", 0x7}, {&(0x7f0000000380)="fbdfe97e8d1b109fcdd5e553990dbfb735bea58873eadfce6d762c9a8ee4f36e9c455e218df0325201330f5c743423c9a444b80d6f888a76e1e2db2fbee9957b54e2f14d1b97c0e29036d32df8450f77794d25f2f310609421336f85e73aee23ea727f4823444ee5bf6ae224bb713f08913cb2cf26c8c3efe7ecadb71833deacdd7e1ed067b0c9c6415bab509ade6de0ccfcd49cbe36ab8cede4139e0c0f733f944a241b4f62144843a916b41985c1e0a480e8eeb1d1119f7388ef23", 0xbc}, {&(0x7f0000000440)="99e221ccb860a83d88f36d08630a9488a00c94acf57259b29ccbb8676f2beb3e830acfa152f4e0ecba2c66f11918daad115998e56c8cef483e74710b6a329ab5d21ee2cc09124d62df83b34e7748a34e7701f9f59861e9d80543271a75dc3d46e057afedf8e36c9e73acc250e809412421ee09310ba43adff784569816344dfc57d9edeed11824b2f174336c0c88de0a35cead637f52a118c1c847ee8a34d4f8453c42173e49fadcef39c6df9b3d58e74e007bb35b84ec072b2e6a18c187b12342ac81ed2ed3d36f04875e4976dac9e8fd3d744b55db4bab0b60498d625ba8d1f5d18a8daf345c9664004c72e69278fd3e605f4ac395af5e5b430b099eee63a163bed3fffa10fc942015eb001edc6864fd2e44195c836a6a12ee3cf8f170a4f96371e46656210dd85391cb30684efdc1749636021019bb156e357f49bcc0e26937ae452bc36a21ff4fcb927d344fd9276e6c4689a6f9677f107fd058c6e2439126613aaaf3c3433230756e349153ba583bf98abdb06c3ecb937db2f42e3bdbf810d16e0f1bae28456b8467727cdbfecd20b89ca210d98ec09448cccd3b54ed9a0514b72cf19b6340e597ae9b8897f48c2e03e2cb8b2928c8496565606e8031c783935e9d414bb73e085e3ec78df6aa7ac786648e5db75d4950e7638d085f70443cdf2fc167ed9c2e3c41347786a76b1f4b42f67c81c095f0b79870d15a21809ce8b0e0a86e07e3941dc5262fc5102d6c32a070a325c3d4eb7b0dc3a31951bb14427c4c15810d4c30ab6d998c92d0dd84c5604580248ccd99c538a56a3c77c13c56bfba5152732d0359174c34634181c20eb79734dd957cc072d8bbb54cd65c73098f39ffea4e36f0737e8734635b6be39dbb0d2f1c4d75dffde8dcdd5f7d923d630b9bddb29058f8f7fa6ecc0c08e8ed52a9b6da9b0bf767b9dd90d2a51790d0ec0285a6b55d3b6d4347974316dfa2649cff0a508dda7468840cb12477c5ded5e4def0daaef8c79b750cb64e69afa452b58dc46a417b2bafc35ff754fcdbf20154b57535a7816a4fbd83547016e66aa513ea43af1408065ef7832fbeac5aa0b05c8e5a35c57b9c84297d770b0fb308cf9d63633b2c5a0f0fc288dee7b676337018b48e9f76f832d973da573a7de239b852b7c8a2f0cdb85790f5fbfce83aa1d2564fedf5b58123319a11aa8bfcb575009db60a7ee701d188466421eb22c6e2e580e1b69145d9299cd65ed9d992b43b5aa14ea8958254b849dfaf7778a40754cf55822164512a25c971c919452b5d3f06d3990dabf66da6c72e76442a8cef721f9c97d47a45bc0a46334b5ac4217e3efe3d328c2b9f1cdd4cec14a05d265970c9c6d6aafd13d00da5def3414378311d19cf6e9ba146edc35b182800e48945a8b524249ce0186ac097342ad27430fba913baf157850e3542fe988a518fc4038170bacb16344a7849ecf5a61eb756a1e7cfb43e59e55fee44e6e98fdee68b417a8b62fb00a487e499186e004f6cdd61f1fbf67c42eb56d44283c1d7675f9aed27769881782f908cfbf599c56d81a4535aed154dcc6fb54a71daca0ae305ad7d525db07d5e7885cb95ef4e6c94e7fb50321585f185dc5419c5a5aa9901f22a4dc97dd6ed632aa3cf8564b6783c0948828b192f9b0246f11ec3ea01163356bded9995c58eeb5f1f247000df7baaa76c0eb180d733ccb110c17d7c1eee01a69b7ef1488e7631767ad60d51cb744803b8923d0e84d406c64b89b00a8ebbd1a1c00a6f80246a4b4e329fe6ba5587f40ded7233fa5edbfe37eb0fd27974c4fc778cc1cc95163f970ce34aa385452fcd686f67681d6fc41ba30fbfe1cdf9a7ca967d3476cbada51808de268ab9f29fdd47953093301927664220b2935c7766554b47d06345b06bb2ea6dc024000715477e4504933a60db318d3896ebf378c8831adc4504b77b6f8291ea52ce9b584216f3b9b54cefc114b98bd395db58772d544b5e2fc04bc91390fcd487f3397f01d37fd564061c349f9053f75b27155ab2752444ea54e1691d90b7c714505dfcaca2300b32ed364bcf0dd260f0adb7640166cd6e4ff432618dc4118b395e53dbf7c7945bd6d89396360cb4ca3220ec0042eded0b0d629290a63858f0705222d3a700fdfeff10431a321641bbd866143199b281fc5f91cf92325543f4f55605c5cf891ef6cac009c8a26a3729c197909ae68df4c1e0312ef41ac22f741c64bfc13aea42c89a4e463949465ff5a182a2e1f384678d3ee5b854b5077eade049c7874adb8546f1e31d3608f1c01fafbfbc8a59a50c81c7744e0677107c058182e0999780dabbc414b9f5d555e27f2e38b72a3628a2343441afeac1b9416f6cad4958c69932ac4f2ab7c70cffe6d1170ab410e7606d6cfddb9e9dadce20e0f351c0dbc7341a789fd86a2e358c460138ef1a67e0b24fad5d909eb4a947929ef5e0fb23f9e8621da0657923e769192b50df08eddceaf2e12553af80f960af834f97d6653d4c366f9626912d93ec2977b45b543806febdea9795d6d2059135652cd8468fdb411e90ade069025fe46504717275f4c776259ce8124e80fa18e40e37126304e3ea4586ffeeb602fbe10db92426f27b92dcab4d381b73b0849778fedb5cd82ad60071d9c038439353edf28e7f5abe8c84c267471286fa5cce14d50bc33504ec57c11474eae5e412211b1f3be64f7c87642efd0f318fc15e0ddd330909e82a57087ebdd3c8645ad65004d9f403c925b0ae12e1020f95db237af76da7f51711c95765a67200373c7acf3b06b6cbe6c9895ee1105f7d5654d9b1c77798d0d3475d7ed36b05fa4c52b26d351a28794d572977444691deec2f8db3e33ea01e895f0ac05bbf57e841884e104d580bab65f189db629021c4788fafbd4ab43dc7115800db3709f0d8cee0a5dfd8f12613e33d47f6a9af6e84e041f6c7716f9f62c54d6dbb5bd2fb757ba9858caee3172e2313a5f2d0f553e8917f5d3b53d17e0b46fa9a7b8fdaaa5d7b35a5c7c6535165ef8d72dc58fcd16b90cb76e996e2e8e585208e16a3b932071c4e9cc6053e96a253cfeb794c83f5a618d9fed4518f3ca0a610b671a7f6985d77c90ba56cd2d58bacc91edb6f0cfbb980b910ddcfb1ba3ecb516f8b3459d2e62ccbe3153a161c66b2a16b6e63e76de74e3eb38b4b418739ab7f6109389cd473374b292e9346a5d087fe7e8520089f46a937146cafa487d5c2a61ec3a9f196bc96b33c8d9ab455abd299476b2ec8bc3286df361d312d4b5c6b40b9bdf5da2ff92ea7c53c044ced2de27938b22ae4678177828aed7276e7060e07363058c650d4fe032960e19cc07f6bb22a57ae3cf74f24fca2e63c3233ae058950f228408b797abf124a64ca86d95f7f0198397a7240344e3b36fc2c8029ab7f69b3fae8aab1d4922a5b4e9b545a5a79e7053b3fa145569c48b5aa1376a90557b2d5bfd382e45c1bd4dfe20ab4629221a2931cf42eb3d0284da21d6bad3163d6a01e4d48cc34fd140dfdd05e3014fc58d632f37b6c59e0899af8ea45da516b9ef92c83d8d153cc615fceab8727d6b533e48f0748ce6435955906629c508efbdf06fc43f4d004a17f881845a3a851fb735531a4ac012b97b92e33fa42a96cbd9cf1ad12a1c9f46e01ae7123e7f93126f59f9bce5458864d08598cb39c1dc0743ff80c1d30deb4d32af0bf089aef345e387f7b76eaa53c048bb70c9e82bb4adf75738617062539d7730def3e47dd98a08e64b282490504092a7d5dfea2919731605a38a22a534120da2e1328233f6467f2761262696d8af3ca5a9bcbeefe19a7c83542d737b41deedb29f698c14299bdab4983ca12bb1363ba5627b16016fb5d2d9d316dc752aae876ef14f66fd09dbfd5b2f81a1eb35c0073fda4e0b843b5358b6e79eb258388a77d4f9f3681e82d21561745af787eea2ccb36b15ee727cee76ca48b869fa5462d403ac6d93728fd571aba76083fad51beb15c58c900e173a26bff898a77932ef77acf684a16a85c0d280a559480881732228dfab2ab21a5b187fed838a2c88fd17737ecd3596da4bff3c51815bd7687ece7969f649070b2db7cfb296d0da63bf0401952c1f32d8ee426e1a24ed439ac180e903e1d89a449d95a4b598db24334acce6681aaebcf74116a13851c09accac3aac7a1890f2a4e6b9e22ced9b23e6b8e1c2b3b388b6e69ccd21fe37fce86d91a91c16529cc7047230d9d72c4568b36d27604baf1383a757b5ec5d7ace00786f923acec4176987c1d2888ade1c5d088ef2acf4c3f34129e2e1d90aab88d6bd925f032f9b3ac2bed84d42bd618315ddb0501ab18bb134abaef89ffc180b452766f7be3583287698bd4f83808bed573aa65cbaf2db6fa15decb789df205f7d173b79172b9ae246814fa07548e2d66d3547892f13881da82d6d8951705200706fe252b7e998923e76984c6ef080de6c117077400dc430ce16b2530aea0d56e383ef41e7413946a60ea2ad5d3f34317c9a7adc77fb42617baca3e79f519aee639913d055b1a1ec7ac44b4097730b6fbbe80f4b46ad03c79448887eb1999b97eee42f74629c9bdf4d64ddf3f5837eaa4075e4c2881ffad076410d587c020bcca5a95604fd4025d83cf6bd6d6966702ff2128602737d51081da006f933beb174e50c4534ac69a3a3e4eba66635f67e16dab59b44ee7cbbbf646e899ce58f6e8d445c0955b285d79d10ea7e78dbb6d89d25f3bed5e8fd9c70225286187f053277232731e626f8fe5fab04a693af18918888079f10631a93b9752896a114d0407ac50ff1faf434f1fa9a869437d209da5c64d333f60f257d1b1213f833f3cf847ba377fc964cdc9dc247f83d725ba3818699c2fb8c387bf2a3cc66e13352b6873cb2ffcca3bc1316047bc6c523d512ebc76760a0874f12e748b6c6b3779228ced2c83aa678b53ce60ac2b2005821486a760b9de821098eabdeb83ba74c1e1a70b2350206cdd679f8951503e6b21e14dd3ffff0664c6d17eed2df8e0d6e95cb371aec9e4d328c8c0e43acf469e9262149d55b9dee07e85ff26a9a71a8c8647df366846c6eb76b410972b3d69f637411c4c740a173799161a95b3478a05ad64674d9159595f9a4bd050607f4251e935d218f7fa219eedafafc3f799df67fae4aa168361a5692400e5566785d75e96e8653564875500cbc7fe63696398f3423fa152f73dbdae22b824df3a3df637bc47faceba659d4a789184c4f1034bfc7417bf30e9dd54c12b7d35e49350c17567c458ce4620a88fbb73430ce21e95016a437135c3749b36860e7b525bf5f03127812f73af448a1f686796da42185150b322eaf5df9eaefcf7242c551ed6ae9047b424bed5cbfee7eb918eb6441c8fb7603b8f340c903c0cbfe1ef469a71acea4e1a12ae302ebe993df9043a29c35631b82c1b928c98b0250a4843f4fcf68759e5bd32843ec693ee6c766117fc3c13f1b657fde7a70a6b670b9c749e641f1d609b1566666eb9ba80966f5b522a60eed68cd54c2168bb4e6c6588eaed12b20043c762c617c2dd16f450f0bcdb9c4f1ea5b68cd03a7a251cb1292841d072104b25aeafc873b2332a1b3efc802704639e7d280f6e6d002e83ffba07767f743c6d85edfd3047b062ce5bf2d4b9cd361dbbd2c26bcb051f464057d20b92ecb44c61132207e83882f7b3fb28dedf2d739b792f6e20c8eaaa2e0deeec3144bb59c6ef770aec3b53920f577183b64e691c8ce9e4bbb027f0eed19539a81df1d673b06fcd088ff805aa1798b0fdee557ab306a9260cdb083e31da9649ed", 0x1000}, {&(0x7f0000001440)}, {&(0x7f0000001480)="d9463fd37b4c6b1ac1bdf4052f77b76a483b8cc955d55e3370560bffb3683ba835d3042bfce6ae6e32388a8aa19745f607bc4f871530538ce3495753952171ff8139a173a2db479cccf265ae93952c3e868ba7982e5d88c88ca86188e818064655e6d2d94545925cb6c844bdf417fc16f98a16fd59cd0b92c4670f4de0a647b488b2fb28666822cd71af69cb6e1854a3676a9814b3a856ccf25cd72a20520d7b52bb28a12f8c74470b1fd16efc504d3fa452c35ae07540a6d6b44cbd196b69d3357768ee834f477986", 0xc9}], 0x8, 0x2) mmap$fb(&(0x7f0000141000/0x1000)=nil, 0x1000, 0x1000002, 0x810, 0xffffffffffffffff, 0xfb000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async, rerun: 32) r8 = getpid() (rerun: 32) move_pages(r8, 0x1, &(0x7f0000000200)=[&(0x7f0000536000/0x4000)=nil], &(0x7f000026bfec), 0x0, 0x0) [ 2573.914360] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:29:58 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x3500000000000000) 06:29:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x20000000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) [ 2574.042677] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:29:58 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=0x0) move_pages(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000300)=[0x2000000, 0x7], &(0x7f0000000340)=[0x0], 0x2) (async) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) move_pages(r1, 0x1, &(0x7f0000000140)=[&(0x7f000074f000/0x3000)=nil], &(0x7f00000001c0)=[0x5, 0x5, 0x4, 0x7], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) [ 2574.108697] device batadv1211 entered promiscuous mode [ 2574.134658] 8021q: adding VLAN 0 to HW filter on device batadv1211 06:29:58 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x3f00000000000000) 06:29:58 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = socket(0xf, 0x800, 0xc8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_proto_private(r2, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x3, 0xa) r8 = openat$incfs(0xffffffffffffffff, &(0x7f0000000340)='.pending_reads\x00', 0x400000, 0x98) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000180)={'lo\x00', @ifru_flags=0x800}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRESDEC=r7, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r2], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\"J^~', @ANYRES16=r6, @ANYBLOB='\x00'/11, @ANYRES32=r4, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) write$binfmt_misc(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="c273797a30205cfb038d6b87fc91b6a88b0cccc48e13ff964f5b55a1dd6ffae47720de56f11385aae248a3"], 0x26) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x5, 0xffffff81, 0x4, {0x0, @sliced={0x1, [0x2c, 0x6, 0x8000, 0x4, 0x8f5, 0x5, 0x0, 0x0, 0x0, 0x4, 0x400, 0xfffc, 0x8, 0x20, 0x7, 0x9, 0x0, 0x9, 0xfffc, 0xd060, 0x0, 0x7fff, 0x2, 0x0, 0x2, 0x2, 0x1, 0xff, 0x2, 0x7, 0x4, 0x0, 0xf31, 0x6, 0xf32, 0x81, 0xa, 0x7, 0x80, 0x3, 0x6, 0x7, 0x800, 0xadad, 0x6, 0xe68, 0x3, 0x5], 0x80}}, 0x6}) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) socket(0xf, 0x800, 0xc8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_proto_private(r2, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$inet6(0xa, 0x3, 0xa) (async) openat$incfs(0xffffffffffffffff, &(0x7f0000000340)='.pending_reads\x00', 0x400000, 0x98) (async) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000180)={'lo\x00', @ifru_flags=0x800}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRESDEC=r7, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r2], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\"J^~', @ANYRES16=r6, @ANYBLOB='\x00'/11, @ANYRES32=r4, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) (async) write$binfmt_misc(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="c273797a30205cfb038d6b87fc91b6a88b0cccc48e13ff964f5b55a1dd6ffae47720de56f11385aae248a3"], 0x26) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x5, 0xffffff81, 0x4, {0x0, @sliced={0x1, [0x2c, 0x6, 0x8000, 0x4, 0x8f5, 0x5, 0x0, 0x0, 0x0, 0x4, 0x400, 0xfffc, 0x8, 0x20, 0x7, 0x9, 0x0, 0x9, 0xfffc, 0xd060, 0x0, 0x7fff, 0x2, 0x0, 0x2, 0x2, 0x1, 0xff, 0x2, 0x7, 0x4, 0x0, 0xf31, 0x6, 0xf32, 0x81, 0xa, 0x7, 0x80, 0x3, 0x6, 0x7, 0x800, 0xadad, 0x6, 0xe68, 0x3, 0x5], 0x80}}, 0x6}) (async) [ 2574.222422] bond1212: making interface vlan1050 the new active one [ 2574.247262] bond1212: Enslaving vlan1050 as an active interface with an up link 06:29:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6c00}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:29:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x20be0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:29:58 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=0x0) move_pages(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000300)=[0x2000000, 0x7], &(0x7f0000000340)=[0x0], 0x2) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) move_pages(r1, 0x1, &(0x7f0000000140)=[&(0x7f000074f000/0x3000)=nil], &(0x7f00000001c0)=[0x5, 0x5, 0x4, 0x7], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)) (async) move_pages(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000300)=[0x2000000, 0x7], &(0x7f0000000340)=[0x0], 0x2) (async) gettid() (async) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) move_pages(r1, 0x1, &(0x7f0000000140)=[&(0x7f000074f000/0x3000)=nil], &(0x7f00000001c0)=[0x5, 0x5, 0x4, 0x7], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) (async) [ 2574.372607] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:29:58 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x8700000000000000) 06:29:58 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmget$private(0x0, 0x4000, 0xef5f21e5ff77d5ba, &(0x7f0000a96000/0x4000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) 06:29:58 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = getpgid(0x0) capget(&(0x7f00000003c0)={0x20080522, r1}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) tkill(r1, 0x3e) move_pages(r1, 0x8, &(0x7f0000000280)=[&(0x7f0000ffb000/0x3000)=nil, &(0x7f00006ae000/0x3000)=nil, &(0x7f00005bc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000650000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x4) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f00000001c0)=0xc) write$cgroup_pid(r2, &(0x7f0000000240)=r3, 0x12) [ 2574.547070] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:29:58 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmget$private(0x0, 0x4000, 0xef5f21e5ff77d5ba, &(0x7f0000a96000/0x4000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) 06:29:58 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x8900000000000000) [ 2574.635312] device batadv1212 entered promiscuous mode 06:29:58 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = getpgid(0x0) capget(&(0x7f00000003c0)={0x20080522, r1}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) tkill(r1, 0x3e) move_pages(r1, 0x8, &(0x7f0000000280)=[&(0x7f0000ffb000/0x3000)=nil, &(0x7f00006ae000/0x3000)=nil, &(0x7f00005bc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000650000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x4) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f00000001c0)=0xc) write$cgroup_pid(r2, &(0x7f0000000240)=r3, 0x12) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) getpgid(0x0) (async) capget(&(0x7f00000003c0)={0x20080522, r1}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) (async) tkill(r1, 0x3e) (async) move_pages(r1, 0x8, &(0x7f0000000280)=[&(0x7f0000ffb000/0x3000)=nil, &(0x7f00006ae000/0x3000)=nil, &(0x7f00005bc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000650000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x4) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000001c0)=0xc) (async) write$cgroup_pid(r2, &(0x7f0000000240)=r3, 0x12) (async) [ 2574.685580] 8021q: adding VLAN 0 to HW filter on device batadv1212 06:29:58 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) shmget$private(0x0, 0x4000, 0xef5f21e5ff77d5ba, &(0x7f0000a96000/0x4000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) 06:29:58 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = getpgid(0x0) capget(&(0x7f00000003c0)={0x20080522, r1}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) (async) tkill(r1, 0x3e) move_pages(r1, 0x8, &(0x7f0000000280)=[&(0x7f0000ffb000/0x3000)=nil, &(0x7f00006ae000/0x3000)=nil, &(0x7f00005bc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000650000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x4) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f00000001c0)=0xc) write$cgroup_pid(r2, &(0x7f0000000240)=r3, 0x12) 06:29:59 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{0x0, 0x0, 0x0, 0xfffffffd}, 0x3, 0x40, 0x0, 0x0, 0x0}}) r1 = dup2(0xffffffffffffffff, r0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000002c0)={0x1, @sdr={0x56595559, 0x401}}) [ 2574.791971] bond1213: making interface vlan1051 the new active one [ 2574.811525] bond1213: Enslaving vlan1051 as an active interface with an up link 06:29:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7400}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:29:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x21be0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:29:59 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xac00000000000000) 06:29:59 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000180)=[&(0x7f00006ca000/0x1000)=nil, &(0x7f0000384000/0x1000)=nil, &(0x7f0000733000/0x2000)=nil, &(0x7f00008bf000/0x3000)=nil], &(0x7f00000001c0)=[0x5, 0x5, 0x1, 0x1ff, 0x4ab, 0x0, 0x80000000, 0x2, 0x202, 0x1], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() r1 = getpgrp(r0) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xf1, 0x11, 0x0, 0xfb, 0x0, 0x10000, 0x28058, 0x6, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f0000000200)}, 0x4, 0x0, 0x2, 0x7, 0x80, 0x3, 0x6, 0x0, 0x7fff, 0x0, 0x6}, r0, 0x2, 0xffffffffffffffff, 0x0) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/253, 0xfd}], 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/231, 0xe7}, {&(0x7f0000000440)=""/254, 0xfe}], 0x2, 0x0) shmat(0x0, &(0x7f00006b0000/0x4000)=nil, 0x3000) move_pages(0x0, 0x0, &(0x7f0000000200), &(0x7f000026bfec), 0x0, 0x0) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ffd000/0x2000)=nil, 0x0) 06:29:59 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x100000000000014e, 0x0) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0) 06:29:59 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{0x0, 0x0, 0x0, 0xfffffffd}, 0x3, 0x40, 0x0, 0x0, 0x0}}) (async) r1 = dup2(0xffffffffffffffff, r0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000002c0)={0x1, @sdr={0x56595559, 0x401}}) 06:29:59 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000180)=[&(0x7f00006ca000/0x1000)=nil, &(0x7f0000384000/0x1000)=nil, &(0x7f0000733000/0x2000)=nil, &(0x7f00008bf000/0x3000)=nil], &(0x7f00000001c0)=[0x5, 0x5, 0x1, 0x1ff, 0x4ab, 0x0, 0x80000000, 0x2, 0x202, 0x1], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() r1 = getpgrp(r0) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xf1, 0x11, 0x0, 0xfb, 0x0, 0x10000, 0x28058, 0x6, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f0000000200)}, 0x4, 0x0, 0x2, 0x7, 0x80, 0x3, 0x6, 0x0, 0x7fff, 0x0, 0x6}, r0, 0x2, 0xffffffffffffffff, 0x0) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/253, 0xfd}], 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/231, 0xe7}, {&(0x7f0000000440)=""/254, 0xfe}], 0x2, 0x0) shmat(0x0, &(0x7f00006b0000/0x4000)=nil, 0x3000) move_pages(0x0, 0x0, &(0x7f0000000200), &(0x7f000026bfec), 0x0, 0x0) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ffd000/0x2000)=nil, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000180)=[&(0x7f00006ca000/0x1000)=nil, &(0x7f0000384000/0x1000)=nil, &(0x7f0000733000/0x2000)=nil, &(0x7f00008bf000/0x3000)=nil], &(0x7f00000001c0)=[0x5, 0x5, 0x1, 0x1ff, 0x4ab, 0x0, 0x80000000, 0x2, 0x202, 0x1], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) getpgrp(r0) (async) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xf1, 0x11, 0x0, 0xfb, 0x0, 0x10000, 0x28058, 0x6, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f0000000200)}, 0x4, 0x0, 0x2, 0x7, 0x80, 0x3, 0x6, 0x0, 0x7fff, 0x0, 0x6}, r0, 0x2, 0xffffffffffffffff, 0x0) (async) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/253, 0xfd}], 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/231, 0xe7}, {&(0x7f0000000440)=""/254, 0xfe}], 0x2, 0x0) (async) shmat(0x0, &(0x7f00006b0000/0x4000)=nil, 0x3000) (async) move_pages(0x0, 0x0, &(0x7f0000000200), &(0x7f000026bfec), 0x0, 0x0) (async) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmat(r2, &(0x7f0000ffd000/0x2000)=nil, 0x0) (async) 06:29:59 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x100000000000014e, 0x0) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0) [ 2574.998512] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:29:59 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{0x0, 0x0, 0x0, 0xfffffffd}, 0x3, 0x40, 0x0, 0x0, 0x0}}) (async, rerun: 32) r1 = dup2(0xffffffffffffffff, r0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000002c0)={0x1, @sdr={0x56595559, 0x401}}) 06:29:59 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000180)=[&(0x7f00006ca000/0x1000)=nil, &(0x7f0000384000/0x1000)=nil, &(0x7f0000733000/0x2000)=nil, &(0x7f00008bf000/0x3000)=nil], &(0x7f00000001c0)=[0x5, 0x5, 0x1, 0x1ff, 0x4ab, 0x0, 0x80000000, 0x2, 0x202, 0x1], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() r1 = getpgrp(r0) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xf1, 0x11, 0x0, 0xfb, 0x0, 0x10000, 0x28058, 0x6, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f0000000200)}, 0x4, 0x0, 0x2, 0x7, 0x80, 0x3, 0x6, 0x0, 0x7fff, 0x0, 0x6}, r0, 0x2, 0xffffffffffffffff, 0x0) (async) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/253, 0xfd}], 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/231, 0xe7}, {&(0x7f0000000440)=""/254, 0xfe}], 0x2, 0x0) (async) shmat(0x0, &(0x7f00006b0000/0x4000)=nil, 0x3000) move_pages(0x0, 0x0, &(0x7f0000000200), &(0x7f000026bfec), 0x0, 0x0) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ffd000/0x2000)=nil, 0x0) 06:29:59 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 32) r0 = gettid() (rerun: 32) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x100000000000014e, 0x0) (async, rerun: 64) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0) (rerun: 64) 06:29:59 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xad00000000000000) [ 2575.183344] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2575.267232] device batadv1213 entered promiscuous mode [ 2575.298601] 8021q: adding VLAN 0 to HW filter on device batadv1213 06:29:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a00}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:29:59 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x65) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00007b9000/0x4000)=nil, 0x4000, 0x14) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180), 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) 06:29:59 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r2 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x9, 0xb5, 0x9c, 0x0, 0x0, 0x8000000000000001, 0xe1a10, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp, 0x4, 0x4, 0x7fffffff, 0x4, 0x7ff, 0x7ff, 0x200, 0x0, 0x8, 0x0, 0xafeb}, 0xffffffffffffffff, 0xf, r1, 0xb) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000040)=0x8) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000002c0)={0x7, 0x800, 0x1, {0x2, @pix={0x7f, 0x960, 0x44495658, 0x6, 0x10000, 0x9, 0x5, 0xc2, 0x0, 0x3, 0x2, 0x1}}, 0x2}) sendmsg$nl_xfrm(r4, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)=@allocspi={0x1e0, 0x16, 0x100, 0x70bd26, 0x25dfdbfc, {{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e23, 0x20, 0x4e21, 0x0, 0xa, 0xa0, 0x80, 0xc, r5, 0xffffffffffffffff}, {@in=@multicast2, 0x4d6, 0xff}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x8, 0xfffffffffffffff8, 0x7, 0x9, 0x8, 0x0, 0x800, 0xffffffff}, {0xe1fc, 0x862, 0x7, 0xff}, {0x5, 0x2, 0x6}, 0x70bd2b, 0x34ff, 0xa, 0x0, 0x9, 0x40}, 0x6, 0x81}, [@encap={0x1c, 0x4, {0x3, 0x4e22, 0x4e23, @in6=@loopback}}, @sec_ctx={0xb6, 0x8, {0xb2, 0x8, 0x0, 0x9, 0xaa, "742313f007e48213622a50909063d3682fbacacae2965ffc40dfce57f76080ad0f6d8db31eabfb8d3de28d06663c6014b2cbe5251f2dfaa13ea80352de4739c2f12a5e222f4bcf21f378862284557d2eebb944459ea4c7e086ee56cc5c40c486e405f0aee0dfb3853682e363520e71e7b7a0f4ced7ba095b76a0af2c4b91ae620f2def4ba06eb8d0d8e65cb760c844bc4b0274ff8876a018bcc7a2afd3915575f02364122fcba8b6881c"}}, @srcaddr={0x14, 0xd, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 06:29:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x22be0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:29:59 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="ea000000000010002e2f66696c653000"]) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f00000002c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00002e6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="0f01ca66430f38810ff04183290066baf80cb831ce7d86ef66bafc0cec3ef3410f1ec364f30f1bc842f40fc729c441fa12656ec4e3512264cc39c1", 0x3b}], 0x1, 0xa8, &(0x7f0000000280)=[@cr0={0x0, 0x80000014}, @dstype0={0x6, 0x1}], 0x2) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:29:59 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xd600000000000000) [ 2575.354098] bond1214: making interface vlan1052 the new active one [ 2575.366733] bond1214: Enslaving vlan1052 as an active interface with an up link 06:29:59 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x65) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00007b9000/0x4000)=nil, 0x4000, 0x14) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180), 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x65) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) madvise(&(0x7f00007b9000/0x4000)=nil, 0x4000, 0x14) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180), 0x0, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) (async) 06:29:59 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) r2 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x9, 0xb5, 0x9c, 0x0, 0x0, 0x8000000000000001, 0xe1a10, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp, 0x4, 0x4, 0x7fffffff, 0x4, 0x7ff, 0x7ff, 0x200, 0x0, 0x8, 0x0, 0xafeb}, 0xffffffffffffffff, 0xf, r1, 0xb) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000040)=0x8) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000002c0)={0x7, 0x800, 0x1, {0x2, @pix={0x7f, 0x960, 0x44495658, 0x6, 0x10000, 0x9, 0x5, 0xc2, 0x0, 0x3, 0x2, 0x1}}, 0x2}) sendmsg$nl_xfrm(r4, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)=@allocspi={0x1e0, 0x16, 0x100, 0x70bd26, 0x25dfdbfc, {{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e23, 0x20, 0x4e21, 0x0, 0xa, 0xa0, 0x80, 0xc, r5, 0xffffffffffffffff}, {@in=@multicast2, 0x4d6, 0xff}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x8, 0xfffffffffffffff8, 0x7, 0x9, 0x8, 0x0, 0x800, 0xffffffff}, {0xe1fc, 0x862, 0x7, 0xff}, {0x5, 0x2, 0x6}, 0x70bd2b, 0x34ff, 0xa, 0x0, 0x9, 0x40}, 0x6, 0x81}, [@encap={0x1c, 0x4, {0x3, 0x4e22, 0x4e23, @in6=@loopback}}, @sec_ctx={0xb6, 0x8, {0xb2, 0x8, 0x0, 0x9, 0xaa, "742313f007e48213622a50909063d3682fbacacae2965ffc40dfce57f76080ad0f6d8db31eabfb8d3de28d06663c6014b2cbe5251f2dfaa13ea80352de4739c2f12a5e222f4bcf21f378862284557d2eebb944459ea4c7e086ee56cc5c40c486e405f0aee0dfb3853682e363520e71e7b7a0f4ced7ba095b76a0af2c4b91ae620f2def4ba06eb8d0d8e65cb760c844bc4b0274ff8876a018bcc7a2afd3915575f02364122fcba8b6881c"}}, @srcaddr={0x14, 0xd, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x8000}, 0x4) [ 2575.484620] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:29:59 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) r2 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x9, 0xb5, 0x9c, 0x0, 0x0, 0x8000000000000001, 0xe1a10, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp, 0x4, 0x4, 0x7fffffff, 0x4, 0x7ff, 0x7ff, 0x200, 0x0, 0x8, 0x0, 0xafeb}, 0xffffffffffffffff, 0xf, r1, 0xb) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000040)=0x8) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000002c0)={0x7, 0x800, 0x1, {0x2, @pix={0x7f, 0x960, 0x44495658, 0x6, 0x10000, 0x9, 0x5, 0xc2, 0x0, 0x3, 0x2, 0x1}}, 0x2}) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)=@allocspi={0x1e0, 0x16, 0x100, 0x70bd26, 0x25dfdbfc, {{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e23, 0x20, 0x4e21, 0x0, 0xa, 0xa0, 0x80, 0xc, r5, 0xffffffffffffffff}, {@in=@multicast2, 0x4d6, 0xff}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x8, 0xfffffffffffffff8, 0x7, 0x9, 0x8, 0x0, 0x800, 0xffffffff}, {0xe1fc, 0x862, 0x7, 0xff}, {0x5, 0x2, 0x6}, 0x70bd2b, 0x34ff, 0xa, 0x0, 0x9, 0x40}, 0x6, 0x81}, [@encap={0x1c, 0x4, {0x3, 0x4e22, 0x4e23, @in6=@loopback}}, @sec_ctx={0xb6, 0x8, {0xb2, 0x8, 0x0, 0x9, 0xaa, "742313f007e48213622a50909063d3682fbacacae2965ffc40dfce57f76080ad0f6d8db31eabfb8d3de28d06663c6014b2cbe5251f2dfaa13ea80352de4739c2f12a5e222f4bcf21f378862284557d2eebb944459ea4c7e086ee56cc5c40c486e405f0aee0dfb3853682e363520e71e7b7a0f4ced7ba095b76a0af2c4b91ae620f2def4ba06eb8d0d8e65cb760c844bc4b0274ff8876a018bcc7a2afd3915575f02364122fcba8b6881c"}}, @srcaddr={0x14, 0xd, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 06:29:59 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x65) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00007b9000/0x4000)=nil, 0x4000, 0x14) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180), 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x65) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) madvise(&(0x7f00007b9000/0x4000)=nil, 0x4000, 0x14) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180), 0x0, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) (async) 06:29:59 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xd800000000000000) 06:29:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x23be0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) [ 2575.618637] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2575.691699] device batadv1214 entered promiscuous mode [ 2575.715798] 8021q: adding VLAN 0 to HW filter on device batadv1214 [ 2575.777278] bond1215: making interface vlan1053 the new active one [ 2575.814440] bond1215: Enslaving vlan1053 as an active interface with an up link 06:30:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8100}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:30:00 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="ea000000000010002e2f66696c653000"]) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f00000002c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00002e6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="0f01ca66430f38810ff04183290066baf80cb831ce7d86ef66bafc0cec3ef3410f1ec364f30f1bc842f40fc729c441fa12656ec4e3512264cc39c1", 0x3b}], 0x1, 0xa8, &(0x7f0000000280)=[@cr0={0x0, 0x80000014}, @dstype0={0x6, 0x1}], 0x2) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="ea000000000010002e2f66696c653000"]) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f00000002c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00002e6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="0f01ca66430f38810ff04183290066baf80cb831ce7d86ef66bafc0cec3ef3410f1ec364f30f1bc842f40fc729c441fa12656ec4e3512264cc39c1", 0x3b}], 0x1, 0xa8, &(0x7f0000000280)=[@cr0={0x0, 0x80000014}, @dstype0={0x6, 0x1}], 0x2) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) 06:30:00 executing program 1: semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x2, 0x5, 0x800}, {0x4, 0x5617}, {0x1, 0x800, 0x800}, {0x2, 0x3, 0x1000}, {0x1, 0x7, 0x1800}, {0x2, 0x4, 0x1000}, {0x0, 0x2}, {0x3, 0x20, 0x800}], 0x8, &(0x7f0000000040)={0x0, 0x3938700}) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:30:00 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000032e000/0x4000)=nil) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) mmap$snddsp_status(&(0x7f000076a000/0x4000)=nil, 0x1000, 0x2000004, 0x8010, r0, 0x82000000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000485000/0x4000)=nil, &(0x7f0000834000/0x9000)=nil, &(0x7f0000614000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000362000/0x1000)=nil, &(0x7f00002ea000/0x2000)=nil, &(0x7f0000635000/0x1000)=nil, &(0x7f0000450000/0x8000)=nil, &(0x7f0000226000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0)="392b27e53cd232a248374666", 0xc}, 0x68) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) madvise(&(0x7f00002c0000/0x3000)=nil, 0x3000, 0xd) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000140)=[0x9, 0x7fff, 0x4], 0x3, 0xff, 0x8, 0x5, 0x6, 0x1000, 0x9de, {0x3, 0x3ff, 0x6, 0xae, 0x9, 0x73f, 0xff, 0x1, 0x7, 0x110, 0x0, 0x2, 0x7, 0x4, "ec19c7ef5f64bf15a382bd40106957249bace6be0fa0d9abe333a834201f98f2"}}) 06:30:00 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xdc00000000000000) 06:30:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x30000000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:30:00 executing program 1: semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x2, 0x5, 0x800}, {0x4, 0x5617}, {0x1, 0x800, 0x800}, {0x2, 0x3, 0x1000}, {0x1, 0x7, 0x1800}, {0x2, 0x4, 0x1000}, {0x0, 0x2}, {0x3, 0x20, 0x800}], 0x8, &(0x7f0000000040)={0x0, 0x3938700}) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 2575.900379] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:30:00 executing program 1: semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x2, 0x5, 0x800}, {0x4, 0x5617}, {0x1, 0x800, 0x800}, {0x2, 0x3, 0x1000}, {0x1, 0x7, 0x1800}, {0x2, 0x4, 0x1000}, {0x0, 0x2}, {0x3, 0x20, 0x800}], 0x8, &(0x7f0000000040)={0x0, 0x3938700}) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x2, 0x5, 0x800}, {0x4, 0x5617}, {0x1, 0x800, 0x800}, {0x2, 0x3, 0x1000}, {0x1, 0x7, 0x1800}, {0x2, 0x4, 0x1000}, {0x0, 0x2}, {0x3, 0x20, 0x800}], 0x8, &(0x7f0000000040)={0x0, 0x3938700}) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) 06:30:00 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000032e000/0x4000)=nil) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) mmap$snddsp_status(&(0x7f000076a000/0x4000)=nil, 0x1000, 0x2000004, 0x8010, r0, 0x82000000) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r1 = gettid() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000485000/0x4000)=nil, &(0x7f0000834000/0x9000)=nil, &(0x7f0000614000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000362000/0x1000)=nil, &(0x7f00002ea000/0x2000)=nil, &(0x7f0000635000/0x1000)=nil, &(0x7f0000450000/0x8000)=nil, &(0x7f0000226000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0)="392b27e53cd232a248374666", 0xc}, 0x68) (async) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) madvise(&(0x7f00002c0000/0x3000)=nil, 0x3000, 0xd) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000140)=[0x9, 0x7fff, 0x4], 0x3, 0xff, 0x8, 0x5, 0x6, 0x1000, 0x9de, {0x3, 0x3ff, 0x6, 0xae, 0x9, 0x73f, 0xff, 0x1, 0x7, 0x110, 0x0, 0x2, 0x7, 0x4, "ec19c7ef5f64bf15a382bd40106957249bace6be0fa0d9abe333a834201f98f2"}}) 06:30:00 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xf0ffffff00000000) 06:30:00 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="ea000000000010002e2f66696c653000"]) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f00000002c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00002e6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="0f01ca66430f38810ff04183290066baf80cb831ce7d86ef66bafc0cec3ef3410f1ec364f30f1bc842f40fc729c441fa12656ec4e3512264cc39c1", 0x3b}], 0x1, 0xa8, &(0x7f0000000280)=[@cr0={0x0, 0x80000014}, @dstype0={0x6, 0x1}], 0x2) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="ea000000000010002e2f66696c653000"]) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f00000002c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00002e6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="0f01ca66430f38810ff04183290066baf80cb831ce7d86ef66bafc0cec3ef3410f1ec364f30f1bc842f40fc729c441fa12656ec4e3512264cc39c1", 0x3b}], 0x1, 0xa8, &(0x7f0000000280)=[@cr0={0x0, 0x80000014}, @dstype0={0x6, 0x1}], 0x2) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) [ 2576.062155] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:30:00 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0xd0}}, 0x8800) splice(r0, &(0x7f0000000000)=0x7fffffff, r1, &(0x7f0000000040), 0x5, 0x0) [ 2576.162019] device batadv1215 entered promiscuous mode [ 2576.186628] 8021q: adding VLAN 0 to HW filter on device batadv1215 [ 2576.303005] bond1216: making interface vlan1054 the new active one [ 2576.346848] bond1216: Enslaving vlan1054 as an active interface with an up link 06:30:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xf000}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:30:00 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0xd0}}, 0x8800) splice(r0, &(0x7f0000000000)=0x7fffffff, r1, &(0x7f0000000040), 0x5, 0x0) 06:30:00 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:00 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000032e000/0x4000)=nil) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) mmap$snddsp_status(&(0x7f000076a000/0x4000)=nil, 0x1000, 0x2000004, 0x8010, r0, 0x82000000) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r1 = gettid() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000485000/0x4000)=nil, &(0x7f0000834000/0x9000)=nil, &(0x7f0000614000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000362000/0x1000)=nil, &(0x7f00002ea000/0x2000)=nil, &(0x7f0000635000/0x1000)=nil, &(0x7f0000450000/0x8000)=nil, &(0x7f0000226000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0)="392b27e53cd232a248374666", 0xc}, 0x68) (async) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) madvise(&(0x7f00002c0000/0x3000)=nil, 0x3000, 0xd) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000140)=[0x9, 0x7fff, 0x4], 0x3, 0xff, 0x8, 0x5, 0x6, 0x1000, 0x9de, {0x3, 0x3ff, 0x6, 0xae, 0x9, 0x73f, 0xff, 0x1, 0x7, 0x110, 0x0, 0x2, 0x7, 0x4, "ec19c7ef5f64bf15a382bd40106957249bace6be0fa0d9abe333a834201f98f2"}}) (rerun: 32) 06:30:00 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xfeffffff00000000) 06:30:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x3f220000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) [ 2576.388554] fat__get_entry: 14 callbacks suppressed [ 2576.388566] FAT-fs (loop2): Directory bread(block 6) failed 06:30:00 executing program 5: r0 = getpgid(0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) sched_getattr(r1, &(0x7f00000001c0)={0x38}, 0x38, 0x0) capget(&(0x7f00000003c0)={0x20080522, r0}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={r2, 0xffffffffffffffff, 0x200}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) 06:30:00 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0xd0}}, 0x8800) (async) splice(r0, &(0x7f0000000000)=0x7fffffff, r1, &(0x7f0000000040), 0x5, 0x0) [ 2576.450527] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2576.457199] FAT-fs (loop2): Directory bread(block 6) failed [ 2576.568940] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:30:00 executing program 5: r0 = getpgid(0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) sched_getattr(r1, &(0x7f00000001c0)={0x38}, 0x38, 0x0) (async) capget(&(0x7f00000003c0)={0x20080522, r0}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={r2, 0xffffffffffffffff, 0x200}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) 06:30:00 executing program 1: ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) r1 = socket(0xf, 0x800, 0xc8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_proto_private(r2, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x3, 0xa) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRESDEC=r7, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r2], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\"J^~', @ANYRES16=r6, @ANYBLOB='\x00'/11, @ANYRES32=r4, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x4}, &(0x7f0000000100)=0x28) r9 = dup(r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r9, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:30:00 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xfeffffffffffffff) [ 2576.641653] device batadv1216 entered promiscuous mode [ 2576.681383] 8021q: adding VLAN 0 to HW filter on device batadv1216 06:30:00 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) [ 2576.781631] bond1217: making interface vlan1055 the new active one [ 2576.831180] bond1217: Enslaving vlan1055 as an active interface with an up link [ 2576.848319] bond0: Error: cannot enslave VLAN challenged slave lo on VLAN enabled bond bond0 06:30:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xf502}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:30:01 executing program 5: r0 = getpgid(0x0) (async) r1 = fcntl$getown(0xffffffffffffffff, 0x9) sched_getattr(r1, &(0x7f00000001c0)={0x38}, 0x38, 0x0) capget(&(0x7f00000003c0)={0x20080522, r0}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={r2, 0xffffffffffffffff, 0x200}) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) 06:30:01 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xffffff7f00000000) 06:30:01 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x48000000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:30:01 executing program 1: ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) r1 = socket(0xf, 0x800, 0xc8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_proto_private(r2, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x3, 0xa) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRESDEC=r7, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r2], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\"J^~', @ANYRES16=r6, @ANYBLOB='\x00'/11, @ANYRES32=r4, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x4}, &(0x7f0000000100)=0x28) r9 = dup(r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r9, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) socket(0xf, 0x800, 0xc8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_proto_private(r2, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$inet6(0xa, 0x3, 0xa) (async) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRESDEC=r7, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r2], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\"J^~', @ANYRES16=r6, @ANYBLOB='\x00'/11, @ANYRES32=r4, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) (async) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x4}, &(0x7f0000000100)=0x28) (async) dup(r0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r9, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) [ 2576.880783] FAT-fs (loop2): Directory bread(block 6) failed 06:30:01 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2576.962502] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2576.976719] FAT-fs (loop2): Directory bread(block 6) failed 06:30:01 executing program 4: munmap(&(0x7f00003b0000/0x4000)=nil, 0x4000) madvise(&(0x7f0000538000/0x2000)=nil, 0x2000, 0xc) mremap(&(0x7f000072a000/0x3000)=nil, 0x3000, 0x800000, 0x4, &(0x7f0000130000/0x800000)=nil) remap_file_pages(&(0x7f00007f9000/0x1000)=nil, 0x1000, 0x3000002, 0x8, 0x2000) r0 = gettid() shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) process_vm_writev(r0, &(0x7f0000000500)=[{&(0x7f0000000040)=""/246, 0xf6}, {&(0x7f0000000140)=""/19, 0x13}, {&(0x7f0000000340)=""/214, 0xd6}, {&(0x7f0000000440)=""/174, 0xae}, {&(0x7f0000000180)=""/61, 0x3d}], 0x5, &(0x7f0000000000)=[{&(0x7f0000000240)=""/231, 0xe7}, {&(0x7f0000000600)=""/92, 0x5c}], 0x2, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:01 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xffffffff00000000) 06:30:01 executing program 4: munmap(&(0x7f00003b0000/0x4000)=nil, 0x4000) madvise(&(0x7f0000538000/0x2000)=nil, 0x2000, 0xc) mremap(&(0x7f000072a000/0x3000)=nil, 0x3000, 0x800000, 0x4, &(0x7f0000130000/0x800000)=nil) remap_file_pages(&(0x7f00007f9000/0x1000)=nil, 0x1000, 0x3000002, 0x8, 0x2000) r0 = gettid() shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) process_vm_writev(r0, &(0x7f0000000500)=[{&(0x7f0000000040)=""/246, 0xf6}, {&(0x7f0000000140)=""/19, 0x13}, {&(0x7f0000000340)=""/214, 0xd6}, {&(0x7f0000000440)=""/174, 0xae}, {&(0x7f0000000180)=""/61, 0x3d}], 0x5, &(0x7f0000000000)=[{&(0x7f0000000240)=""/231, 0xe7}, {&(0x7f0000000600)=""/92, 0x5c}], 0x2, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) munmap(&(0x7f00003b0000/0x4000)=nil, 0x4000) (async) madvise(&(0x7f0000538000/0x2000)=nil, 0x2000, 0xc) (async) mremap(&(0x7f000072a000/0x3000)=nil, 0x3000, 0x800000, 0x4, &(0x7f0000130000/0x800000)=nil) (async) remap_file_pages(&(0x7f00007f9000/0x1000)=nil, 0x1000, 0x3000002, 0x8, 0x2000) (async) gettid() (async) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) (async) process_vm_writev(r0, &(0x7f0000000500)=[{&(0x7f0000000040)=""/246, 0xf6}, {&(0x7f0000000140)=""/19, 0x13}, {&(0x7f0000000340)=""/214, 0xd6}, {&(0x7f0000000440)=""/174, 0xae}, {&(0x7f0000000180)=""/61, 0x3d}], 0x5, &(0x7f0000000000)=[{&(0x7f0000000240)=""/231, 0xe7}, {&(0x7f0000000600)=""/92, 0x5c}], 0x2, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) [ 2577.127950] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:30:01 executing program 4: munmap(&(0x7f00003b0000/0x4000)=nil, 0x4000) madvise(&(0x7f0000538000/0x2000)=nil, 0x2000, 0xc) mremap(&(0x7f000072a000/0x3000)=nil, 0x3000, 0x800000, 0x4, &(0x7f0000130000/0x800000)=nil) remap_file_pages(&(0x7f00007f9000/0x1000)=nil, 0x1000, 0x3000002, 0x8, 0x2000) r0 = gettid() shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) process_vm_writev(r0, &(0x7f0000000500)=[{&(0x7f0000000040)=""/246, 0xf6}, {&(0x7f0000000140)=""/19, 0x13}, {&(0x7f0000000340)=""/214, 0xd6}, {&(0x7f0000000440)=""/174, 0xae}, {&(0x7f0000000180)=""/61, 0x3d}], 0x5, &(0x7f0000000000)=[{&(0x7f0000000240)=""/231, 0xe7}, {&(0x7f0000000600)=""/92, 0x5c}], 0x2, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) munmap(&(0x7f00003b0000/0x4000)=nil, 0x4000) (async) madvise(&(0x7f0000538000/0x2000)=nil, 0x2000, 0xc) (async) mremap(&(0x7f000072a000/0x3000)=nil, 0x3000, 0x800000, 0x4, &(0x7f0000130000/0x800000)=nil) (async) remap_file_pages(&(0x7f00007f9000/0x1000)=nil, 0x1000, 0x3000002, 0x8, 0x2000) (async) gettid() (async) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) (async) process_vm_writev(r0, &(0x7f0000000500)=[{&(0x7f0000000040)=""/246, 0xf6}, {&(0x7f0000000140)=""/19, 0x13}, {&(0x7f0000000340)=""/214, 0xd6}, {&(0x7f0000000440)=""/174, 0xae}, {&(0x7f0000000180)=""/61, 0x3d}], 0x5, &(0x7f0000000000)=[{&(0x7f0000000240)=""/231, 0xe7}, {&(0x7f0000000600)=""/92, 0x5c}], 0x2, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) [ 2577.205308] device batadv1217 entered promiscuous mode 06:30:01 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xfffffffffffffffe) [ 2577.258364] 8021q: adding VLAN 0 to HW filter on device batadv1217 [ 2577.288215] bond0: Error: cannot enslave VLAN challenged slave lo on VLAN enabled bond bond0 [ 2577.358116] bond1218: making interface vlan1056 the new active one [ 2577.386634] bond1218: Enslaving vlan1056 as an active interface with an up link 06:30:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xfe0f}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:30:01 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = getpgid(0x0) capget(&(0x7f00000003c0)={0x20080522, r1}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) move_pages(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000294000/0x4000)=nil) 06:30:01 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) shmget$private(0x0, 0x4000, 0x4, &(0x7f00004d4000/0x4000)=nil) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:01 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x7000) r0 = gettid() r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x50, 0x0, 0x0, {0x0, @esp_ip4_spec={@remote, @multicast1}, {}, @udp_ip6_spec={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x0, @broadcast}}}}) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f0000000140), &(0x7f0000000140), 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0xb6000, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f00000004c0)={0x7, 'dummy0\x00', {0xbc}}) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/216, 0xd8}], 0x1, 0x499, 0xfffffffc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c00bef182e071ff6caa01a59a990000e02d911e816100", @ANYRES16=r3, @ANYBLOB="000229bd7000fedbdf25870000000c009900001000004800000026002a007e1505ea08ffffffffffff0104000005000000e905000072060303030303032a010200000a000600ffffffffffff00000a00060008021100000100000a0006000802110000010000"], 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x10) 06:30:01 executing program 1: ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) r1 = socket(0xf, 0x800, 0xc8) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_proto_private(r2, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r7 = socket$inet6(0xa, 0x3, 0xa) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRESDEC=r7, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r2], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\"J^~', @ANYRES16=r6, @ANYBLOB='\x00'/11, @ANYRES32=r4, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) (async) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x4}, &(0x7f0000000100)=0x28) (async) r9 = dup(r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r9, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:30:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x4c000000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) [ 2577.423986] FAT-fs (loop2): Directory bread(block 6) failed [ 2577.485580] FAT-fs (loop2): Directory bread(block 6) failed [ 2577.522709] bond0: Error: cannot enslave VLAN challenged slave lo on VLAN enabled bond bond0 [ 2577.535703] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:30:01 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000000)=@mmap={0x1577cb24, 0x2, 0x4, 0x1, 0x4a8, {0x0, 0x2710}, {0x2, 0x2, 0x5, 0x8, 0x9, 0x27, "24a63a40"}, 0xfffffffd, 0x1, {}, 0x7}) [ 2577.633161] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:30:01 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000000)=@mmap={0x1577cb24, 0x2, 0x4, 0x1, 0x4a8, {0x0, 0x2710}, {0x2, 0x2, 0x5, 0x8, 0x9, 0x27, "24a63a40"}, 0xfffffffd, 0x1, {}, 0x7}) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000000)=@mmap={0x1577cb24, 0x2, 0x4, 0x1, 0x4a8, {0x0, 0x2710}, {0x2, 0x2, 0x5, 0x8, 0x9, 0x27, "24a63a40"}, 0xfffffffd, 0x1, {}, 0x7}) (async) 06:30:01 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async, rerun: 64) shmget$private(0x0, 0x4000, 0x4, &(0x7f00004d4000/0x4000)=nil) (rerun: 64) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2577.714902] device batadv1218 entered promiscuous mode 06:30:01 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x800000000000000) 06:30:02 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000000)=@mmap={0x1577cb24, 0x2, 0x4, 0x1, 0x4a8, {0x0, 0x2710}, {0x2, 0x2, 0x5, 0x8, 0x9, 0x27, "24a63a40"}, 0xfffffffd, 0x1, {}, 0x7}) [ 2577.784719] 8021q: adding VLAN 0 to HW filter on device batadv1218 06:30:02 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 2577.869958] bond1219: making interface vlan1057 the new active one [ 2577.932491] bond1219: Enslaving vlan1057 as an active interface with an up link 06:30:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:30:02 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) shmget$private(0x0, 0x4000, 0x4, &(0x7f00004d4000/0x4000)=nil) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:02 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) 06:30:02 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x7000) (async) r0 = gettid() r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x50, 0x0, 0x0, {0x0, @esp_ip4_spec={@remote, @multicast1}, {}, @udp_ip6_spec={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x0, @broadcast}}}}) (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f0000000140), &(0x7f0000000140), 0x0) (async) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0xb6000, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f00000004c0)={0x7, 'dummy0\x00', {0xbc}}) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/216, 0xd8}], 0x1, 0x499, 0xfffffffc) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c00bef182e071ff6caa01a59a990000e02d911e816100", @ANYRES16=r3, @ANYBLOB="000229bd7000fedbdf25870000000c009900001000004800000026002a007e1505ea08ffffffffffff0104000005000000e905000072060303030303032a010200000a000600ffffffffffff00000a00060008021100000100000a0006000802110000010000"], 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x10) 06:30:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x60000000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) [ 2577.995274] FAT-fs (loop2): Directory bread(block 6) failed 06:30:02 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:30:02 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x500000000000000) [ 2578.062262] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2578.096211] FAT-fs (loop2): Directory bread(block 6) failed 06:30:02 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="11b5149f0efe44d8882586c57659c7f64d337b6e1548215d95b271b5947d033f9028ee44cf5442a181e02ca238459b1e0d7de58b5e61c977ab46c90d7b646da6b6b9f7ab5ebf80b66d34c82e46ee9aba7c0c9147b6af26028d5d0330e340722d55af0836c642f088f83362679b4f77b23f19ce24ea1fe0ee6ae400b0e4d02f4aaf13d13c8a335c5b2c509f63045f503b2290257041f134452dc2a6d75f99bb54deb5fccad89db3266493ff1b1ec16a9255b4f7eee9254718d08bac2ed714019305cb58c53d8d4e4d"}) 06:30:02 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) move_pages(r0, 0x4, &(0x7f00000002c0)=[&(0x7f0000558000/0x3000)=nil, &(0x7f0000393000/0x1000)=nil, &(0x7f000051c000/0x1000)=nil, &(0x7f0000727000/0x1000)=nil], &(0x7f0000000300)=[0x81, 0x8, 0x5, 0x8], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r1 = gettid() r2 = gettid() move_pages(r2, 0x6, &(0x7f0000000140)=[&(0x7f00002d8000/0x2000)=nil, &(0x7f00004c4000/0x1000)=nil, &(0x7f0000894000/0x2000)=nil, &(0x7f0000732000/0x4000)=nil, &(0x7f00005c6000/0x4000)=nil, &(0x7f000032c000/0x3000)=nil], 0x0, &(0x7f00000001c0)=[0x0, 0x0], 0x6) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:02 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x7000) (async) r0 = gettid() (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x50, 0x0, 0x0, {0x0, @esp_ip4_spec={@remote, @multicast1}, {}, @udp_ip6_spec={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x0, @broadcast}}}}) (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async, rerun: 64) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f0000000140), &(0x7f0000000140), 0x0) (async, rerun: 64) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0xb6000, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f00000004c0)={0x7, 'dummy0\x00', {0xbc}}) (async, rerun: 64) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/216, 0xd8}], 0x1, 0x499, 0xfffffffc) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c00bef182e071ff6caa01a59a990000e02d911e816100", @ANYRES16=r3, @ANYBLOB="000229bd7000fedbdf25870000000c009900001000004800000026002a007e1505ea08ffffffffffff0104000005000000e905000072060303030303032a010200000a000600ffffffffffff00000a00060008021100000100000a0006000802110000010000"], 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x10) 06:30:02 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="11b5149f0efe44d8882586c57659c7f64d337b6e1548215d95b271b5947d033f9028ee44cf5442a181e02ca238459b1e0d7de58b5e61c977ab46c90d7b646da6b6b9f7ab5ebf80b66d34c82e46ee9aba7c0c9147b6af26028d5d0330e340722d55af0836c642f088f83362679b4f77b23f19ce24ea1fe0ee6ae400b0e4d02f4aaf13d13c8a335c5b2c509f63045f503b2290257041f134452dc2a6d75f99bb54deb5fccad89db3266493ff1b1ec16a9255b4f7eee9254718d08bac2ed714019305cb58c53d8d4e4d"}) [ 2578.217662] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:30:02 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="11b5149f0efe44d8882586c57659c7f64d337b6e1548215d95b271b5947d033f9028ee44cf5442a181e02ca238459b1e0d7de58b5e61c977ab46c90d7b646da6b6b9f7ab5ebf80b66d34c82e46ee9aba7c0c9147b6af26028d5d0330e340722d55af0836c642f088f83362679b4f77b23f19ce24ea1fe0ee6ae400b0e4d02f4aaf13d13c8a335c5b2c509f63045f503b2290257041f134452dc2a6d75f99bb54deb5fccad89db3266493ff1b1ec16a9255b4f7eee9254718d08bac2ed714019305cb58c53d8d4e4d"}) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="11b5149f0efe44d8882586c57659c7f64d337b6e1548215d95b271b5947d033f9028ee44cf5442a181e02ca238459b1e0d7de58b5e61c977ab46c90d7b646da6b6b9f7ab5ebf80b66d34c82e46ee9aba7c0c9147b6af26028d5d0330e340722d55af0836c642f088f83362679b4f77b23f19ce24ea1fe0ee6ae400b0e4d02f4aaf13d13c8a335c5b2c509f63045f503b2290257041f134452dc2a6d75f99bb54deb5fccad89db3266493ff1b1ec16a9255b4f7eee9254718d08bac2ed714019305cb58c53d8d4e4d"}) (async) [ 2578.314047] device batadv1219 entered promiscuous mode [ 2578.362493] 8021q: adding VLAN 0 to HW filter on device batadv1219 [ 2578.467561] bond1220: making interface vlan1058 the new active one [ 2578.486150] bond1220: Enslaving vlan1058 as an active interface with an up link 06:30:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xff0f}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:30:02 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() madvise(&(0x7f00002ff000/0x2000)=nil, 0x2000, 0x64) process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f00000034c0)=""/260, 0xf6}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xfe}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/71, 0x47}, {&(0x7f00000022c0)=""/182, 0xb6}, {&(0x7f0000002380)=""/154, 0x9a}], 0x5, 0x7f, 0x8) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000344000/0x1000)=nil, 0x1000, 0x2000000, r1) pkey_alloc(0x0, 0x1) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0) 06:30:02 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) move_pages(r0, 0x4, &(0x7f00000002c0)=[&(0x7f0000558000/0x3000)=nil, &(0x7f0000393000/0x1000)=nil, &(0x7f000051c000/0x1000)=nil, &(0x7f0000727000/0x1000)=nil], &(0x7f0000000300)=[0x81, 0x8, 0x5, 0x8], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (async) r1 = gettid() (async) r2 = gettid() move_pages(r2, 0x6, &(0x7f0000000140)=[&(0x7f00002d8000/0x2000)=nil, &(0x7f00004c4000/0x1000)=nil, &(0x7f0000894000/0x2000)=nil, &(0x7f0000732000/0x4000)=nil, &(0x7f00005c6000/0x4000)=nil, &(0x7f000032c000/0x3000)=nil], 0x0, &(0x7f00000001c0)=[0x0, 0x0], 0x6) (async) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0xa) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=r2, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r3, @ANYBLOB="0a003400020202030202004b"], 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\"J^~', @ANYRES16=r1, @ANYBLOB='\x00'/11, @ANYRES32, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1400c480}, 0x4004) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180018400000000000000000000000049500000000000000", @ANYRES16], &(0x7f0000000480)='syzkaller\x00', 0x7, 0xec, &(0x7f00000004c0)=""/236, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x1, 0x3, 0x1, 0x1}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)="48324a66309ea29c4b9436f695175f92769c3e232b5688853ec5a09f22829e94866b", 0x22}, {&(0x7f0000000380)="55af6e3a91431eb79aca0a5a965d200df29a721e5c6a2de1d34d8593a17296447f7e9501fc7dbd13b484eb61ff505d1611aa4695dcddd8505e06b04c3a9397770bc8637060a3315b67fcb3b0406a5a1ba2ac946ab784674a1d68607a65cb3f156a86fd0f1b46383b4a015ddf041484", 0x6f}], 0x2, &(0x7f0000002900)=ANY=[@ANYBLOB="1010000000000000110000000000008050adf3a9bffcd40ab38e619028e923585acd56fcc8149b7cf7204551783b6e37019616987df7c578e88f3e7041e2a87f209a0614d45a4291a235bfa392657154782f2bbb63c80fed06537446603c842355aa00ffb75959266ae2ddff74f5ac95c82a41b9c49c5a3cb1dfa6721398a60fe893d44d8ae8d55fbcac03b0ed5d2f473c268407ced2572e1af269323eada12d11abc24fb159949684471c6ec6cd027cd43790e77e0800ecf1bfd09cca5836ce3ccdce73b3fe0163638c34f71a0195bd8783b90667bc01dfc1f342362f6edcb8ba43bc1ae4ad220d5a82bdacfdb172617f25d76df4bfa07e038185221b170f7bea06f920d43c117bcc6106f4a9a7526e53277068b5a2fd17814ac172f8ca3bfb0f24aa40419317e2509cf141248b4175d5500973c9813ae90202745f492c21f17450d0ae8bb44a7738b5d49951956737f00f8b87f3e511e5771191339c4e2ad0958cc36eeeafa541ba5002c87782b9a5d54710ed4a1f3a830e2daad60c0759af13b9968b3d2438864c6259732e6fc7136310bab1c9400a4916bbeb96d0b9b4c766a7dc465911f88ae2666e71fdf20e1c4ac89e5030cb89820ffccd9f266d8136ba56d91edc428f292fff85f3e5fda29cfedb6f6bbf4834f8f87bebc66db740b9e9dd0b3e442d5da1014391d6bc9bdfb12810f32a5576f140c4f54dc807940e936f72bf4a8b5129ce5fd7cf0bb5bc89a6bf6a858e22d0b9cf8f81e5f256a8f8af8464d2b7fe917fd668df5072be335dd2721bec0eb0a236493eb798a5f264f59c9077fc9edd8005a2341f6ad5d9aff86006dfd7cebea7fb82b282b6317956aaec8ebefcef92a66de1aa1ebace4be2cb7a7e8936836ac2ba58cf1ce02ab29bda14732c44d802e69b31a4537e23117a3f5b452a521382039d21168ad39b56d6eee8ad6a258e0c0cd1ac7fd55f7efb410e2df79262400e69fefedd56accfae811563c74bc755aa8af2f365ecfb4195d2024a60fb109eba367f4009d571988b8c0c8b2fd329fa5394a7f1a5fc2bd9249dfe7ddf6ee5da109b5c78936a76cf845ec9f05cea5fa583e90c7588e06413950911e3caff5a3e8d5b3d1b8d2f749963eb8ac6738ede388c24331d5cc37800f3eb667f333d6a3a73ff7141c9ab1580e09aec18162e35d1bbd2af90cbfc64965664c675c168e4f15d7efe0924b94285ece92ae3670000ab0ad023c7e4b8775fd9cbc4fd14fe26b29290beef2b6b90b39986dedb9e28ca771682a50af5c15e04b5f310af647ca00d593ccf9e3418b3c84f336cb4ac16d9dec8cd7ad6d6ea232430bd0ddff738f119731df149bd1009fccc2612a4babb0050f0b3aab94ee01f24516827ebabd7391175e40e00200fc20849ef821603f7864ec3f3bdcba363499f08539f6f9ce985f33a5ddebead9092fc93d9646424bcb43eec09263edf02dc74c1927a14b8fb3b90710c6b1b7255808a801640cc39a41e36811c856d1a12235996068889a2e3fa9d81c11c2c98488ae6b734a44f5d3e7cae67d1a173855a81d11cc04c14280a598a48ad13748619c46b2b65f835e780b26f43874c5de1f3c4f7427690ea4dec8e227bc49fb249c9aacd07d27b4861e6b52443126627ce7cde4fe6f65951f68b377a1a4ccbe4c28d665069ab8fa126611a7e8d5edf04be9eed8c774793739383e59785c3502c588c1c9d7bdaaa9c9ef42884bfe1fe9c6778df54df98a0902ef03e6b13aa0c7ad62f0ad2bf2c7c9a18f0af3bf71116b3549e33d482884ac841560b09516114d35577fe9f75f73b4dd9c27891ff0c0a5d930c0e8d3ea1065cf787fcc2a8ea0704958bd18bf6d6f6425f8050e51a63ffd1086e96165d8361a1c84a43d86d005d8f428cabafe5a391b85ccbdd4e3228b2c228c321ae83b5b283bd43198d4ac34a34defc290630e5b0a9ff87afdc7454239b54ea2c5a753d49c33442bf40cb81a3da8d558d28e3cd3c03782b251a46afe1fb75c1ca9eb86d51ae86cc202924b55430d2e4fdbeead30f6f7f2c5df34dc9dd97e12624bdb52f2050090b5378fc8c6803bd0023da75a12afb73942fef67a88b34e5cfecf5683fd8be9bc5a6bb147ed12a08f82b78dabd733fb9f86854edb9b5013b3434c0c5d0dbe117b8fd0878c7af4bcb07668207ef3cf6df1a34d3d6cb37ebbe799b2f5d83d63386cbdbecaef155c86e9c09dbb35046c017f7d8ec7652a456e4b5b023f31ec2a2199892c6ca296420e0cb76df05df9a65984e9806cc2acb01f28c2bb30285122ea1e1bf18ac10e65f52bbc0b487e71ad73f7182059671022937ba71eb98abf969a43a1720e9df6f95f1d575ad71b60982675278405c51eebdecb0af232e6c56dfe773c8a6dc63dc7a43ffa781d35dbdafed027b88fbc528d98a54b6197e36e83779d8b7a5a0603d63b0a5924f23ad6408d1bc7b960049e949f682f86650058c78e702b6abb4075bd4fe909df3c7e48839a550eaeace7ba59fa7e647116f340e6acbf07382a0b89d778fa2849d6b5571024231368b6757cc6de9b994deca9b62d079c4b2ba9626f89078da16170908207527af4f9bceac8ebc404df1e87354e074b15562ec9683cc7a86ee876f4f70b8da92c8d489d7e1dcb8be139ff9684fa7dbbba358e968e1fe2178f12ba1aa3ed2ecf01a72bf24b66d7a6c6148fe558e44125e3c342af09e7598b5084567c28eed59eaf5203284e8b0770388ebd231d257d1cdab2be640bae03049985f95c7bf24b2abc5c1facf8e25053e64ae2a3785e07bf2068fc64b45fa06d5b45ae6fe2fdfe7be29b52bf9c3fc924edd00088c6c71994a90fc4717a323769e83aadc338d0904a30c1dfd5a9603d096c82f556119930e05c57a0f9f22ab7784a4a531e57ea38e9628e3c04b7e4f7f9eb3603acc8ca67a0d95aa3317cf5b896d0d930a7ff596d664a9b41a63225ade5f64d07f56e2c6bb3acd6a64199fd796b46bc5cca6e6949a6d19a94fa54c8408afbaaf4c402b51cf9290d14c51862ca8c02596a7e8a54587f6f0772eb59fccbd9a14208924817159b7cb0620b1797fdb17763cfc4e9b4f5b093728aa7c94f4594d652b3986843106f27cbbeb5be80991427a67f1b2cb37f02065b2f7110cbcd3bd754b621ad9eec6946add6d0bb6ee78c0fe183612525d20ec740b25374e6f31c047a0f391f8998322d64a9e0b6959ee67c38b71be95efd9ecc3d15898056110274da7d8488a6cf1776cb3f960371046d03d4902b21ec98010804d76d4c7fb36cc3abe2467cdb51d674ece842189e2ff25300383e831957836892caa7c0118520c6673e40f0b6d7ed81b546821bef6586efd579764de1c6b0c25b738dfbe3e7e7dfc7d3400b551608ae09b4a0843c314ab33571ba2b12d9401c91b38a41df41661540361434b75bf4ba9aa0d55ae2f4498b12b2a9145f699080766d4cd3f36bf28085eaf512f1000b06c23bf2e490f7b48d4d57ba93e5fc3cfc60692cd37a0c8a5e273d0405aa7f394784f1ad9102d35c4e816f6a0edc6dee00629012478305bd909fc6ec45664bb5c219efbc4ade6243a06af62817e5183784308ce87bce15d765396bc441667bc8417aa12137936aba886e26e986c3c18b638678288853c4eab7e688188939abb87a04699bccfcdd1ea2721bd5447b574471d79c8481d1b30dd253990f059cadf0933d0434d9f78b6d5b742a7721910118af518aefe248f8c209d52b9b0f7ed21318634565a8a36c322222d62b3a444e8896ea0e7c857c262c80b6e24a7482c3b29abfc3307ffa76223f55e8356d921da68ffc30d30af8c8fa86831820c58003166726b8073a4d6ea2beed40596e6c97d1a5abcc80bb252be35f82115a6fa0ef253a0125719f9e060ee3c8a5c7586e19ee30ba705b9a5cdc84ae4723b7711467eaae627da7ba35447d116054a0a13b26ef385cc1b90b907338a663f35e7b28543ff332e63b6904e24d7de4448887c068722360fbb1ed04cf320f4e8fd488632d08294a6723877fdfc4cc4b47bd3e5b4873093c67ee72b018e188a1ab2b5edcad74a91bb8432a10c82f46897f726df32b6a3da8b6849afb09f047d908a31df0b887d3eee78e50e6b5fca6aa005d87a78fda27ffd081e56c003fde147953068c1ab3657f2c170ab57e792cb8f56553cc163c4555579351f51b4c897da6e8fc457faf5bc67e5cc2708fb8c00ff956128c40c561eaa4a3eb22353e6a823d4bae846545eb6a4c40ccfc7fdf28c13c3c7d48e0fbb6fd8b6750d1041b5f19dcda7ea462c488d19fcb3e9ea6579760e03806eaa4e8511bbf41ab1627d5030c6577a1b1462db1644fa649f344f085fe1e9734676550905c6fb9b5759f3074bae85a22f6f9aff7250e9cb4b0511dc36ea89ea0f6513d7ac96caeb69d2d705493278d238a111a8cf8f8a2bce503b94c7ed9c310770431a5260434113ff82d58b24db0d8d9cb6ce4dec9fe27f5a5826e7ec28f76ef7c1c1e5c077fe215d16dd33ec28997235ff9ee918b9d8eb27ab2a1f9e9bdce5dd09c9b0203bdf8bdc340dcb5b7faf201cca969599a319aed6276b0a3e4c88a0d5e2ef0d6b660a5bb32998dfbab08c4e4af5938a7505d575754576140bd679fed0d0c2fe9d6d1bce318f0860b1ba0cf30fb8bab8a3e0b51d6f33371375f4a7c9c4af2b0b9b49ac407993cdaaf81b5c80a011c1f0912e99f09c8d6b24365d3e43982ebd97df4fadb65e6947297488e48238c9f51c5ddff57bb8473091a7230c83ce52a5a7780a8e98144ff54e72629a318d0ff9fe87116d3fb1a4ed0b943d8c84a6949674ea1f433201daa2d4fdd54fb74b707749b616d38f38d6601ad3ad571414bfedde090a6f2e737a4d0fe435af2a3f79566758f9eefc1daadb91aebf0e4df96592646800e4d97a403644d25388a7bd279a843452dceb0ed19ca4c3815ee1d6bfa522fee253c94ddaa4fb95702b93285321de86517476ba7e9439e5922a044ced759093935b95787327bda93b3f3aaa0627b5c00e1873b6c45b97b706f7ce56d40e1031d8ff07d137cb118205b8ffc3ba6c93f16870b43b0694cd405a43208df7306b3bd0e0bc4483368ff9f0458597f6e4615bec1e74b451f65bed3c5c7391f439ced3d2ec05bd6d38ce5f4f0e52b016e0bea32bf479fe8ec50452f2d0457f1321b4f3a1c3d0bc01d4b3620e58a1e781abda6f4fbf77820a3984be711bc50c54753d45526d2c833f220e9f76ddc6ae14313dc7d456753f4fb13798cf44153d1626ec324362c0d423f30d0a80f7af5fa23521ef93cf35150f0823e0035bf9ead77afac77665dc6de45cc17fd00ffb98a50d91c2e061ad2274c191248dde2355ea39e1558573d28d98b180617f046004ead78d496c7f8340a392c55886201c4473b747f09f99f5a7c390b61766261398ed69a7b44a86d62e3d420a5e0aa58ee2b3c7d8f9fcc424ded4e64e7dcca88d162082a57110465502ba97416572ef15555af582cf77ba5004bcb2a715fa2f6b2c4caddcae89ef5c39f581aec20619d302dc227c084f6b6d0dcb38be1faf7371574103b2e38c925f5e28260a10a152f1cfa4198b2a1c061ee0ca33ae0ca2f3548f0271d31d3bcd2574b3d1c932acfaab1954bba948566d6ac5359e23993301d2253715adfea0821365c22e874b97049e44f5171f4132c6d10fb8e405f92fbba669612131119b059eb2cdfe2f6ed6e523ba8583169c310fd5276f84a6c6d4b71e9cab5291db4482917c682a603f6fcdfec6974f3f8e2e46fac377e76419e12ddd44dff8ec99cd8ba8c6446753387648fdd33e0f678a0714d4b0d338d87a8a9dcee10308010000000000000100000000ff01007a8bb01539cda6bfc92977417da4ad9a1c7d10b590e8ea71145f5469ad0cc886403a5ddfb4ae90c193050703b37b05dc8d6f6f14e47804a774a198781962cf016887ad3f83c349d6e294b71ffb5626eae7b40675774991ba6fd62521ea68158449c8d044a60a418b93ac81301940ffaac2f9135ed53ccf6bf88b39f1166a7981e546ec084fc1703f153a759095a338eb20efd0866f00aa48db493ca27614f5c8fbdf9f67837fc888ddd4dc9ea64c9d9338ecc34aebf3a74f24d9a61d760beaf534c39784d43d0556b46f7634e0371f2ca0fbb93ed35d635b09cb9ac86874da18b5bedac062ffaaf98c2206e7244771e1a3e0d0d14800000010100000000000003323d0df01000000adf2b81ae4e8d39d41ff1754f26e4ae508d5e05219fa82b950e6625beed0c89dc0f20ed3c401552add9234a4166ccfd4206173aae2112a3b84befed60f650e5809e79054476910a89de37b5af01645c1f0e621ea2d1e4fc9194b917ad61c92eb6c7c44dd36d5ec32999577217e3b1b1ad441d1f6a47fcd96667b80145b443632130186e4751bae41aadd37314a59a08adbd0c2e9f9d095e220cf673b448632e794088f397bfaa3751f8b130ef74944696984ca6cb2bca251a53c3cae9e0e4aa0f7b6e8f3950ca0585e6c84c3fd405177dd0f2d4a70952457516a18e2f6c1cce5d66321b71bfa71992e7314edd093f8231a447ad7f0eb5c679d5cc78b5275bd096b2b6727f76c0357c1dca5cd192b321d774a9e0aabc02c552fbd6741b432de17e3ce6c2f91a729c8b3145e4abf07b1f57b04d106bf5ecfe1d2a3d69cf74fe218d2f39f83126d193e0f359137ae8aefab26eaea22a371d8832740558826d1bf16b76b71d20067ebf588e27509bc53c0408588f95592c7bdd7a3adf5cc8a2b47e4a0157c2ed5592e5d57fa8087180ebf3b0ea070f6f85a94b3e81e7ed0aa63bc708b43586f287c94deb903641e5b40dc58d17cbd95aef243342f8e623830e2b25aeeb24c9bb159c7e4dd38e9bedfb74e494ab9b0fc526b4870c357f7beb414aacaf8c2561a52c057959666a48e738c6405d1f653f23d8afb1ce209bc518f47a8edeb1524193e736b25ef7b31a329f8c15b9da4172a71e260aaa6e6b64cea8f361c12ac0d358f80fd31ace32cdd76956afe4484ca256e64058d24bddff912277c8c0e31c3abc7215e79da5fc5dd831c9653f976d46f555a59ce7559a8f69413e39d9edf05cf0a760f19823e9448f771b6c7ec97bd8acd82203cdcea3e63d984f18132935cbe56e8f19b6ad8520b385a00674614bf5f40ff95b21c55d090ed2667c8239ff5b85f0903319663796fe6f025ac56ad2e858d7846ae294a7e3b3bee2c48d41659f46b9b24ddcaa6b0e0734bfc869cbfa8f11a7fef2d5f5d4d440215e9624bd19e261801acf34dfa894118559f859bbaab4feae7a27765fea2e915a574f80e6030ceece0ff1aa7f518b49ad4b01271b682d7d6e1c510622b2ad0b27498b8128597ad36123abf172ba9b38c3c07142c40f77ecbb3d74f9bc4c6239e427a4061663be520e0fd340038aab08d0a4b96d08809b3962389fcd6a1ea17524125027f609dcbdc58b11aab1b26c121c7305be73ce9b08f36cc3ed6ea80497ad6889a9659c74e32f64ad4503a34fd6b8b7a6d86039a1c1d25c9c33e41744a5a1a72d35be698d1cc593da5e8ae8c7f1addd28eb30dc1992a388c2a71ecec9f40a607dc18c8802eec796dce919e533a8efc2eb1d1ce6becbb2973c88bbf723a0cbb309d9b19ee7e4b48dc4628e0e56653c251f803bcc79780acb59512cccb34a5d4c52bc9f32ad4cc7ec65c7bc91dfd2af2fe4674cbf6dfc130152ea80a2d48964c2f9ec4be5134309dc6a2494be9098800bee272c282ea197f83fe160fe95ec8370600d7825a493e23496eb640533ab003474b37b558796f1bfcdf3dbd893af735f737acf4a14827014879770845140f139cc2a6978a0fae3d0358016167115158e34308f57278308d68782203c7f6dfe5d4cd1e607f35b338836f912f334725e717899f49ae613e7b9fa422031ef866f16e6b492f55ed2c2627b3fe90a42192fe7a716db8ddcb0f39510e690634e310f66df373d5534db00db54ab9cf022dbf807d61452e8cc2d5acc4dda0ddcbab950d2376b15b782e7de0fbf99cf970d28dba8a7597f97427a084de4bf98b3bb224ca811cd8f779b74c122cefa6f90458eb563bd35ccebf627ae50de0d559eaa19493d3cc5e6db06bb31fcb26ff9790ec1f726309b410e89aecc673d1f99f5101b367bca2bb82d24431e19bae6c582968df24fb55ac678344596e36a4d45671240fa84769ed2fcb782aec12aaa4a1d8f789a8ccae483e44c121e8fc1b83aa15f44d586c0f83ff733e2c08dd043de8276638592636335a469f15b06c84a73ce0c051707ee811a8fd4584c77775450d1b70398cf4edcbe7fa3246dd40d2ce2452c6e8c35962ae57686d02dc7828f9ea50afb99991044d3b248544fbe10585eecd6eb93aee0365df4aa9e79e70021f152825c507e17e5c492d4588bb85e4a728788aaf60483d8359929e5f2cae5037e52b7b582ba699e459256531bae0bd8efa3493541a070ca1c8ba7a8beeae989f4894f75dc5306fe54cebfcb49065f306e5fde4ae716a66c67ba86947a15b859ec4d4f6d579928696e5579ec3f73d16788a55535ade6a7021a34645756f9cdeae029f07713e460c283e63fb15f08e5bf68eab60f8478a3f71ca295e41a5e7122b6c08dd2b54594392de49b261767793449023d76980a55deb8bd3b5bb1290aa413176d7f649a72bdcb3f02447cd40ef7d8b212b84d64f9a8456f6a86f4a3642343536a31ecc07625721d099fa6a549a2cc0e02f958e66b065cc70d7bdc76a7335b935f255d0c38d4d14418924864293063d0d8e1634732aadb237596bb06e83744b4a0b882ad1b5f56025a2d8b13b18566cc93c72c51f1a6f37a6d672e6049a8d9128f414d27b4d3b2e8a8f274fcc4e766af32904803be1ca5e7b69dcb08901ec76b78b9e39e602603aa248ed25ec5511d976f8c056956b7e0f9ca3b0f0e7e4107de240a996b2c73ee005c12b824f723899a4339a440aa57ad9aa161be1168ef2877bcad25b513f505a651524b476e0b27c6ebc44e8f614c664237a94fd25e4eb6df902fc65d552c56fd02d23f1b66500b25685803eb3945aa82b1a105977e5905583aad3518598d9c91817916c66b9ec492a84fc8bdb8a61ca5ffda2d76e928353271889bbc49a0aab6c86882a4b12af157a8762d4b8d5364a59c5519cfc88a022ae471b0b213f11a8e57d37ac833ca8c61232cee28c800d5ecd277e50da3402a71c83d504ca6d5593bdead154eb8a885affe12e02d6e12d86d7722e9752eb639e90b931e5fe982bf8a304256294302a640167ebe776695cf2d902759c76243b3c55ce2467f079c4a374cd5d91ae76df4410375ab1a35490f95b91afd91befbacc9001f9cbb3eff266d55ea680d41d73f06b293b3dc217baf8c4acb6803a14a586734435d66f8cf91e02e672d2139d6e41c154e167d6f6f60cb4459cc0d06468a0bac7c4c64bdcd2bea4410b9eb56e743cb67bf25e90f76202275abd797f9126f52655d855cf6e68aa7dc173196ab323a62b91982f19b025dd60289919d48c4325ed70d10aff9588266ea193918b7913c24d321e6aa5a696085055c86deeb772de6a31ffd545e3a1ddf8c892d3eb07f5e3d6b1113cb42f3ac66b7bb23bc72143bd4c55b1f29023f56e0ffcf9712a5928712da7eda410ab4b62510fb494e6097c756f8a91bc9d6cc98195b2b4b1b5cd910578c89444825fb16a7ae7b4622b3b070738240ad6ffde821a8982e17c279259adf5948134ac7e4e6ecfb10f3082c0932a7b0a62214023525d40b1d2a3d54bee1c7f339bca41ed9c96c1b3d75ab6231a51826bea942f14d7fccedfc8eb3208fd0cd3550bce6cc5b57dd4bf22212da8f5ef0689d7439de051c7174c0e345a310d94b16b3ecf6a96d28b2511be98fd56201ca928f76e81df1ff50a84194f7fd43f99aa6daf859f593eb4417efa0b771ccf966d2084a4027e6fae20e2c12e26db019c6267bcdb60a6ae01da9a9f01656f5a1dfb5f6cd6d6bfdaa74df4a5fe4d7636bd45af296ac7c66e4f346098f5f9ca7bd7b948b20ee3225430e089bc38d18ecf8fa83e6d1d3daaca97a913028ee5b874ad884ecc5fb1d8f36f554b3ba0edb49507e86727e0b72c645a8db81933678b30e966267a80cdd876f172f514a360ad25959167f2d98b9c152b5fb64e48c8118844eba49b8c44069110641f4585d196682b88dd1d8de8bf0e328d7eb9e4dbedd58e0ecd20bfbe5e2b8adb7b40f73ea098611942c79a5b57d81573cecc4949ffb880d9e641ad5c63b4d57298e3d2356c98e2708b8fcd6577ebd43ba744eab4e774f9616e34fa617217e3f54c1db079ec5886125f7f149b65819608dd5b40bf4cd027f23bbc8c49c9512bc34db40ab4881686af948e8586fb9d3bcfe60e798a919b242e16ba28004fecdcf0c7f2246f0d8cc90ad7b357b4792aa485a8f6aaef436d3ac0a714b201de88c25f3ce6ee95db9b4b5e9a8a818eeb9f5fea088702c13072e25c9a59b704ad9b74568629438d90fd5e9153cb8b2c183bc8012789faacdd22951f23238f45541eaadd146704155916010d80e81eebf6710bf8188271c1d99da14f93b31c6b6bd997b46ffae076349aca239001cd3e0cccfb3cebabc3b7d2cb146b7b6408bdadb519c74672a294381c38b475b1839af8f9768949f39af650bd1a4d5b1fbee23c73bab4039377f3b2f4484f6c3da0bf16efeca2186e4b586fdb5f0feaa31cf4ec2c99e21711b572cce18292300a26221c55773d81e6b161d5a5c0aea6031064a6f1a7bfe9358d4eca2b4691dd9b59823f042e5bebd36a403ea4f9e98e7bb5d624284a8747d71d85f0e0d0a17c827458afdf625dfe3d4c5df0f897aaca7161416992ec549006d578f8eeb7918605217d72fccfd5ef7c220e0867b6a64362afad80491c51bd5f5a897c6ccad38c40613a0febc8bee0a34cbc8a069f50dadf9af7df65c65733b86f2556e0850877736b48d0c5674fcea3616ca71e01f19d11cfa5b5fe3ef0508e0c70dd675d7b5d55efa5d3d915cf168e3ab31d7c07dc5001f6892b095e95cfcfc4305e7b45f76ae8087df06e01386de76e65c84003156f2cfcffeba0cb67e30fadecf1d0f5a2d784fe74cd02a067af605bb52b4dbb69d4de678ad7f1c70f20541c1ef9b7164b3e746888507a2c4f04d4ea75c3c38cb5c6d7fdcb9a22f97b799b4c5699c4b75969a2161a58bb3128e288966a5618d20b5e09cb3daadaa2b01109f1d47477a82c394ff75cdea462d262099167141c1ccd4baf05716a4fed97c713eb309bd1728d599b1729d825cfc547674f9ef7b62c71e73f413fc2d24b04a4cf382858d56539da5b6d86963e4fcfde367aa097383d20622e7818e3441bed791230f26a05af55bd293de7e17dff667a4b3bea937287809fed9a44c37db629361aa494ca1f8987c56eececfa3601761740909dce00cbd9ab87547357882370334e5da2ff936393173c6a08cbe6ddb613a6c780b7053c7006df41ac29e6c9e7d951f593d16401301a587860844d7b1102bb4a6cdb1305716bfc56a4fc0a2e30e27cc79c6a0c12f9f3669713bb87c512e9c4f4bc32f8d4a1fc85970347f19d493998fa634cd8ab0316852ce79221182496c36ac67a34264f2f4ab49d4e85634b08f0585b925badf969a531457598aad96a325429d494bb00090f723b5223ac169c65ed407fc758a9f35c98f11f242f4941f02d2921ef802fab3c9dd7188292dfd5b4af728e4fcac32583aceb15b3190b6a9b20395920abf3b86cd6be31fdcebdc5d5d5b8575e4514c10027aa308b3c97cc83d72e9b696f63665f66cb51c18e352f8766e77e5308424d17cf2439bed8f21395ba04c1018401a5e7e220070ad72d451f17a4e815819ac6f68415853fb6df751405130fd840523211e2a469e2e24ae0c7eca9e8210b705a747a4713fd439b1750e18fdd6d228225ef6582b486eea82197b1e58d279aab26fbfa6405e8584daa944d26b007417fe17e0f03d95a313879b3e1637e908064c397d204187bd5681ff3651b1f1f1074d16671cc67c1d440"], 0x2128}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000100)=@userptr={0x55f, 0x2, 0x4, 0x10000, 0x7f, {}, {0x2, 0x2, 0x7, 0x25, 0x6, 0xda, "6a6c6ae3"}, 0xff, 0x2, {}, 0xf0000000, 0x0, r6}) 06:30:02 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f00008c2000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f000049f000/0x3000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000336000/0x2000)=nil, 0x2000) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x65580000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) [ 2578.534212] FAT-fs (loop2): Directory bread(block 6) failed [ 2578.583626] FAT-fs (loop2): Directory bread(block 6) failed [ 2578.600557] bond0: Error: cannot enslave VLAN challenged slave lo on VLAN enabled bond bond0 06:30:02 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) move_pages(r0, 0x4, &(0x7f00000002c0)=[&(0x7f0000558000/0x3000)=nil, &(0x7f0000393000/0x1000)=nil, &(0x7f000051c000/0x1000)=nil, &(0x7f0000727000/0x1000)=nil], &(0x7f0000000300)=[0x81, 0x8, 0x5, 0x8], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (async) r1 = gettid() (async) r2 = gettid() move_pages(r2, 0x6, &(0x7f0000000140)=[&(0x7f00002d8000/0x2000)=nil, &(0x7f00004c4000/0x1000)=nil, &(0x7f0000894000/0x2000)=nil, &(0x7f0000732000/0x4000)=nil, &(0x7f00005c6000/0x4000)=nil, &(0x7f000032c000/0x3000)=nil], 0x0, &(0x7f00000001c0)=[0x0, 0x0], 0x6) (async) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2578.636971] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:30:02 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f00008c2000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f000049f000/0x3000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000336000/0x2000)=nil, 0x2000) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:03 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x1}, 0x10000, 0x0, 0x6, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x0, 0x2, 0x1}) dup(r2) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) socket(0x0, 0x80002, 0x0) syz_open_dev$vcsu(0x0, 0x7ff, 0x8000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x0, 'ip6_vti0\x00', {}, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xac600000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:30:03 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2578.794784] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:30:03 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f00008c2000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f000049f000/0x3000)=nil) (async, rerun: 64) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (rerun: 64) munlock(&(0x7f0000336000/0x2000)=nil, 0x2000) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:03 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2578.866915] device batadv1220 entered promiscuous mode [ 2578.903177] 8021q: adding VLAN 0 to HW filter on device batadv1220 06:30:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:30:03 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x1}, 0x10000, 0x0, 0x6, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x0, 0x2, 0x1}) dup(r2) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) socket(0x0, 0x80002, 0x0) syz_open_dev$vcsu(0x0, 0x7ff, 0x8000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x0, 'ip6_vti0\x00', {}, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xac600000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:30:03 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x2) 06:30:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$inet6(0xa, 0x3, 0xa) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=r2, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r3, @ANYBLOB="0a003400020202030202004b"], 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\"J^~', @ANYRES16=r1, @ANYBLOB='\x00'/11, @ANYRES32, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) (async) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1400c480}, 0x4004) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180018400000000000000000000000049500000000000000", @ANYRES16], &(0x7f0000000480)='syzkaller\x00', 0x7, 0xec, &(0x7f00000004c0)=""/236, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x1, 0x3, 0x1, 0x1}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)="48324a66309ea29c4b9436f695175f92769c3e232b5688853ec5a09f22829e94866b", 0x22}, {&(0x7f0000000380)="55af6e3a91431eb79aca0a5a965d200df29a721e5c6a2de1d34d8593a17296447f7e9501fc7dbd13b484eb61ff505d1611aa4695dcddd8505e06b04c3a9397770bc8637060a3315b67fcb3b0406a5a1ba2ac946ab784674a1d68607a65cb3f156a86fd0f1b46383b4a015ddf041484", 0x6f}], 0x2, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x2128}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000100)=@userptr={0x55f, 0x2, 0x4, 0x10000, 0x7f, {}, {0x2, 0x2, 0x7, 0x25, 0x6, 0xda, "6a6c6ae3"}, 0xff, 0x2, {}, 0xf0000000, 0x0, r6}) 06:30:03 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2579.018909] bond1221: making interface vlan1059 the new active one [ 2579.041371] bond1221: Enslaving vlan1059 as an active interface with an up link 06:30:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x68000000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:30:03 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x2) 06:30:03 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xf) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() r1 = getpgid(r0) process_vm_writev(r1, &(0x7f0000000000), 0x0, &(0x7f00000001c0), 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2579.145619] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:30:03 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x1}, 0x10000, 0x0, 0x6, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x0, 0x2, 0x1}) dup(r2) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) socket(0x0, 0x80002, 0x0) syz_open_dev$vcsu(0x0, 0x7ff, 0x8000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x0, 'ip6_vti0\x00', {}, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xac600000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:30:03 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xf) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() r1 = getpgid(r0) process_vm_writev(r1, &(0x7f0000000000), 0x0, &(0x7f00000001c0), 0x0, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:03 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xf) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() r1 = getpgid(r0) process_vm_writev(r1, &(0x7f0000000000), 0x0, &(0x7f00000001c0), 0x0, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:03 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() shmget$private(0x0, 0x3000, 0x0, &(0x7f000081d000/0x3000)=nil) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) r0 = getpid() process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/41, 0x29}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2579.486940] bond0: Error: cannot enslave VLAN challenged slave lo on VLAN enabled bond bond0 [ 2579.508134] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2579.568436] device batadv1221 entered promiscuous mode [ 2579.581243] 8021q: adding VLAN 0 to HW filter on device batadv1221 [ 2579.631640] bond1222: making interface vlan1060 the new active one [ 2579.663041] bond1222: Enslaving vlan1060 as an active interface with an up link 06:30:03 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xac00000000000000) 06:30:03 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x2) (async) 06:30:03 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() (async) shmget$private(0x0, 0x3000, 0x0, &(0x7f000081d000/0x3000)=nil) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) r0 = getpid() process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/41, 0x29}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:30:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x6c000000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:30:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0xa) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) (async, rerun: 32) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=r2, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r3, @ANYBLOB="0a003400020202030202004b"], 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\"J^~', @ANYRES16=r1, @ANYBLOB='\x00'/11, @ANYRES32, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) (async, rerun: 32) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1400c480}, 0x4004) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180018400000000000000000000000049500000000000000", @ANYRES16], &(0x7f0000000480)='syzkaller\x00', 0x7, 0xec, &(0x7f00000004c0)=""/236, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x1, 0x3, 0x1, 0x1}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)="48324a66309ea29c4b9436f695175f92769c3e232b5688853ec5a09f22829e94866b", 0x22}, {&(0x7f0000000380)="55af6e3a91431eb79aca0a5a965d200df29a721e5c6a2de1d34d8593a17296447f7e9501fc7dbd13b484eb61ff505d1611aa4695dcddd8505e06b04c3a9397770bc8637060a3315b67fcb3b0406a5a1ba2ac946ab784674a1d68607a65cb3f156a86fd0f1b46383b4a015ddf041484", 0x6f}], 0x2, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x2128}, 0x10) (async, rerun: 64) r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) (rerun: 64) openat$cgroup_ro(r5, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000100)=@userptr={0x55f, 0x2, 0x4, 0x10000, 0x7f, {}, {0x2, 0x2, 0x7, 0x25, 0x6, 0xda, "6a6c6ae3"}, 0xff, 0x2, {}, 0xf0000000, 0x0, r6}) 06:30:03 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) shmget$private(0x0, 0x3000, 0x0, &(0x7f000081d000/0x3000)=nil) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) r0 = getpid() process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/41, 0x29}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:04 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000888000/0x1000)=nil, 0x1000) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000), 0x0, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) shmat(0x0, &(0x7f000016e000/0x4000)=nil, 0x6000) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f00004c8000/0x2000)=nil, 0x4000}) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2579.802226] bond0: Error: cannot enslave VLAN challenged slave lo on VLAN enabled bond bond0 [ 2579.815508] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:30:04 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) fdatasync(r0) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_proto_private(r2, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x3, 0xa) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=r7, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r2], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\"J^~', @ANYRES16=r6, @ANYBLOB='\x00'/11, @ANYRES32=r4, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000040)=""/61, 0x3d}, {&(0x7f0000000100)=""/83, 0x53}, {&(0x7f00000002c0)=""/116, 0x74}], 0x3) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:30:04 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) munlock(&(0x7f0000888000/0x1000)=nil, 0x1000) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000), 0x0, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) shmat(0x0, &(0x7f000016e000/0x4000)=nil, 0x6000) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f00004c8000/0x2000)=nil, 0x4000}) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x74000000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:30:04 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0xfffffffe, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2579.975401] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:30:04 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000888000/0x1000)=nil, 0x1000) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000), 0x0, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) shmat(0x0, &(0x7f000016e000/0x4000)=nil, 0x6000) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f00004c8000/0x2000)=nil, 0x4000}) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) munlock(&(0x7f0000888000/0x1000)=nil, 0x1000) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000), 0x0, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) shmat(0x0, &(0x7f000016e000/0x4000)=nil, 0x6000) (async) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f00004c8000/0x2000)=nil, 0x4000}) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) 06:30:04 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000000240)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2580.077096] device batadv1222 entered promiscuous mode [ 2580.114808] 8021q: adding VLAN 0 to HW filter on device batadv1222 [ 2580.203753] bond1223: making interface vlan1061 the new active one [ 2580.235234] bond1223: Enslaving vlan1061 as an active interface with an up link 06:30:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:30:04 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() ioctl$sock_proto_private(0xffffffffffffffff, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x3, 0xa) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='\"J^~', @ANYRES16=r3, @ANYBLOB="00000000000000000000003bc9dc8feedab19bee1e069f5bf7f2eeec5ad65928f41d867d9e81a7996c566319eef8c57aaf2be388b3acfff12e56e340b63f3e43482857fea521795e3f05390aaae75a8d07ae67f97186658588e03056e0b7ab0c622013ab287c160582bf3cfeb9b2572932b30b1cd4baf3670b0a094fb983bdc6b28548613b84c94b01d5fac4846cfc7419436b7492", @ANYRES32=r1, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r3, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1400c480}, 0x4004) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="190018400000000000004000000000049500000000000000", @ANYRES16], &(0x7f0000000480)='syzkaller\x00', 0x7, 0xec, &(0x7f00000004c0)=""/236, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f00001cc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/72, 0x48, 0x1, &(0x7f0000000240)=""/186, 0xba}, &(0x7f0000000300)=0x40) mlock(&(0x7f00007a4000/0x1000)=nil, 0x1000) process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180), 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:04 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000000240)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000000240)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) 06:30:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x7a000000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) [ 2580.264915] bond0: Error: cannot enslave VLAN challenged slave lo on VLAN enabled bond bond0 06:30:04 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000000240)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2580.364974] bond0: enslaved VLAN challenged slave lo. Adding VLANs will be blocked as long as lo is part of bond bond0 [ 2580.394283] bond0: lo is up - this may be due to an out of date ifenslave 06:30:04 executing program 4: madvise(&(0x7f0000635000/0x3000)=nil, 0x3000, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xffff864e], 0x1, 0x2ac14fa7, 0x24, 0x1ff, 0x7fff, 0x0, 0xac64, {0xe290, 0x1, 0x5, 0x6, 0x401, 0x17, 0x0, 0x1, 0x5, 0x1, 0x1f, 0x7fff, 0x7ff, 0x5, "fadf9e5dc73d294a7443818f19d97ee5567b3b9ccdd168f5ff213c4aa3b29f0e"}}) [ 2580.414673] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2580.527803] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2580.571980] device batadv1223 entered promiscuous mode [ 2580.595241] 8021q: adding VLAN 0 to HW filter on device batadv1223 [ 2580.647159] bond1224: making interface vlan1062 the new active one [ 2580.685897] bond1224: Enslaving vlan1062 as an active interface with an up link 06:30:04 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) (async) fdatasync(r0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_proto_private(r2, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r7 = socket$inet6(0xa, 0x3, 0xa) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=r7, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r2], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\"J^~', @ANYRES16=r6, @ANYBLOB='\x00'/11, @ANYRES32=r4, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) (async) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000040)=""/61, 0x3d}, {&(0x7f0000000100)=""/83, 0x53}, {&(0x7f00000002c0)=""/116, 0x74}], 0x3) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:30:04 executing program 4: madvise(&(0x7f0000635000/0x3000)=nil, 0x3000, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xffff864e], 0x1, 0x2ac14fa7, 0x24, 0x1ff, 0x7fff, 0x0, 0xac64, {0xe290, 0x1, 0x5, 0x6, 0x401, 0x17, 0x0, 0x1, 0x5, 0x1, 0x1f, 0x7fff, 0x7ff, 0x5, "fadf9e5dc73d294a7443818f19d97ee5567b3b9ccdd168f5ff213c4aa3b29f0e"}}) (rerun: 64) 06:30:04 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() (async) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = socket$inet6(0xa, 0x3, 0xa) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='\"J^~', @ANYRES16=r3, @ANYBLOB="00000000000000000000003bc9dc8feedab19bee1e069f5bf7f2eeec5ad65928f41d867d9e81a7996c566319eef8c57aaf2be388b3acfff12e56e340b63f3e43482857fea521795e3f05390aaae75a8d07ae67f97186658588e03056e0b7ab0c622013ab287c160582bf3cfeb9b2572932b30b1cd4baf3670b0a094fb983bdc6b28548613b84c94b01d5fac4846cfc7419436b7492", @ANYRES32=r1, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) (async) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r3, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1400c480}, 0x4004) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="190018400000000000004000000000049500000000000000", @ANYRES16], &(0x7f0000000480)='syzkaller\x00', 0x7, 0xec, &(0x7f00000004c0)=""/236, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f00001cc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/72, 0x48, 0x1, &(0x7f0000000240)=""/186, 0xba}, &(0x7f0000000300)=0x40) (async) mlock(&(0x7f00007a4000/0x1000)=nil, 0x1000) (async) process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180), 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2580.806138] bond0: enslaved VLAN challenged slave lo. Adding VLANs will be blocked as long as lo is part of bond bond0 [ 2580.840179] bond0: lo is up - this may be due to an out of date ifenslave [ 2580.860722] bond0: Error: cannot enslave VLAN challenged slave lo on VLAN enabled bond bond0 06:30:10 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (fail_nth: 1) 06:30:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x81000000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:30:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:30:10 executing program 4: madvise(&(0x7f0000635000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 32) gettid() move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xffff864e], 0x1, 0x2ac14fa7, 0x24, 0x1ff, 0x7fff, 0x0, 0xac64, {0xe290, 0x1, 0x5, 0x6, 0x401, 0x17, 0x0, 0x1, 0x5, 0x1, 0x1f, 0x7fff, 0x7ff, 0x5, "fadf9e5dc73d294a7443818f19d97ee5567b3b9ccdd168f5ff213c4aa3b29f0e"}}) 06:30:10 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() ioctl$sock_proto_private(0xffffffffffffffff, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x3, 0xa) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='\"J^~', @ANYRES16=r3, @ANYBLOB="00000000000000000000003bc9dc8feedab19bee1e069f5bf7f2eeec5ad65928f41d867d9e81a7996c566319eef8c57aaf2be388b3acfff12e56e340b63f3e43482857fea521795e3f05390aaae75a8d07ae67f97186658588e03056e0b7ab0c622013ab287c160582bf3cfeb9b2572932b30b1cd4baf3670b0a094fb983bdc6b28548613b84c94b01d5fac4846cfc7419436b7492", @ANYRES32=r1, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r3, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1400c480}, 0x4004) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="190018400000000000004000000000049500000000000000", @ANYRES16], &(0x7f0000000480)='syzkaller\x00', 0x7, 0xec, &(0x7f00000004c0)=""/236, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f00001cc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/72, 0x48, 0x1, &(0x7f0000000240)=""/186, 0xba}, &(0x7f0000000300)=0x40) mlock(&(0x7f00007a4000/0x1000)=nil, 0x1000) process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180), 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$inet6(0xa, 0x3, 0xa) (async) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='\"J^~', @ANYRES16=r3, @ANYBLOB="00000000000000000000003bc9dc8feedab19bee1e069f5bf7f2eeec5ad65928f41d867d9e81a7996c566319eef8c57aaf2be388b3acfff12e56e340b63f3e43482857fea521795e3f05390aaae75a8d07ae67f97186658588e03056e0b7ab0c622013ab287c160582bf3cfeb9b2572932b30b1cd4baf3670b0a094fb983bdc6b28548613b84c94b01d5fac4846cfc7419436b7492", @ANYRES32=r1, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) (async) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r3, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1400c480}, 0x4004) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="190018400000000000004000000000049500000000000000", @ANYRES16], &(0x7f0000000480)='syzkaller\x00', 0x7, 0xec, &(0x7f00000004c0)=""/236, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f00001cc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/72, 0x48, 0x1, &(0x7f0000000240)=""/186, 0xba}, &(0x7f0000000300)=0x40) (async) mlock(&(0x7f00007a4000/0x1000)=nil, 0x1000) (async) process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180), 0x0, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) 06:30:10 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) (async) fdatasync(r0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32) ioctl$sock_proto_private(r2, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r7 = socket$inet6(0xa, 0x3, 0xa) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=r7, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r2], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\"J^~', @ANYRES16=r6, @ANYBLOB='\x00'/11, @ANYRES32=r4, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) (async) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000040)=""/61, 0x3d}, {&(0x7f0000000100)=""/83, 0x53}, {&(0x7f00000002c0)=""/116, 0x74}], 0x3) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:30:10 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x0, &(0x7f0000000200), &(0x7f00000001c0)=[0x80, 0x2, 0x80], &(0x7f0000000200)=[0x0, 0x0], 0x0) [ 2586.264353] fat__get_entry: 4 callbacks suppressed [ 2586.264365] FAT-fs (loop2): Directory bread(block 6) failed [ 2586.276660] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:30:10 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:10 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 64) r0 = gettid() (rerun: 64) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x0, &(0x7f0000000200), &(0x7f00000001c0)=[0x80, 0x2, 0x80], &(0x7f0000000200)=[0x0, 0x0], 0x0) 06:30:10 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 32) r0 = gettid() (async) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x0, &(0x7f0000000200), &(0x7f00000001c0)=[0x80, 0x2, 0x80], &(0x7f0000000200)=[0x0, 0x0], 0x0) [ 2586.391073] bond0: enslaved VLAN challenged slave lo. Adding VLANs will be blocked as long as lo is part of bond bond0 [ 2586.420911] bond0: lo is up - this may be due to an out of date ifenslave 06:30:10 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x2, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:10 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = getpgid(0x0) capget(&(0x7f00000003c0)={0x20080522, r1}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) move_pages(r1, 0x2, &(0x7f0000000200)=[&(0x7f0000ffa000/0x4000)=nil, &(0x7f00001a2000/0x4000)=nil], &(0x7f0000000240)=[0x9, 0x76, 0xfffffe00, 0x2, 0xffff, 0x7fffffff, 0x9], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0) r2 = getpgid(0x0) capget(&(0x7f00000003c0)={0x19980330, r2}, &(0x7f0000000140)={0x7de, 0x3, 0x16f9, 0x1, 0x9, 0x8001ff}) move_pages(r2, 0x3, &(0x7f00000001c0)=[&(0x7f0000336000/0x1000)=nil, &(0x7f0000733000/0x1000)=nil, &(0x7f000087a000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x2) [ 2586.458632] bond0: Error: cannot enslave VLAN challenged slave lo on VLAN enabled bond bond0 [ 2586.497295] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:30:10 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x3, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2586.553233] device batadv1224 entered promiscuous mode [ 2586.591121] 8021q: adding VLAN 0 to HW filter on device batadv1224 [ 2586.683129] bond1225: making interface vlan1063 the new active one [ 2586.715722] bond1225: Enslaving vlan1063 as an active interface with an up link 06:30:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x88600000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:30:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:30:10 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) move_pages(r1, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x6) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:10 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = getpgid(0x0) capget(&(0x7f00000003c0)={0x20080522, r1}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) move_pages(r1, 0x2, &(0x7f0000000200)=[&(0x7f0000ffa000/0x4000)=nil, &(0x7f00001a2000/0x4000)=nil], &(0x7f0000000240)=[0x9, 0x76, 0xfffffe00, 0x2, 0xffff, 0x7fffffff, 0x9], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0) r2 = getpgid(0x0) capget(&(0x7f00000003c0)={0x19980330, r2}, &(0x7f0000000140)={0x7de, 0x3, 0x16f9, 0x1, 0x9, 0x8001ff}) move_pages(r2, 0x3, &(0x7f00000001c0)=[&(0x7f0000336000/0x1000)=nil, &(0x7f0000733000/0x1000)=nil, &(0x7f000087a000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) getpgid(0x0) (async) capget(&(0x7f00000003c0)={0x20080522, r1}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) (async) move_pages(r1, 0x2, &(0x7f0000000200)=[&(0x7f0000ffa000/0x4000)=nil, &(0x7f00001a2000/0x4000)=nil], &(0x7f0000000240)=[0x9, 0x76, 0xfffffe00, 0x2, 0xffff, 0x7fffffff, 0x9], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0) (async) getpgid(0x0) (async) capget(&(0x7f00000003c0)={0x19980330, r2}, &(0x7f0000000140)={0x7de, 0x3, 0x16f9, 0x1, 0x9, 0x8001ff}) (async) move_pages(r2, 0x3, &(0x7f00000001c0)=[&(0x7f0000336000/0x1000)=nil, &(0x7f0000733000/0x1000)=nil, &(0x7f000087a000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x2) (async) 06:30:10 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x4, 0x9a, 0x6, 0x68, 0x0, 0x4, 0x40002, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x8000, 0x3, 0xeb, 0x9, 0x4, 0x5, 0x6, 0x0, 0x80000000, 0x0, 0xb3e1}, 0x0, 0x9, r0, 0x3) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:30:10 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x4, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2586.773854] FAT-fs (loop2): Directory bread(block 6) failed 06:30:11 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x4, 0x9a, 0x6, 0x68, 0x0, 0x4, 0x40002, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x8000, 0x3, 0xeb, 0x9, 0x4, 0x5, 0x6, 0x0, 0x80000000, 0x0, 0xb3e1}, 0x0, 0x9, r0, 0x3) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x4, 0x9a, 0x6, 0x68, 0x0, 0x4, 0x40002, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x8000, 0x3, 0xeb, 0x9, 0x4, 0x5, 0x6, 0x0, 0x80000000, 0x0, 0xb3e1}, 0x0, 0x9, r0, 0x3) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) [ 2586.841796] FAT-fs (loop2): Directory bread(block 6) failed [ 2586.874513] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:30:11 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x4, 0x9a, 0x6, 0x68, 0x0, 0x4, 0x40002, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x8000, 0x3, 0xeb, 0x9, 0x4, 0x5, 0x6, 0x0, 0x80000000, 0x0, 0xb3e1}, 0x0, 0x9, r0, 0x3) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:30:11 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) r1 = getpgid(0x0) capget(&(0x7f00000003c0)={0x20080522, r1}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) move_pages(r1, 0x2, &(0x7f0000000200)=[&(0x7f0000ffa000/0x4000)=nil, &(0x7f00001a2000/0x4000)=nil], &(0x7f0000000240)=[0x9, 0x76, 0xfffffe00, 0x2, 0xffff, 0x7fffffff, 0x9], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0) (async) r2 = getpgid(0x0) capget(&(0x7f00000003c0)={0x19980330, r2}, &(0x7f0000000140)={0x7de, 0x3, 0x16f9, 0x1, 0x9, 0x8001ff}) move_pages(r2, 0x3, &(0x7f00000001c0)=[&(0x7f0000336000/0x1000)=nil, &(0x7f0000733000/0x1000)=nil, &(0x7f000087a000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x2) 06:30:11 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) move_pages(r1, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x6) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:11 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x5, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2587.016630] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:30:11 executing program 4: r0 = gettid() process_vm_writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/230, 0xe6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = socket(0xf, 0x800, 0xc8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_proto_private(r2, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x3, 0xa) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRESDEC=r7, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r2], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\"J^~', @ANYRES16=r6, @ANYBLOB='\x00'/11, @ANYRES32=r4, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) preadv(r2, &(0x7f0000001480)=[{&(0x7f0000000000)=""/47, 0x2f}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/144, 0x90}, {&(0x7f0000001380)=""/205, 0xcd}], 0x5, 0xfffff801, 0xa61) move_pages(r0, 0x8, &(0x7f0000000140)=[&(0x7f00007ce000/0xa000)=nil, &(0x7f000072c000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007d4000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000367000/0x4000)=nil], &(0x7f0000000140), &(0x7f00000001c0), 0x0) [ 2587.095222] device batadv1225 entered promiscuous mode [ 2587.154007] 8021q: adding VLAN 0 to HW filter on device batadv1225 06:30:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x88a8ffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:30:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:30:11 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x6}, 0x10d00, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:30:11 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) move_pages(r1, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x6) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)) (async) move_pages(r1, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x6) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) 06:30:11 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x7, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2587.243979] bond1226: making interface vlan1064 the new active one [ 2587.268845] bond1226: Enslaving vlan1064 as an active interface with an up link 06:30:11 executing program 4: r0 = gettid() process_vm_writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/230, 0xe6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) r1 = socket(0xf, 0x800, 0xc8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_proto_private(r2, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) (rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r7 = socket$inet6(0xa, 0x3, 0xa) (rerun: 32) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRESDEC=r7, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r2], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (rerun: 64) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\"J^~', @ANYRES16=r6, @ANYBLOB='\x00'/11, @ANYRES32=r4, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) (async, rerun: 32) preadv(r2, &(0x7f0000001480)=[{&(0x7f0000000000)=""/47, 0x2f}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/144, 0x90}, {&(0x7f0000001380)=""/205, 0xcd}], 0x5, 0xfffff801, 0xa61) (rerun: 32) move_pages(r0, 0x8, &(0x7f0000000140)=[&(0x7f00007ce000/0xa000)=nil, &(0x7f000072c000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007d4000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000367000/0x4000)=nil], &(0x7f0000000140), &(0x7f00000001c0), 0x0) [ 2587.307457] FAT-fs (loop2): Directory bread(block 6) failed [ 2587.337281] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:30:11 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x6}, 0x10d00, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 2587.366418] FAT-fs (loop2): Directory bread(block 6) failed 06:30:11 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) move_pages(r0, 0x2, &(0x7f0000000140)=[&(0x7f00008bc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f00000001c0)=[0x9, 0x54cd], &(0x7f0000000240)=[0x0], 0x4) 06:30:11 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x6}, 0x10d00, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x6}, 0x10d00, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) [ 2587.465507] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:30:11 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x8, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:11 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f00000002c0)={{r1}, "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"}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001300), 0x101000, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000001340)=@userptr={0xe4, 0x1, 0x4, 0x2, 0x5, {r2, r3/1000+60000}, {0x0, 0x8, 0x8, 0x2, 0x0, 0xec, ';nWS'}, 0x100, 0x2, {&(0x7f00000012c0)}, 0x2, 0x0, r4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) dup(r5) [ 2587.580740] device batadv1226 entered promiscuous mode [ 2587.638226] 8021q: adding VLAN 0 to HW filter on device batadv1226 [ 2587.674929] device vcan3 entered promiscuous mode 06:30:11 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) move_pages(r0, 0x2, &(0x7f0000000140)=[&(0x7f00008bc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f00000001c0)=[0x9, 0x54cd], &(0x7f0000000240)=[0x0], 0x4) [ 2587.698119] IPv6: ADDRCONF(NETDEV_CHANGE): vcan3: link becomes ready [ 2587.790612] bond1227: vlan1065 is up - this may be due to an out of date ifenslave 06:30:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x9effffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:30:12 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x9, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:12 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) move_pages(r0, 0x2, &(0x7f0000000140)=[&(0x7f00008bc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f00000001c0)=[0x9, 0x54cd], &(0x7f0000000240)=[0x0], 0x4) 06:30:12 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f00000002c0)={{r1}, "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"}) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (async) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001300), 0x101000, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000001340)=@userptr={0xe4, 0x1, 0x4, 0x2, 0x5, {r2, r3/1000+60000}, {0x0, 0x8, 0x8, 0x2, 0x0, 0xec, ';nWS'}, 0x100, 0x2, {&(0x7f00000012c0)}, 0x2, 0x0, r4}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) dup(r5) 06:30:12 executing program 4: r0 = gettid() process_vm_writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/230, 0xe6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) r1 = socket(0xf, 0x800, 0xc8) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) ioctl$sock_proto_private(r2, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r7 = socket$inet6(0xa, 0x3, 0xa) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) (async, rerun: 32) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRESDEC=r7, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r2], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\"J^~', @ANYRES16=r6, @ANYBLOB='\x00'/11, @ANYRES32=r4, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) preadv(r2, &(0x7f0000001480)=[{&(0x7f0000000000)=""/47, 0x2f}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/144, 0x90}, {&(0x7f0000001380)=""/205, 0xcd}], 0x5, 0xfffff801, 0xa61) (async) move_pages(r0, 0x8, &(0x7f0000000140)=[&(0x7f00007ce000/0xa000)=nil, &(0x7f000072c000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007d4000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000367000/0x4000)=nil], &(0x7f0000000140), &(0x7f00000001c0), 0x0) 06:30:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) [ 2587.893466] FAT-fs (loop2): Directory bread(block 6) failed [ 2587.946083] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2587.949738] FAT-fs (loop2): Directory bread(block 6) failed 06:30:12 executing program 3: ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\"J^~', @ANYRES16, @ANYBLOB='\x00'/11, @ANYRES32, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1400c480}, 0x4004) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="182018403f00"/24, @ANYRES16], &(0x7f0000000480)='syzkaller\x00', 0x7, 0xec, &(0x7f00000004c0)=""/236, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = userfaultfd(0x800) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) r3 = getpgid(0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5]) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001680)=[{&(0x7f0000000240)={0x1408, 0x2c, 0x2, 0x70bd29, 0x25dfdbff, "", [@nested={0x6f, 0x21, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @fd=r1}, @generic="e0fa3dc9d918267204a80f8ebebfe8f940c27e5c809b5595ce858dfab1608fc2000e9d45562451", @generic="a380d00d1451990a42f24c54e9fab90efbf517519472aa3ae2c9715ff05850164350435d672a6f75f4cda8ab1060e73d1698ae2a", @typed={0x8, 0x8a, 0x0, 0x0, @uid}]}, @generic="af963689e4e04bfd40c5b75d844680f2add38f67335b3dbbad8dcbcaf976ce8593d7ce0295d000b1e15b1bdeb4722faba829dbe0b61221b6b94e598a180e32099673e599cdc9cbb9bf1670772de0df90d0c2975e26f0eb04a924f1d83fd25e4601af9b5f47fb5b92c55cf87977d8e33992b7c30a26aa8d2e2a6f45ebe384e63efa7d386c79a080d447f2bbc4369468ad4dc134e271ad3670439b6ab98b69f8a6a8d67b589c8d56", @nested={0xb3, 0x17, 0x0, 0x1, [@generic="1074b0d16da3ba1ce507b14325e8f59f12417d23f15e2c3c536afddba82d96430908499523cbc525bf113970eac073167ebce4f4531c33a5a551d56c3dc910c9ac7e26273b4c0b324c0a1f44b33094ab9e51f825871e984a73d10529d90a30a4518ed7028078e0e801c0d3bf94e71aecc42916a523dd739c471b89b0a1ff6e8659ec63c88aeecc432a536581b1aaa1e95b4a3daa7a1109e58b1bf1cf1ec4580a090426075cc39b36577c8d6edf6c2a"]}, @generic="312bff807b85494e6a523d44138edacdaad2303dca0a2d70ece91da8eee99a9e0accc3259702b614971cc70f751001c6ca17aa467d8f5f584a6167f056fc3446a50ca56729247ecb5ef2029b8270989b82c97978a60f820adcac208592317a0a9dd9098b34c8649f5bc91b391457197ef66df03bc17754695886c5faed872021b5f3a51ffcdb1288103278be8e4ba2b33c16736824ae5607925fde4e3978d888cb0f0c41e94f756805cceddf42d1c8339c6f3254b5c4527dc304eab34d83ee5414eb8a23e489451e853f6a02077a5a", @generic="e2123be9315bb2", @nested={0x1034, 0x56, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@multicast1}, @generic="d444b20933cb8806a7a938550644ebbfba48e2b7492961fd479f8536d812f813", @typed={0x8, 0x43, 0x0, 0x0, @u32=0x4}, @generic="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"]}, @typed={0x8, 0x3c, 0x0, 0x0, @pid=r2}, @nested={0x5c, 0xc, 0x0, 0x1, [@generic="541b0cb2d09a2e5aecc45a655deb64acb7cf857031530a0be1fa512c", @generic="0e9248c53ddf5e96a10a6a0213d750d6fdb6d57fcce30f219e59b37ef7f602b8d1d2cfd6cc684c64584c8ce167d212b2c7557e7b0fbea3b814d32b5e"]}, @generic, @generic="842c5b7a67fa6517ded30a80ae4c3c4e48549518458625818f32a26e29f5a528feb65bf38994342dafaed09931afca60f06cceea912a1471e1f3077e2fe6d1f8e3e699dd138b6cc5345a8e3454425d81398f03d61efeae537c11a9796c255d106178c9f6a7350faae79b9ffe0ea6efd877198e9801cae47c638c9ebf1c725cc92c3f22df8a035fa03538639578a786419eab6c51c179fd0eb16c370d2c41c294eec886748abcb816e84a7d3034cc64443f6f2f17df4e68ea69c1b9e0"]}, 0x1408}], 0x1, &(0x7f00000016c0)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, r5}}}], 0x20, 0xc801}, 0x20000000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x4, &(0x7f0000130000/0x800000)=nil) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:12 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0xa, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2588.087980] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:30:12 executing program 3: ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) (async, rerun: 32) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\"J^~', @ANYRES16, @ANYBLOB='\x00'/11, @ANYRES32, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1400c480}, 0x4004) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="182018403f00"/24, @ANYRES16], &(0x7f0000000480)='syzkaller\x00', 0x7, 0xec, &(0x7f00000004c0)=""/236, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 32) r1 = userfaultfd(0x800) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) (async, rerun: 64) r3 = getpgid(0xffffffffffffffff) (async, rerun: 64) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async, rerun: 32) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000240)) (rerun: 32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5]) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001680)=[{&(0x7f0000000240)={0x1408, 0x2c, 0x2, 0x70bd29, 0x25dfdbff, "", [@nested={0x6f, 0x21, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @fd=r1}, @generic="e0fa3dc9d918267204a80f8ebebfe8f940c27e5c809b5595ce858dfab1608fc2000e9d45562451", @generic="a380d00d1451990a42f24c54e9fab90efbf517519472aa3ae2c9715ff05850164350435d672a6f75f4cda8ab1060e73d1698ae2a", @typed={0x8, 0x8a, 0x0, 0x0, @uid}]}, @generic="af963689e4e04bfd40c5b75d844680f2add38f67335b3dbbad8dcbcaf976ce8593d7ce0295d000b1e15b1bdeb4722faba829dbe0b61221b6b94e598a180e32099673e599cdc9cbb9bf1670772de0df90d0c2975e26f0eb04a924f1d83fd25e4601af9b5f47fb5b92c55cf87977d8e33992b7c30a26aa8d2e2a6f45ebe384e63efa7d386c79a080d447f2bbc4369468ad4dc134e271ad3670439b6ab98b69f8a6a8d67b589c8d56", @nested={0xb3, 0x17, 0x0, 0x1, [@generic="1074b0d16da3ba1ce507b14325e8f59f12417d23f15e2c3c536afddba82d96430908499523cbc525bf113970eac073167ebce4f4531c33a5a551d56c3dc910c9ac7e26273b4c0b324c0a1f44b33094ab9e51f825871e984a73d10529d90a30a4518ed7028078e0e801c0d3bf94e71aecc42916a523dd739c471b89b0a1ff6e8659ec63c88aeecc432a536581b1aaa1e95b4a3daa7a1109e58b1bf1cf1ec4580a090426075cc39b36577c8d6edf6c2a"]}, @generic="312bff807b85494e6a523d44138edacdaad2303dca0a2d70ece91da8eee99a9e0accc3259702b614971cc70f751001c6ca17aa467d8f5f584a6167f056fc3446a50ca56729247ecb5ef2029b8270989b82c97978a60f820adcac208592317a0a9dd9098b34c8649f5bc91b391457197ef66df03bc17754695886c5faed872021b5f3a51ffcdb1288103278be8e4ba2b33c16736824ae5607925fde4e3978d888cb0f0c41e94f756805cceddf42d1c8339c6f3254b5c4527dc304eab34d83ee5414eb8a23e489451e853f6a02077a5a", @generic="e2123be9315bb2", @nested={0x1034, 0x56, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@multicast1}, @generic="d444b20933cb8806a7a938550644ebbfba48e2b7492961fd479f8536d812f813", @typed={0x8, 0x43, 0x0, 0x0, @u32=0x4}, @generic="455fe873330951a2fc3f5fa837f42823dbf52f2e769bae64e692c83526713ef8f78ad74e51f7b6705252f4ff20251fe5df03ad2ad31a2aa5ee5d2e48cc9115f9a25db138c646150256adb4bca1c0f6805ef0c92e469c0cd56a9b0d5b49d5422c0159e90f38894cca33fc6a30228bda405d9ec6a5b18de1acc0ce7e39a115b459ccc20e8d54443d417052fe0be67c42e8f413f22d745e5ea5df2e5c65c22760d8c29d51906d7f13060df2fce2a7ba1939ab9c5c547305929bbe26e6fcce763531ad34e7a727fb6c7b0cd4ea97c15efe7ea78e042c5beac18648eade44f567b91eb7840f5ca492374bfac72d09c564a0a34aa28a09be48173464af4d7e36d5863671bd57b6b15d86d7590fa2be7ed8c2f08998c56a24ddaa3afd467d092249fd0eaef7e6ff4c3af3b86debb8cf91ea0d744f7418452dbd22af8eb7bd3ccf51511e655a89f7783e6c67ea01eb0916766445376d67dfa9b22f33aa45974e5bab8db9a6f6f27f42deb9d3e4dfab0f2214eced737fe9496783ebb3ba89f99e77c89780a886c244701080e348423f17d524df2ed173d2919831f15ec70284791684564c7328dc56cdd02879def38576e4b99551148415a6fac605d900fb791d045cadbf59a8786fdd84380a5a4c7189b00a8da999d1e23dafb95a4bca464dc31f8c6d0bbf91de7a9461b7ae658bbba77791d6eb736d4961da689721ff474a1c5dda4f2bc62e2bd028438781366b29a881c2dc6948ada7891264bddb9bc995b4b1ca3347d571417f96ff8743201bb4c629f68db018e1c26e05f4e42c0e7430a48f4c33ef2b999e7943745da7e667cab550697bf3ec6b6ae60fc93e8fa6e0f5d5ffc2d5a9a520e19ae8fa542c720aedcf4283cf68afd524691af143a065ac14d280600ce4774bcd3a411ef43d06af8919c497ad778355b1965f9bb56f41778b0ba8ea1e828b83ab99d8ad33480c7bbf263a0c05b43c3d5723f3d9a59214ec4fcf4b26e697aafd934e30479039d66b2b9ca8df9d0b5d1f4d2afdbf31f8d9d885139e6563596ca85f3782edfbca9dc951333f6275611eb1be53d9f20696ddc2f17ecfd76a9989c4fdb6e1ed6ea513fb2af2d67613fac723839fd5badf46a81d67f71fb6f4899e3054ce847edfcab085615613b049dad6d99d9d695786cf2dff5faa2de3154534273e67013c40def43c7df5082fef7d91b6a25cc15aa8c25734e5018ad69fedb144221b4395a0979f489e74adc2b25f426a8a057892355172ef130f183f917e6096d471a40ea9b18b1e7ca6bc8dd55c588f91fbf863cd82f5c3eb586a16b512d20d4d2ad4cb02a0702c81a1820c3056eff263544b08e0de8da3c91bd2c7c6abab2fbd9a01adac8972bffb71e4381459169447fad11bfb4ac2cf0aa3643f5f45912064be3a7ea27a3b18ef5a387d9335cc3f3af768734bc3cd224367b895aee88afb088b23016ce48a6239d53764287e1d9e6bf87ce7c76fa08d182e4e84366ca2409361230dc4399219a61802ac608d5b806e0488dfc9aa10fd4880e280bb086bb45432fe2005ec5be8a6d73c04ce88b27d8918cf985d3f263f58dbcf585ab5acbc87caa049dcdf2d81dd66c36740e89b58cd347f01713c6134fc503fe00987d083e92004ffd6556d27b63d06a6efaa602204d965883bb825bbc30cf2f07c01f5f608d470560bb4e9c0783bc2e609a27e3cf35cf3125ba8806602816358b6d676d08d4b4fa03453e87b720b9fa1307580cf99d88b444e123687927cd2f01c8ba5e4ce8818c55801f94ce9ce3a12b6e39b42b7c359efede4f1c624984556ff1fb978d812a49bbc583e8d497d74bd4aeb26e11efc65c89380d1da3284fc1dfbd37cb1ec9b3f0c209edacc2ac00dec8f948cf06a902054069e12182d457d6606cd36bab8f0f184aa6773623188e358e2daba2a082d2504b7e2ae4c6676afa69d584daf346a063e3e713b50312f51e35222d8305b5c85808f84fd9579fd1db8f1de19f02651b35fcb21c2c28a0f0088bbe0616e2053788bce0355cdd1e4201beb24d19e8a0616a66630f4a3b1cc3be16e0eb89853ca2f191862e9cec1031262d4bae6a15737f294a9fbf01fdbaf4416b7f84001d605de84f2a643fc8a8b4b311f910b55413de635f5da31b22e4e09a74d741b36dfc6ebe6484dc5e5a454e4f02588f0e96c8b8e5c905e107368a7a576adef121ccd241b857a4afc07a81b453b69f51be37b20a912520640cc4b16bc10771267c3acbdb63b57e26ee46f8e006c3221b4f0afa40fc3ce41b6027365c2109bd30c70b120643d47788ab6cae91d92416cd5c2b62b2e91e94145e8229edad824bbf6b8a8b052ceaddfff537e7fb48850f5626b927f6a4aba229ea3ad7ba97d454c5f87f4af307c09dc1f0b436d90bb902795b6a11e737e772aebfca50de8efa39da15bb65a9f73e58c6f4d7e802496971aca3f63f3130bf846e4c635856a524b6f13b3d5d73963d00b2fed6f1a904e9d887c2a21db04b4da60cdf93a90313bdb7fb4102ea6c522ed1b96f4be203e86a8426b230a4f1df79b310d3e21673aee92a3c5e445609dea0510c412f5ccff5c4c23c09f681cc44fd962c56f1348bc76b1e9c5b4bb0765f724888dd2491d07d99c1df6364bc5830e3c502e58b2a9a1b750cd636bb30894fca8c008db9ab9bcc230544ce48356bc20958505d3333fa7687e674ef4bf1cf4c212ba1c786c1ebcd6aba16ce253e8bd726c87ab29148c6c441cdce6cdfcb2d470e8cc3acce82ae1b04b7c061777e533dbe47d3f509326c572964b529de4c6232b612676527254b48547f14dd5c6bc98dde520dca07cd06477b8704b269ce874a290f6db5dc3523d5c31646039058936058593cdbafc70a34b2efff69c7d9966d3b82f2d9fdd5aac1d5fac1e3e16444d2c52e2bf47c0fa02ac9460dbbeed396835598400cf4134c90fa879451c1b37f547e5f6309fc239e2b7548c2496a447a1b6f61c5f4ffa5e79dc07bc3f06f2a23c5bd2553abb2152c5544db753d5fd37abcb5c0236d3ac979ac64040b6d0f74265245ab8347082402f69b1427119099edc376a928daeee797a105d994aca14682e46c85287678e292f34e8136418a00a231455db6b1ab815f99e65d1cc95710b76a3b29fcfae31ab3b7d8457ecb838dc237a536e33093ab1b806df6b0d09c912580c6da60e99f04d2cd9413ea9f686188a45bce4745b203058b46d1bdbdda606332ec42f9989d86dd083a890eb54e9360640e2a59e11288d2b3473c3b598bbf118defda32bd3acc64a50bb0107d498b6b832b8c22f3dc8e5909ac75fa03fb20145617b3d4a3555ac87147fbb2d1bf3559bc55215e3a0ba52878040d1b74671a9fc7b17c41699e02c9a545cbbcd6dadb7c52976684af9dc5fd96e97b9db5e251a2e47fc6a40583be7862c690524fc30952c6a351fcb293c829c7b8d71e1d935cdedb5992f01a0f6abef2bfa224e05d17a6052ce5625d0859602cb51df49b0dd23195f6483331ec459cd496cc93d7f9d06081e63ba7a6a67ee6d6bd2d03c700ef5fdb90058426749e119376d2d60cd25bdd56bc7891f7bb7ad23d87aad21fdde438af7cd680d89e78c75749053e8d8907a771bfafffb82b4ba1d1bffafa7633a1c11eabd21f63137eeffc17fc561995fde1c790474f69e27604c924108d7cd9131949d539562ab0e2c5c490a13863c2726a3d657579a0d879209b879dff533a42a5a215820d0e0105d9eb57f376e35e0d87db4ab4463f4f38c49f9007afae4b2fae3180b35af0bf4df0c6dce7377c9988e5088cbfd3a828c04f62ea6af22403425dc126066bf8d621e3af108b1088620d684e4d2f87ffbff6f88f6e8392840a70dd532a8091146234beb5083a5b547e789ef75629b57e0b65e1f0e89229934c1022a62d7982afcaa96571eae43e9450eea2c674b8d0730e1c3f177d1b8f7753553049ebe4ef1aea4e7e10cecdec5c1070157dfd33883c59fe02ada465ce85ae3071d29bacaad2d2ef037a172ec67e0405d976459f12b30e2f0f5df2d8dce2aacb7eb8a20130de7eb54398dd0ebfe5de51c775081c7f183dc66e0c965e6f02c425b546806f1e1737b5715b1486534de69aa6a3cc6f731f96d3b91127935cf2926f8b67b57d61810ba3edd05fb084f929a6b2c9cda3b7377f18579d4cd6fb229cadeefccc615328f2f131976ead4ca1695cfeb2f28440679e0ea9e7ac2bff879301c529ba8e89160289ac3e5b2b6a7d5f86c374b9af303eea6fcb982095e03da6116d0ece0a2f392c73c8b8914ae1fcac9ee6d6081a3c2677f4712e4908f1d1e12fca0c5974c2efedcd0efeb991fbec9ef96a6d2f4e31f7644a7b333eb368fa2e52061bc630757471f6c2a97a483dc8660ec2681e43434151b9b5c0971ae5c76d53d1797bd9b587412fc28630d8d5af4e88123b2133f8ec5940f2db43af2e8dda1701344b98f51d80f52db701d4ebe80a7ba764f680274952d98721561f0c96efb7b94275dbc2869e76dfd10d7dace2e084371bbef4e743f7106d01e0ed2d6e0c42e087f323ce781a34dcf84e754abda506eb447236123ba2138cb9256e0076e41f0f14450f92416d77f9f1eb130f5d951add1fde00cdd85ed7294c460ac9a59cfdb8443814afff7cdb36a88f680289b68b19f9be91b257f97be6b323836ef53f0a601cdc640312485b9381a9699163df597e072be17482e6e65c7d725c26065d6c4c94edc062942c22ff736d8a07d772bd496c357bbe70da63e7ab4b93eb79d898b4efd190f31dfac73ba0a4d5bf46b6101a56225c5cc3a370373f91b05039047ec20e10104ed33ac761b1993ffb3f0def84fe77d3c55f0b93a2c22cd05a8a287c5e431191630a286653ae501c9d009cc93e0ee1888ed0b5adc4d2b9da6057be6f4cd91cefd356094ab94a1090d30bcfd3b7f8a4723c0c4e88417346ad880ed35a5d7bb3904d49e1137ea14f88abf7118ab2cb73c82f2925268911953815a1bd1082829d4f81c98c4ca778fcdaf3f35c5fc785f7ef4c1f07c478737f7a8aaf279587d65b11baa5493b1345506024d8523dcd52911ccba110f2433fada8f12465a4833895b507770c9324a798dcc9758d20d106442dff4d03f7bb20095dc7bde8dfbc077654b4dae4931c78f62d908818cf6ecd0a0db76b026be584b996a7a076801c73daf54c4a80a26ef0d18d9cef226edbf14c4217b31da5fa9074f22a299113fb4b3eed483745de3d1d0a5a98b098eae46c8654e2b4c3ee26eac945e3fa646e32b9e8971fdff08823f5ab9f79bedfd09a7e1d15dc2ca6fc15fce93f2ead12c117f381998fcd016c4f53482295828a7abf43fbdad9a0237844d4b05c1f9bbedadd38a7464ebd900507968f422af625f43c3187749388d9f95e88562a3900364cd7caa9c6575653e4bcb6f8ba282fb612ea0a1c6d4d5cc8c5f448a360e708e751421262236e39190ae43e52bcf6864f42b46139538d664e25df7aa2628266734575091ae41d7c283a903a881bd78e4902c97aa928bcbe56cb56300c6522cf9278dc4b211d100fc6a5ed8efe4b0a76f9e49748554f783320dd2fe15cf793fa4b7f03c9b1aee633d61d29682a7cd99ce6ea8020c6ed5e229b2d8978b0e5d471494ddab60d7972dd7bff9ecbb0788caa0a7ec46516455ab34037b7c5b5fbc87e2da1deaa8e5be916f408adbf2ce47e2c8c97cf8fc746e89b50b42e6c23a2bcbe0ed8cdc0e55ed50206772694f14d6cac54ecd9beb13627046b64d7b170ff99d96562dd59215aca9cd383336f29292608d3fe358c3cd5c295ee9558036470c"]}, @typed={0x8, 0x3c, 0x0, 0x0, @pid=r2}, @nested={0x5c, 0xc, 0x0, 0x1, [@generic="541b0cb2d09a2e5aecc45a655deb64acb7cf857031530a0be1fa512c", @generic="0e9248c53ddf5e96a10a6a0213d750d6fdb6d57fcce30f219e59b37ef7f602b8d1d2cfd6cc684c64584c8ce167d212b2c7557e7b0fbea3b814d32b5e"]}, @generic, @generic="842c5b7a67fa6517ded30a80ae4c3c4e48549518458625818f32a26e29f5a528feb65bf38994342dafaed09931afca60f06cceea912a1471e1f3077e2fe6d1f8e3e699dd138b6cc5345a8e3454425d81398f03d61efeae537c11a9796c255d106178c9f6a7350faae79b9ffe0ea6efd877198e9801cae47c638c9ebf1c725cc92c3f22df8a035fa03538639578a786419eab6c51c179fd0eb16c370d2c41c294eec886748abcb816e84a7d3034cc64443f6f2f17df4e68ea69c1b9e0"]}, 0x1408}], 0x1, &(0x7f00000016c0)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, r5}}}], 0x20, 0xc801}, 0x20000000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x4, &(0x7f0000130000/0x800000)=nil) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2588.137248] device batadv1227 entered promiscuous mode [ 2588.190711] 8021q: adding VLAN 0 to HW filter on device batadv1227 06:30:12 executing program 3: ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\"J^~', @ANYRES16, @ANYBLOB='\x00'/11, @ANYRES32, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1400c480}, 0x4004) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="182018403f00"/24, @ANYRES16], &(0x7f0000000480)='syzkaller\x00', 0x7, 0xec, &(0x7f00000004c0)=""/236, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = userfaultfd(0x800) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) (async) r3 = getpgid(0xffffffffffffffff) (async, rerun: 32) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async, rerun: 32) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5]) (async, rerun: 32) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001680)=[{&(0x7f0000000240)={0x1408, 0x2c, 0x2, 0x70bd29, 0x25dfdbff, "", [@nested={0x6f, 0x21, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @fd=r1}, @generic="e0fa3dc9d918267204a80f8ebebfe8f940c27e5c809b5595ce858dfab1608fc2000e9d45562451", @generic="a380d00d1451990a42f24c54e9fab90efbf517519472aa3ae2c9715ff05850164350435d672a6f75f4cda8ab1060e73d1698ae2a", @typed={0x8, 0x8a, 0x0, 0x0, @uid}]}, @generic="af963689e4e04bfd40c5b75d844680f2add38f67335b3dbbad8dcbcaf976ce8593d7ce0295d000b1e15b1bdeb4722faba829dbe0b61221b6b94e598a180e32099673e599cdc9cbb9bf1670772de0df90d0c2975e26f0eb04a924f1d83fd25e4601af9b5f47fb5b92c55cf87977d8e33992b7c30a26aa8d2e2a6f45ebe384e63efa7d386c79a080d447f2bbc4369468ad4dc134e271ad3670439b6ab98b69f8a6a8d67b589c8d56", @nested={0xb3, 0x17, 0x0, 0x1, [@generic="1074b0d16da3ba1ce507b14325e8f59f12417d23f15e2c3c536afddba82d96430908499523cbc525bf113970eac073167ebce4f4531c33a5a551d56c3dc910c9ac7e26273b4c0b324c0a1f44b33094ab9e51f825871e984a73d10529d90a30a4518ed7028078e0e801c0d3bf94e71aecc42916a523dd739c471b89b0a1ff6e8659ec63c88aeecc432a536581b1aaa1e95b4a3daa7a1109e58b1bf1cf1ec4580a090426075cc39b36577c8d6edf6c2a"]}, @generic="312bff807b85494e6a523d44138edacdaad2303dca0a2d70ece91da8eee99a9e0accc3259702b614971cc70f751001c6ca17aa467d8f5f584a6167f056fc3446a50ca56729247ecb5ef2029b8270989b82c97978a60f820adcac208592317a0a9dd9098b34c8649f5bc91b391457197ef66df03bc17754695886c5faed872021b5f3a51ffcdb1288103278be8e4ba2b33c16736824ae5607925fde4e3978d888cb0f0c41e94f756805cceddf42d1c8339c6f3254b5c4527dc304eab34d83ee5414eb8a23e489451e853f6a02077a5a", @generic="e2123be9315bb2", @nested={0x1034, 0x56, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@multicast1}, @generic="d444b20933cb8806a7a938550644ebbfba48e2b7492961fd479f8536d812f813", @typed={0x8, 0x43, 0x0, 0x0, @u32=0x4}, @generic="455fe873330951a2fc3f5fa837f42823dbf52f2e769bae64e692c83526713ef8f78ad74e51f7b6705252f4ff20251fe5df03ad2ad31a2aa5ee5d2e48cc9115f9a25db138c646150256adb4bca1c0f6805ef0c92e469c0cd56a9b0d5b49d5422c0159e90f38894cca33fc6a30228bda405d9ec6a5b18de1acc0ce7e39a115b459ccc20e8d54443d417052fe0be67c42e8f413f22d745e5ea5df2e5c65c22760d8c29d51906d7f13060df2fce2a7ba1939ab9c5c547305929bbe26e6fcce763531ad34e7a727fb6c7b0cd4ea97c15efe7ea78e042c5beac18648eade44f567b91eb7840f5ca492374bfac72d09c564a0a34aa28a09be48173464af4d7e36d5863671bd57b6b15d86d7590fa2be7ed8c2f08998c56a24ddaa3afd467d092249fd0eaef7e6ff4c3af3b86debb8cf91ea0d744f7418452dbd22af8eb7bd3ccf51511e655a89f7783e6c67ea01eb0916766445376d67dfa9b22f33aa45974e5bab8db9a6f6f27f42deb9d3e4dfab0f2214eced737fe9496783ebb3ba89f99e77c89780a886c244701080e348423f17d524df2ed173d2919831f15ec70284791684564c7328dc56cdd02879def38576e4b99551148415a6fac605d900fb791d045cadbf59a8786fdd84380a5a4c7189b00a8da999d1e23dafb95a4bca464dc31f8c6d0bbf91de7a9461b7ae658bbba77791d6eb736d4961da689721ff474a1c5dda4f2bc62e2bd028438781366b29a881c2dc6948ada7891264bddb9bc995b4b1ca3347d571417f96ff8743201bb4c629f68db018e1c26e05f4e42c0e7430a48f4c33ef2b999e7943745da7e667cab550697bf3ec6b6ae60fc93e8fa6e0f5d5ffc2d5a9a520e19ae8fa542c720aedcf4283cf68afd524691af143a065ac14d280600ce4774bcd3a411ef43d06af8919c497ad778355b1965f9bb56f41778b0ba8ea1e828b83ab99d8ad33480c7bbf263a0c05b43c3d5723f3d9a59214ec4fcf4b26e697aafd934e30479039d66b2b9ca8df9d0b5d1f4d2afdbf31f8d9d885139e6563596ca85f3782edfbca9dc951333f6275611eb1be53d9f20696ddc2f17ecfd76a9989c4fdb6e1ed6ea513fb2af2d67613fac723839fd5badf46a81d67f71fb6f4899e3054ce847edfcab085615613b049dad6d99d9d695786cf2dff5faa2de3154534273e67013c40def43c7df5082fef7d91b6a25cc15aa8c25734e5018ad69fedb144221b4395a0979f489e74adc2b25f426a8a057892355172ef130f183f917e6096d471a40ea9b18b1e7ca6bc8dd55c588f91fbf863cd82f5c3eb586a16b512d20d4d2ad4cb02a0702c81a1820c3056eff263544b08e0de8da3c91bd2c7c6abab2fbd9a01adac8972bffb71e4381459169447fad11bfb4ac2cf0aa3643f5f45912064be3a7ea27a3b18ef5a387d9335cc3f3af768734bc3cd224367b895aee88afb088b23016ce48a6239d53764287e1d9e6bf87ce7c76fa08d182e4e84366ca2409361230dc4399219a61802ac608d5b806e0488dfc9aa10fd4880e280bb086bb45432fe2005ec5be8a6d73c04ce88b27d8918cf985d3f263f58dbcf585ab5acbc87caa049dcdf2d81dd66c36740e89b58cd347f01713c6134fc503fe00987d083e92004ffd6556d27b63d06a6efaa602204d965883bb825bbc30cf2f07c01f5f608d470560bb4e9c0783bc2e609a27e3cf35cf3125ba8806602816358b6d676d08d4b4fa03453e87b720b9fa1307580cf99d88b444e123687927cd2f01c8ba5e4ce8818c55801f94ce9ce3a12b6e39b42b7c359efede4f1c624984556ff1fb978d812a49bbc583e8d497d74bd4aeb26e11efc65c89380d1da3284fc1dfbd37cb1ec9b3f0c209edacc2ac00dec8f948cf06a902054069e12182d457d6606cd36bab8f0f184aa6773623188e358e2daba2a082d2504b7e2ae4c6676afa69d584daf346a063e3e713b50312f51e35222d8305b5c85808f84fd9579fd1db8f1de19f02651b35fcb21c2c28a0f0088bbe0616e2053788bce0355cdd1e4201beb24d19e8a0616a66630f4a3b1cc3be16e0eb89853ca2f191862e9cec1031262d4bae6a15737f294a9fbf01fdbaf4416b7f84001d605de84f2a643fc8a8b4b311f910b55413de635f5da31b22e4e09a74d741b36dfc6ebe6484dc5e5a454e4f02588f0e96c8b8e5c905e107368a7a576adef121ccd241b857a4afc07a81b453b69f51be37b20a912520640cc4b16bc10771267c3acbdb63b57e26ee46f8e006c3221b4f0afa40fc3ce41b6027365c2109bd30c70b120643d47788ab6cae91d92416cd5c2b62b2e91e94145e8229edad824bbf6b8a8b052ceaddfff537e7fb48850f5626b927f6a4aba229ea3ad7ba97d454c5f87f4af307c09dc1f0b436d90bb902795b6a11e737e772aebfca50de8efa39da15bb65a9f73e58c6f4d7e802496971aca3f63f3130bf846e4c635856a524b6f13b3d5d73963d00b2fed6f1a904e9d887c2a21db04b4da60cdf93a90313bdb7fb4102ea6c522ed1b96f4be203e86a8426b230a4f1df79b310d3e21673aee92a3c5e445609dea0510c412f5ccff5c4c23c09f681cc44fd962c56f1348bc76b1e9c5b4bb0765f724888dd2491d07d99c1df6364bc5830e3c502e58b2a9a1b750cd636bb30894fca8c008db9ab9bcc230544ce48356bc20958505d3333fa7687e674ef4bf1cf4c212ba1c786c1ebcd6aba16ce253e8bd726c87ab29148c6c441cdce6cdfcb2d470e8cc3acce82ae1b04b7c061777e533dbe47d3f509326c572964b529de4c6232b612676527254b48547f14dd5c6bc98dde520dca07cd06477b8704b269ce874a290f6db5dc3523d5c31646039058936058593cdbafc70a34b2efff69c7d9966d3b82f2d9fdd5aac1d5fac1e3e16444d2c52e2bf47c0fa02ac9460dbbeed396835598400cf4134c90fa879451c1b37f547e5f6309fc239e2b7548c2496a447a1b6f61c5f4ffa5e79dc07bc3f06f2a23c5bd2553abb2152c5544db753d5fd37abcb5c0236d3ac979ac64040b6d0f74265245ab8347082402f69b1427119099edc376a928daeee797a105d994aca14682e46c85287678e292f34e8136418a00a231455db6b1ab815f99e65d1cc95710b76a3b29fcfae31ab3b7d8457ecb838dc237a536e33093ab1b806df6b0d09c912580c6da60e99f04d2cd9413ea9f686188a45bce4745b203058b46d1bdbdda606332ec42f9989d86dd083a890eb54e9360640e2a59e11288d2b3473c3b598bbf118defda32bd3acc64a50bb0107d498b6b832b8c22f3dc8e5909ac75fa03fb20145617b3d4a3555ac87147fbb2d1bf3559bc55215e3a0ba52878040d1b74671a9fc7b17c41699e02c9a545cbbcd6dadb7c52976684af9dc5fd96e97b9db5e251a2e47fc6a40583be7862c690524fc30952c6a351fcb293c829c7b8d71e1d935cdedb5992f01a0f6abef2bfa224e05d17a6052ce5625d0859602cb51df49b0dd23195f6483331ec459cd496cc93d7f9d06081e63ba7a6a67ee6d6bd2d03c700ef5fdb90058426749e119376d2d60cd25bdd56bc7891f7bb7ad23d87aad21fdde438af7cd680d89e78c75749053e8d8907a771bfafffb82b4ba1d1bffafa7633a1c11eabd21f63137eeffc17fc561995fde1c790474f69e27604c924108d7cd9131949d539562ab0e2c5c490a13863c2726a3d657579a0d879209b879dff533a42a5a215820d0e0105d9eb57f376e35e0d87db4ab4463f4f38c49f9007afae4b2fae3180b35af0bf4df0c6dce7377c9988e5088cbfd3a828c04f62ea6af22403425dc126066bf8d621e3af108b1088620d684e4d2f87ffbff6f88f6e8392840a70dd532a8091146234beb5083a5b547e789ef75629b57e0b65e1f0e89229934c1022a62d7982afcaa96571eae43e9450eea2c674b8d0730e1c3f177d1b8f7753553049ebe4ef1aea4e7e10cecdec5c1070157dfd33883c59fe02ada465ce85ae3071d29bacaad2d2ef037a172ec67e0405d976459f12b30e2f0f5df2d8dce2aacb7eb8a20130de7eb54398dd0ebfe5de51c775081c7f183dc66e0c965e6f02c425b546806f1e1737b5715b1486534de69aa6a3cc6f731f96d3b91127935cf2926f8b67b57d61810ba3edd05fb084f929a6b2c9cda3b7377f18579d4cd6fb229cadeefccc615328f2f131976ead4ca1695cfeb2f28440679e0ea9e7ac2bff879301c529ba8e89160289ac3e5b2b6a7d5f86c374b9af303eea6fcb982095e03da6116d0ece0a2f392c73c8b8914ae1fcac9ee6d6081a3c2677f4712e4908f1d1e12fca0c5974c2efedcd0efeb991fbec9ef96a6d2f4e31f7644a7b333eb368fa2e52061bc630757471f6c2a97a483dc8660ec2681e43434151b9b5c0971ae5c76d53d1797bd9b587412fc28630d8d5af4e88123b2133f8ec5940f2db43af2e8dda1701344b98f51d80f52db701d4ebe80a7ba764f680274952d98721561f0c96efb7b94275dbc2869e76dfd10d7dace2e084371bbef4e743f7106d01e0ed2d6e0c42e087f323ce781a34dcf84e754abda506eb447236123ba2138cb9256e0076e41f0f14450f92416d77f9f1eb130f5d951add1fde00cdd85ed7294c460ac9a59cfdb8443814afff7cdb36a88f680289b68b19f9be91b257f97be6b323836ef53f0a601cdc640312485b9381a9699163df597e072be17482e6e65c7d725c26065d6c4c94edc062942c22ff736d8a07d772bd496c357bbe70da63e7ab4b93eb79d898b4efd190f31dfac73ba0a4d5bf46b6101a56225c5cc3a370373f91b05039047ec20e10104ed33ac761b1993ffb3f0def84fe77d3c55f0b93a2c22cd05a8a287c5e431191630a286653ae501c9d009cc93e0ee1888ed0b5adc4d2b9da6057be6f4cd91cefd356094ab94a1090d30bcfd3b7f8a4723c0c4e88417346ad880ed35a5d7bb3904d49e1137ea14f88abf7118ab2cb73c82f2925268911953815a1bd1082829d4f81c98c4ca778fcdaf3f35c5fc785f7ef4c1f07c478737f7a8aaf279587d65b11baa5493b1345506024d8523dcd52911ccba110f2433fada8f12465a4833895b507770c9324a798dcc9758d20d106442dff4d03f7bb20095dc7bde8dfbc077654b4dae4931c78f62d908818cf6ecd0a0db76b026be584b996a7a076801c73daf54c4a80a26ef0d18d9cef226edbf14c4217b31da5fa9074f22a299113fb4b3eed483745de3d1d0a5a98b098eae46c8654e2b4c3ee26eac945e3fa646e32b9e8971fdff08823f5ab9f79bedfd09a7e1d15dc2ca6fc15fce93f2ead12c117f381998fcd016c4f53482295828a7abf43fbdad9a0237844d4b05c1f9bbedadd38a7464ebd900507968f422af625f43c3187749388d9f95e88562a3900364cd7caa9c6575653e4bcb6f8ba282fb612ea0a1c6d4d5cc8c5f448a360e708e751421262236e39190ae43e52bcf6864f42b46139538d664e25df7aa2628266734575091ae41d7c283a903a881bd78e4902c97aa928bcbe56cb56300c6522cf9278dc4b211d100fc6a5ed8efe4b0a76f9e49748554f783320dd2fe15cf793fa4b7f03c9b1aee633d61d29682a7cd99ce6ea8020c6ed5e229b2d8978b0e5d471494ddab60d7972dd7bff9ecbb0788caa0a7ec46516455ab34037b7c5b5fbc87e2da1deaa8e5be916f408adbf2ce47e2c8c97cf8fc746e89b50b42e6c23a2bcbe0ed8cdc0e55ed50206772694f14d6cac54ecd9beb13627046b64d7b170ff99d96562dd59215aca9cd383336f29292608d3fe358c3cd5c295ee9558036470c"]}, @typed={0x8, 0x3c, 0x0, 0x0, @pid=r2}, @nested={0x5c, 0xc, 0x0, 0x1, [@generic="541b0cb2d09a2e5aecc45a655deb64acb7cf857031530a0be1fa512c", @generic="0e9248c53ddf5e96a10a6a0213d750d6fdb6d57fcce30f219e59b37ef7f602b8d1d2cfd6cc684c64584c8ce167d212b2c7557e7b0fbea3b814d32b5e"]}, @generic, @generic="842c5b7a67fa6517ded30a80ae4c3c4e48549518458625818f32a26e29f5a528feb65bf38994342dafaed09931afca60f06cceea912a1471e1f3077e2fe6d1f8e3e699dd138b6cc5345a8e3454425d81398f03d61efeae537c11a9796c255d106178c9f6a7350faae79b9ffe0ea6efd877198e9801cae47c638c9ebf1c725cc92c3f22df8a035fa03538639578a786419eab6c51c179fd0eb16c370d2c41c294eec886748abcb816e84a7d3034cc64443f6f2f17df4e68ea69c1b9e0"]}, 0x1408}], 0x1, &(0x7f00000016c0)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, r5}}}], 0x20, 0xc801}, 0x20000000) (async, rerun: 32) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x4, &(0x7f0000130000/0x800000)=nil) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2588.235343] device vcan3 entered promiscuous mode [ 2588.245694] IPv6: ADDRCONF(NETDEV_CHANGE): vcan3: link becomes ready 06:30:12 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0xc, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:12 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mbind(&(0x7f00004f3000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000140)=0x3, 0x8, 0x3) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2588.338496] bond1228: making interface vlan1065 the new active one [ 2588.386499] bond1228: Enslaving vlan1065 as an active interface with an up link 06:30:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0xb6100fc6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:30:12 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f00000002c0)={{r1}, "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"}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001300), 0x101000, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000001340)=@userptr={0xe4, 0x1, 0x4, 0x2, 0x5, {r2, r3/1000+60000}, {0x0, 0x8, 0x8, 0x2, 0x0, 0xec, ';nWS'}, 0x100, 0x2, {&(0x7f00000012c0)}, 0x2, 0x0, r4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) dup(r5) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f00000002c0)={{r1}, "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"}) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000001300), 0x101000, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000001340)=@userptr={0xe4, 0x1, 0x4, 0x2, 0x5, {r2, r3/1000+60000}, {0x0, 0x8, 0x8, 0x2, 0x0, 0xec, ';nWS'}, 0x100, 0x2, {&(0x7f00000012c0)}, 0x2, 0x0, r4}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) dup(r5) (async) 06:30:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:30:12 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0xfe, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2588.443930] FAT-fs (loop2): Directory bread(block 6) failed [ 2588.498892] FAT-fs (loop2): Directory bread(block 6) failed [ 2588.537646] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2588.671831] device vcan3 entered promiscuous mode [ 2588.682305] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2588.707615] device batadv1228 entered promiscuous mode [ 2588.721220] 8021q: adding VLAN 0 to HW filter on device batadv1228 [ 2588.758764] bond1229: vlan1066 is up - this may be due to an out of date ifenslave 06:30:13 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) move_pages(r1, 0x7, &(0x7f00000001c0)=[&(0x7f0000bfd000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, &(0x7f0000d55000/0x3000)=nil, &(0x7f0000fc9000/0x3000)=nil, &(0x7f0000566000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000763000/0x10000)=nil], &(0x7f0000000240)=[0x3, 0x8000], &(0x7f0000000280), 0x4) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:13 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mbind(&(0x7f00004f3000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000140)=0x3, 0x8, 0x3) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mbind(&(0x7f00004f3000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000140)=0x3, 0x8, 0x3) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) 06:30:13 executing program 1: ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000)) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:30:13 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0xfffe, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0xc3ffffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:30:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) [ 2588.822174] FAT-fs (loop2): Directory bread(block 6) failed 06:30:13 executing program 1: ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000)) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2588.947376] device vcan3 entered promiscuous mode 06:30:13 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mbind(&(0x7f00004f3000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000140)=0x3, 0x8, 0x3) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mbind(&(0x7f00004f3000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000140)=0x3, 0x8, 0x3) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) 06:30:13 executing program 1: ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000)) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:30:13 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) move_pages(r1, 0x7, &(0x7f00000001c0)=[&(0x7f0000bfd000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, &(0x7f0000d55000/0x3000)=nil, &(0x7f0000fc9000/0x3000)=nil, &(0x7f0000566000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000763000/0x10000)=nil], &(0x7f0000000240)=[0x3, 0x8000], &(0x7f0000000280), 0x4) (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2588.982849] IPv6: ADDRCONF(NETDEV_CHANGE): vcan3: link becomes ready 06:30:13 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="d75622e046d99e8c6d8f951677b24bbeaf6d27c42152a3871a82efe1b4bcc89c414b349af5149a27a2260c894f02c53d9612e1c8745d4fda6455b25d9afe3e13c4b632a0e5ede4f2aab7e3cceec732e35cb69e04b7e75305f26b6fa555d4f03140f35a6249e7c310f51c9f7e7968a0b031e4162dbac38ac3c375c2ce9f507e068e0d63b20dac3dd1d382bad120e91e38458ecf5af396db7856a574bf75f100b077293a27609f8fa15a3f4226bd510de8b9b1c5260029f73708c5a7be3cea85db26af83ec86238a64075c498bc18a1a"]) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x80080}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r2 = socket(0xf, 0x800, 0xc8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_proto_private(r3, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") r4 = socket$inet6(0xa, 0x3, 0xa) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nf_conntrack_amanda', 0x40000, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x3, 0x1f, 0x3f, 0x1, 0x0, 0x7, 0x200, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffff81, 0x4, @perf_config_ext={0x5, 0x3}, 0x1000, 0x9, 0x9, 0x6, 0xd326, 0x8000, 0x320, 0x0, 0x4, 0x0, 0x4}, 0xffffffffffffffff, 0x0, r5, 0x0) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000140)={'veth1_to_batadv\x00', @ifru_data=&(0x7f0000000100)="c927eb9cdbae7e0d201aee2d8ab10c0987198f6b6d3cef10808c214955779f08"}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14006e7a5168616e3100000080000000000000001c00e88008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX=r2, @ANYRESDEC=r4, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r3], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'veth0_to_bond\x00', &(0x7f0000000340)=@ethtool_sfeatures={0x3b, 0x2, [{0x10001, 0xffffffff}, {0x401, 0xfffffff8}]}}) read(r4, &(0x7f00000002c0)=""/221, 0xdd) 06:30:13 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) move_pages(r1, 0x7, &(0x7f00000001c0)=[&(0x7f0000bfd000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, &(0x7f0000d55000/0x3000)=nil, &(0x7f0000fc9000/0x3000)=nil, &(0x7f0000566000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000763000/0x10000)=nil], &(0x7f0000000240)=[0x3, 0x8000], &(0x7f0000000280), 0x4) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2589.061425] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:30:13 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000240)=""/103, 0x67}, {&(0x7f0000000140)=""/24, 0x18}, {&(0x7f00000001c0)=""/62, 0x3e}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/175, 0xaf}, {&(0x7f0000001380)=""/22, 0x16}, {&(0x7f00000013c0)=""/242, 0xf2}], 0x7, 0x7, 0x4) process_vm_writev(0x0, &(0x7f0000002740)=[{&(0x7f0000001540)=""/204, 0xcc}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/252, 0xfc}], 0x3, &(0x7f0000003bc0)=[{&(0x7f0000002780)=""/3, 0x3}, {&(0x7f00000027c0)=""/252, 0xfc}, {&(0x7f00000028c0)=""/173, 0xad}, {&(0x7f0000002980)=""/210, 0xd2}, {&(0x7f0000002a80)=""/210, 0xd2}, {&(0x7f0000002b80)}, {&(0x7f0000002bc0)=""/4096, 0x1000}], 0x7, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:13 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() tkill(r0, 0x2d) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000140)='-T!!@\x00'}, 0x30) 06:30:13 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000240)=""/103, 0x67}, {&(0x7f0000000140)=""/24, 0x18}, {&(0x7f00000001c0)=""/62, 0x3e}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/175, 0xaf}, {&(0x7f0000001380)=""/22, 0x16}, {&(0x7f00000013c0)=""/242, 0xf2}], 0x7, 0x7, 0x4) process_vm_writev(0x0, &(0x7f0000002740)=[{&(0x7f0000001540)=""/204, 0xcc}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/252, 0xfc}], 0x3, &(0x7f0000003bc0)=[{&(0x7f0000002780)=""/3, 0x3}, {&(0x7f00000027c0)=""/252, 0xfc}, {&(0x7f00000028c0)=""/173, 0xad}, {&(0x7f0000002980)=""/210, 0xd2}, {&(0x7f0000002a80)=""/210, 0xd2}, {&(0x7f0000002b80)}, {&(0x7f0000002bc0)=""/4096, 0x1000}], 0x7, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000240)=""/103, 0x67}, {&(0x7f0000000140)=""/24, 0x18}, {&(0x7f00000001c0)=""/62, 0x3e}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/175, 0xaf}, {&(0x7f0000001380)=""/22, 0x16}, {&(0x7f00000013c0)=""/242, 0xf2}], 0x7, 0x7, 0x4) (async) process_vm_writev(0x0, &(0x7f0000002740)=[{&(0x7f0000001540)=""/204, 0xcc}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/252, 0xfc}], 0x3, &(0x7f0000003bc0)=[{&(0x7f0000002780)=""/3, 0x3}, {&(0x7f00000027c0)=""/252, 0xfc}, {&(0x7f00000028c0)=""/173, 0xad}, {&(0x7f0000002980)=""/210, 0xd2}, {&(0x7f0000002a80)=""/210, 0xd2}, {&(0x7f0000002b80)}, {&(0x7f0000002bc0)=""/4096, 0x1000}], 0x7, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) [ 2589.222262] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2589.306218] device batadv1229 entered promiscuous mode [ 2589.341641] 8021q: adding VLAN 0 to HW filter on device batadv1229 [ 2589.446643] bond1230: making interface vlan1066 the new active one [ 2589.470820] bond1230: Enslaving vlan1066 as an active interface with an up link 06:30:13 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0xfffffff5, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:13 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() tkill(r0, 0x2d) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000140)='-T!!@\x00'}, 0x30) 06:30:13 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000240)=""/103, 0x67}, {&(0x7f0000000140)=""/24, 0x18}, {&(0x7f00000001c0)=""/62, 0x3e}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/175, 0xaf}, {&(0x7f0000001380)=""/22, 0x16}, {&(0x7f00000013c0)=""/242, 0xf2}], 0x7, 0x7, 0x4) process_vm_writev(0x0, &(0x7f0000002740)=[{&(0x7f0000001540)=""/204, 0xcc}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/252, 0xfc}], 0x3, &(0x7f0000003bc0)=[{&(0x7f0000002780)=""/3, 0x3}, {&(0x7f00000027c0)=""/252, 0xfc}, {&(0x7f00000028c0)=""/173, 0xad}, {&(0x7f0000002980)=""/210, 0xd2}, {&(0x7f0000002a80)=""/210, 0xd2}, {&(0x7f0000002b80)}, {&(0x7f0000002bc0)=""/4096, 0x1000}], 0x7, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000240)=""/103, 0x67}, {&(0x7f0000000140)=""/24, 0x18}, {&(0x7f00000001c0)=""/62, 0x3e}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/175, 0xaf}, {&(0x7f0000001380)=""/22, 0x16}, {&(0x7f00000013c0)=""/242, 0xf2}], 0x7, 0x7, 0x4) (async) process_vm_writev(0x0, &(0x7f0000002740)=[{&(0x7f0000001540)=""/204, 0xcc}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/252, 0xfc}], 0x3, &(0x7f0000003bc0)=[{&(0x7f0000002780)=""/3, 0x3}, {&(0x7f00000027c0)=""/252, 0xfc}, {&(0x7f00000028c0)=""/173, 0xad}, {&(0x7f0000002980)=""/210, 0xd2}, {&(0x7f0000002a80)=""/210, 0xd2}, {&(0x7f0000002b80)}, {&(0x7f0000002bc0)=""/4096, 0x1000}], 0x7, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) 06:30:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0xc60f10b6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:30:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:30:13 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() tkill(r0, 0x2d) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000140)='-T!!@\x00'}, 0x30) [ 2589.741730] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:30:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:14 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="d75622e046d99e8c6d8f951677b24bbeaf6d27c42152a3871a82efe1b4bcc89c414b349af5149a27a2260c894f02c53d9612e1c8745d4fda6455b25d9afe3e13c4b632a0e5ede4f2aab7e3cceec732e35cb69e04b7e75305f26b6fa555d4f03140f35a6249e7c310f51c9f7e7968a0b031e4162dbac38ac3c375c2ce9f507e068e0d63b20dac3dd1d382bad120e91e38458ecf5af396db7856a574bf75f100b077293a27609f8fa15a3f4226bd510de8b9b1c5260029f73708c5a7be3cea85db26af83ec86238a64075c498bc18a1a"]) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x80080}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r2 = socket(0xf, 0x800, 0xc8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_proto_private(r3, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") r4 = socket$inet6(0xa, 0x3, 0xa) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nf_conntrack_amanda', 0x40000, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x3, 0x1f, 0x3f, 0x1, 0x0, 0x7, 0x200, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffff81, 0x4, @perf_config_ext={0x5, 0x3}, 0x1000, 0x9, 0x9, 0x6, 0xd326, 0x8000, 0x320, 0x0, 0x4, 0x0, 0x4}, 0xffffffffffffffff, 0x0, r5, 0x0) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000140)={'veth1_to_batadv\x00', @ifru_data=&(0x7f0000000100)="c927eb9cdbae7e0d201aee2d8ab10c0987198f6b6d3cef10808c214955779f08"}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14006e7a5168616e3100000080000000000000001c00e88008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX=r2, @ANYRESDEC=r4, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r3], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'veth0_to_bond\x00', &(0x7f0000000340)=@ethtool_sfeatures={0x3b, 0x2, [{0x10001, 0xffffffff}, {0x401, 0xfffffff8}]}}) read(r4, &(0x7f00000002c0)=""/221, 0xdd) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="d75622e046d99e8c6d8f951677b24bbeaf6d27c42152a3871a82efe1b4bcc89c414b349af5149a27a2260c894f02c53d9612e1c8745d4fda6455b25d9afe3e13c4b632a0e5ede4f2aab7e3cceec732e35cb69e04b7e75305f26b6fa555d4f03140f35a6249e7c310f51c9f7e7968a0b031e4162dbac38ac3c375c2ce9f507e068e0d63b20dac3dd1d382bad120e91e38458ecf5af396db7856a574bf75f100b077293a27609f8fa15a3f4226bd510de8b9b1c5260029f73708c5a7be3cea85db26af83ec86238a64075c498bc18a1a"]) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x80080}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) socket(0xf, 0x800, 0xc8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_proto_private(r3, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") (async) socket$inet6(0xa, 0x3, 0xa) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nf_conntrack_amanda', 0x40000, 0x0) (async) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x3, 0x1f, 0x3f, 0x1, 0x0, 0x7, 0x200, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffff81, 0x4, @perf_config_ext={0x5, 0x3}, 0x1000, 0x9, 0x9, 0x6, 0xd326, 0x8000, 0x320, 0x0, 0x4, 0x0, 0x4}, 0xffffffffffffffff, 0x0, r5, 0x0) (async) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000140)={'veth1_to_batadv\x00', @ifru_data=&(0x7f0000000100)="c927eb9cdbae7e0d201aee2d8ab10c0987198f6b6d3cef10808c214955779f08"}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14006e7a5168616e3100000080000000000000001c00e88008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX=r2, @ANYRESDEC=r4, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r3], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) (async) ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) (async) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'veth0_to_bond\x00', &(0x7f0000000340)=@ethtool_sfeatures={0x3b, 0x2, [{0x10001, 0xffffffff}, {0x401, 0xfffffff8}]}}) (async) read(r4, &(0x7f00000002c0)=""/221, 0xdd) (async) 06:30:14 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f00008c7000/0x3000)=nil, 0x3000, 0x4, 0x810, 0xffffffffffffffff, 0x723ad000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2589.887975] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:30:14 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f00008c7000/0x3000)=nil, 0x3000, 0x4, 0x810, 0xffffffffffffffff, 0x723ad000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mmap(&(0x7f00008c7000/0x3000)=nil, 0x3000, 0x4, 0x810, 0xffffffffffffffff, 0x723ad000) (async) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) 06:30:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) renameat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2589.965103] device batadv1230 entered promiscuous mode [ 2589.998707] 8021q: adding VLAN 0 to HW filter on device batadv1230 06:30:14 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f00008c7000/0x3000)=nil, 0x3000, 0x4, 0x810, 0xffffffffffffffff, 0x723ad000) (async, rerun: 64) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (rerun: 64) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2590.084397] bond1231: vlan1067 is up - this may be due to an out of date ifenslave [ 2591.212296] aoe: packet could not be sent on wpan0. consider increasing tx_queue_len [ 2591.221138] ieee802154 phy1 wpan1: encryption failed: -22 06:30:20 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0xfffffffe, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0xd4bd0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:30:20 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="d75622e046d99e8c6d8f951677b24bbeaf6d27c42152a3871a82efe1b4bcc89c414b349af5149a27a2260c894f02c53d9612e1c8745d4fda6455b25d9afe3e13c4b632a0e5ede4f2aab7e3cceec732e35cb69e04b7e75305f26b6fa555d4f03140f35a6249e7c310f51c9f7e7968a0b031e4162dbac38ac3c375c2ce9f507e068e0d63b20dac3dd1d382bad120e91e38458ecf5af396db7856a574bf75f100b077293a27609f8fa15a3f4226bd510de8b9b1c5260029f73708c5a7be3cea85db26af83ec86238a64075c498bc18a1a"]) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x80080}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r2 = socket(0xf, 0x800, 0xc8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_proto_private(r3, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") r4 = socket$inet6(0xa, 0x3, 0xa) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nf_conntrack_amanda', 0x40000, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x3, 0x1f, 0x3f, 0x1, 0x0, 0x7, 0x200, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffff81, 0x4, @perf_config_ext={0x5, 0x3}, 0x1000, 0x9, 0x9, 0x6, 0xd326, 0x8000, 0x320, 0x0, 0x4, 0x0, 0x4}, 0xffffffffffffffff, 0x0, r5, 0x0) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000140)={'veth1_to_batadv\x00', @ifru_data=&(0x7f0000000100)="c927eb9cdbae7e0d201aee2d8ab10c0987198f6b6d3cef10808c214955779f08"}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14006e7a5168616e3100000080000000000000001c00e88008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX=r2, @ANYRESDEC=r4, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r3], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'veth0_to_bond\x00', &(0x7f0000000340)=@ethtool_sfeatures={0x3b, 0x2, [{0x10001, 0xffffffff}, {0x401, 0xfffffff8}]}}) read(r4, &(0x7f00000002c0)=""/221, 0xdd) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="d75622e046d99e8c6d8f951677b24bbeaf6d27c42152a3871a82efe1b4bcc89c414b349af5149a27a2260c894f02c53d9612e1c8745d4fda6455b25d9afe3e13c4b632a0e5ede4f2aab7e3cceec732e35cb69e04b7e75305f26b6fa555d4f03140f35a6249e7c310f51c9f7e7968a0b031e4162dbac38ac3c375c2ce9f507e068e0d63b20dac3dd1d382bad120e91e38458ecf5af396db7856a574bf75f100b077293a27609f8fa15a3f4226bd510de8b9b1c5260029f73708c5a7be3cea85db26af83ec86238a64075c498bc18a1a"]) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x80080}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) socket(0xf, 0x800, 0xc8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_proto_private(r3, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") (async) socket$inet6(0xa, 0x3, 0xa) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nf_conntrack_amanda', 0x40000, 0x0) (async) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x3, 0x1f, 0x3f, 0x1, 0x0, 0x7, 0x200, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffff81, 0x4, @perf_config_ext={0x5, 0x3}, 0x1000, 0x9, 0x9, 0x6, 0xd326, 0x8000, 0x320, 0x0, 0x4, 0x0, 0x4}, 0xffffffffffffffff, 0x0, r5, 0x0) (async) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000140)={'veth1_to_batadv\x00', @ifru_data=&(0x7f0000000100)="c927eb9cdbae7e0d201aee2d8ab10c0987198f6b6d3cef10808c214955779f08"}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14006e7a5168616e3100000080000000000000001c00e88008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX=r2, @ANYRESDEC=r4, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r3], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) (async) ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) (async) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'veth0_to_bond\x00', &(0x7f0000000340)=@ethtool_sfeatures={0x3b, 0x2, [{0x10001, 0xffffffff}, {0x401, 0xfffffff8}]}}) (async) read(r4, &(0x7f00000002c0)=""/221, 0xdd) (async) 06:30:20 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 06:30:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:30:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) renameat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:20 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 2595.927246] fat__get_entry: 4 callbacks suppressed [ 2595.927257] FAT-fs (loop2): Directory bread(block 6) failed [ 2595.948219] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:30:20 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r2 = socket(0xf, 0x800, 0xc8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_proto_private(r3, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$inet6(0xa, 0x3, 0xa) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX=r2, @ANYRESDEC=r8, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003005f2a000000000000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r3], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="6080ec9fbbc1d4e5e7819eebc8fbca2faa03942fc5fc362815d5f13049ffc1b8aff6c9b94a8ccdb500b3ee34148d442904af8f3599", @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="0800050008000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="224a5e4a79c6452f99e8d72b8f7c57e7e55f7e00", @ANYRES16=r7, @ANYBLOB='\x00'/11, @ANYRES32=r5, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r7, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1400c480}, 0x4004) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800184000000000000000000000005b32da7d5753c3640ba44d057b19c6d9049500000000000000", @ANYRES16=r2], &(0x7f0000000480)='syzkaller\x00', 0x7, 0xec, &(0x7f00000004c0)=""/236, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000000)=[{r2, 0x401}, {r1}, {r0}, {}], 0x4, 0x4) 06:30:20 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 06:30:20 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) mremap(&(0x7f00007e7000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000636000/0x1000)=nil) r1 = getpgid(r0) munlock(&(0x7f000054c000/0x2000)=nil, 0x2000) ptrace$setopts(0x4206, r1, 0x3, 0x10) mmap(&(0x7f0000699000/0x1000)=nil, 0x1000, 0x0, 0x100010, 0xffffffffffffffff, 0x9f7b0000) 06:30:20 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2596.102732] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2596.187408] device batadv1231 entered promiscuous mode [ 2596.225068] 8021q: adding VLAN 0 to HW filter on device batadv1231 06:30:20 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) mremap(&(0x7f00007e7000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000636000/0x1000)=nil) r1 = getpgid(r0) (async) munlock(&(0x7f000054c000/0x2000)=nil, 0x2000) ptrace$setopts(0x4206, r1, 0x3, 0x10) (async) mmap(&(0x7f0000699000/0x1000)=nil, 0x1000, 0x0, 0x100010, 0xffffffffffffffff, 0x9f7b0000) [ 2596.326567] bond1232: making interface vlan1067 the new active one [ 2596.403618] bond1232: Enslaving vlan1067 as an active interface with an up link [ 2596.437812] bond0: Error: cannot enslave VLAN challenged slave lo on VLAN enabled bond bond0 [ 2596.493010] FAT-fs (loop2): Directory bread(block 6) failed 06:30:26 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0xfffffffffffffffe, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:26 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) 06:30:26 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) mremap(&(0x7f00007e7000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000636000/0x1000)=nil) r1 = getpgid(r0) munlock(&(0x7f000054c000/0x2000)=nil, 0x2000) ptrace$setopts(0x4206, r1, 0x3, 0x10) mmap(&(0x7f0000699000/0x1000)=nil, 0x1000, 0x0, 0x100010, 0xffffffffffffffff, 0x9f7b0000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) mremap(&(0x7f00007e7000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000636000/0x1000)=nil) (async) getpgid(r0) (async) munlock(&(0x7f000054c000/0x2000)=nil, 0x2000) (async) ptrace$setopts(0x4206, r1, 0x3, 0x10) (async) mmap(&(0x7f0000699000/0x1000)=nil, 0x1000, 0x0, 0x100010, 0xffffffffffffffff, 0x9f7b0000) (async) 06:30:26 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r2 = socket(0xf, 0x800, 0xc8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_proto_private(r3, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$inet6(0xa, 0x3, 0xa) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX=r2, @ANYRESDEC=r8, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003005f2a000000000000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r3], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="6080ec9fbbc1d4e5e7819eebc8fbca2faa03942fc5fc362815d5f13049ffc1b8aff6c9b94a8ccdb500b3ee34148d442904af8f3599", @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="0800050008000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="224a5e4a79c6452f99e8d72b8f7c57e7e55f7e00", @ANYRES16=r7, @ANYBLOB='\x00'/11, @ANYRES32=r5, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r7, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1400c480}, 0x4004) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800184000000000000000000000005b32da7d5753c3640ba44d057b19c6d9049500000000000000", @ANYRES16=r2], &(0x7f0000000480)='syzkaller\x00', 0x7, 0xec, &(0x7f00000004c0)=""/236, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000000)=[{r2, 0x401}, {r1}, {r0}, {}], 0x4, 0x4) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) socket(0xf, 0x800, 0xc8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_proto_private(r3, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$inet6(0xa, 0x3, 0xa) (async) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX=r2, @ANYRESDEC=r8, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003005f2a000000000000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r3], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="6080ec9fbbc1d4e5e7819eebc8fbca2faa03942fc5fc362815d5f13049ffc1b8aff6c9b94a8ccdb500b3ee34148d442904af8f3599", @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="0800050008000000"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="224a5e4a79c6452f99e8d72b8f7c57e7e55f7e00", @ANYRES16=r7, @ANYBLOB='\x00'/11, @ANYRES32=r5, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) (async) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r7, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1400c480}, 0x4004) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800184000000000000000000000005b32da7d5753c3640ba44d057b19c6d9049500000000000000", @ANYRES16=r2], &(0x7f0000000480)='syzkaller\x00', 0x7, 0xec, &(0x7f00000004c0)=""/236, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) poll(&(0x7f0000000000)=[{r2, 0x401}, {r1}, {r0}, {}], 0x4, 0x4) (async) 06:30:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:30:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0xd5bd0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) [ 2602.494822] FAT-fs (loop2): Directory bread(block 6) failed [ 2602.513696] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:30:26 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) munmap(&(0x7f000067f000/0x1000)=nil, 0x1000) [ 2602.605735] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2602.658172] device batadv1232 entered promiscuous mode [ 2602.683488] 8021q: adding VLAN 0 to HW filter on device batadv1232 06:30:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0xd6bd0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) [ 2602.725309] bond0: Error: cannot enslave VLAN challenged slave lo on VLAN enabled bond bond0 06:30:27 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2602.797907] bond1233: vlan1068 is up - this may be due to an out of date ifenslave 06:30:27 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f0000178000/0x4000)=nil, 0x4000, 0x3000, 0x6, &(0x7f00005e7000/0x3000)=nil) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:27 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r2 = socket(0xf, 0x800, 0xc8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_proto_private(r3, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$inet6(0xa, 0x3, 0xa) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX=r2, @ANYRESDEC=r8, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003005f2a000000000000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r3], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="6080ec9fbbc1d4e5e7819eebc8fbca2faa03942fc5fc362815d5f13049ffc1b8aff6c9b94a8ccdb500b3ee34148d442904af8f3599", @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="0800050008000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="224a5e4a79c6452f99e8d72b8f7c57e7e55f7e00", @ANYRES16=r7, @ANYBLOB='\x00'/11, @ANYRES32=r5, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r7, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1400c480}, 0x4004) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800184000000000000000000000005b32da7d5753c3640ba44d057b19c6d9049500000000000000", @ANYRES16=r2], &(0x7f0000000480)='syzkaller\x00', 0x7, 0xec, &(0x7f00000004c0)=""/236, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000000)=[{r2, 0x401}, {r1}, {r0}, {}], 0x4, 0x4) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) socket(0xf, 0x800, 0xc8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_proto_private(r3, 0x89e7, &(0x7f0000000280)="1a9bc7e67928a97089b47f5c2f036c3acabbcbd4157b830df68db1bc52c0f18700da516917123e117f038b28d62ca0859f56025ce115d44b7fcb316d7df77c766906dbf9660e2cab5582b2f038f5e88d6e50cb9e3b60d97c796a5e4a51b2d415db679c537ce9f27c288346b1069222d974df2c98e38b5db23073dc5f364742e4bae34aae0067f2151b83fdccdc93772970baaaa4f3d128ce1d0d2087dc62d3e5e1de") (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$inet6(0xa, 0x3, 0xa) (async) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX=r2, @ANYRESDEC=r8, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003005f2a000000000000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8=r3], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="6080ec9fbbc1d4e5e7819eebc8fbca2faa03942fc5fc362815d5f13049ffc1b8aff6c9b94a8ccdb500b3ee34148d442904af8f3599", @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="0800050008000000"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="224a5e4a79c6452f99e8d72b8f7c57e7e55f7e00", @ANYRES16=r7, @ANYBLOB='\x00'/11, @ANYRES32=r5, @ANYBLOB="65b48e18d1e7ac461d09597306e2cc04247a1474017a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) (async) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r7, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1400c480}, 0x4004) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800184000000000000000000000005b32da7d5753c3640ba44d057b19c6d9049500000000000000", @ANYRES16=r2], &(0x7f0000000480)='syzkaller\x00', 0x7, 0xec, &(0x7f00000004c0)=""/236, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) poll(&(0x7f0000000000)=[{r2, 0x401}, {r1}, {r0}, {}], 0x4, 0x4) (async) 06:30:27 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) munmap(&(0x7f000067f000/0x1000)=nil, 0x1000) [ 2602.992204] bond0: Error: cannot enslave VLAN challenged slave lo on VLAN enabled bond bond0 06:30:32 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x2) 06:30:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:30:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0xd7bd0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:30:32 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async, rerun: 64) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async, rerun: 64) munmap(&(0x7f000067f000/0x1000)=nil, 0x1000) 06:30:32 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x40, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:30:32 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f0000178000/0x4000)=nil, 0x4000, 0x3000, 0x6, &(0x7f00005e7000/0x3000)=nil) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) mremap(&(0x7f0000178000/0x4000)=nil, 0x4000, 0x3000, 0x6, &(0x7f00005e7000/0x3000)=nil) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) 06:30:33 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x40, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x40, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) [ 2608.796014] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:30:33 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x40, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:30:33 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0, 0x0], 0x0) [ 2608.952583] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:30:33 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f0000178000/0x4000)=nil, 0x4000, 0x3000, 0x6, &(0x7f00005e7000/0x3000)=nil) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:33 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @sliced={0xfff7, [0x8, 0x3, 0xfff7, 0x3, 0x40, 0x8001, 0x3f, 0x4, 0x1000, 0x3, 0xffff, 0x7fff, 0x4, 0xff, 0x698, 0x1, 0x28b, 0x3, 0x9, 0x98, 0x3, 0x8, 0x0, 0x7, 0x0, 0xffff, 0x8, 0xff, 0x6, 0x1, 0xbd5, 0xab2, 0x0, 0x6, 0x400, 0xfff8, 0x9, 0x0, 0x5, 0x6, 0x5, 0x3ff, 0x7, 0x800, 0x6, 0x8000, 0xf9d6, 0x7]}}) [ 2609.043598] device batadv1233 entered promiscuous mode 06:30:33 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x3) [ 2609.103983] 8021q: adding VLAN 0 to HW filter on device batadv1233 06:30:33 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @sliced={0xfff7, [0x8, 0x3, 0xfff7, 0x3, 0x40, 0x8001, 0x3f, 0x4, 0x1000, 0x3, 0xffff, 0x7fff, 0x4, 0xff, 0x698, 0x1, 0x28b, 0x3, 0x9, 0x98, 0x3, 0x8, 0x0, 0x7, 0x0, 0xffff, 0x8, 0xff, 0x6, 0x1, 0xbd5, 0xab2, 0x0, 0x6, 0x400, 0xfff8, 0x9, 0x0, 0x5, 0x6, 0x5, 0x3ff, 0x7, 0x800, 0x6, 0x8000, 0xf9d6, 0x7]}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @sliced={0xfff7, [0x8, 0x3, 0xfff7, 0x3, 0x40, 0x8001, 0x3f, 0x4, 0x1000, 0x3, 0xffff, 0x7fff, 0x4, 0xff, 0x698, 0x1, 0x28b, 0x3, 0x9, 0x98, 0x3, 0x8, 0x0, 0x7, 0x0, 0xffff, 0x8, 0xff, 0x6, 0x1, 0xbd5, 0xab2, 0x0, 0x6, 0x400, 0xfff8, 0x9, 0x0, 0x5, 0x6, 0x5, 0x3ff, 0x7, 0x800, 0x6, 0x8000, 0xf9d6, 0x7]}}) (async) [ 2609.241538] bond1234: making interface vlan1068 the new active one 06:30:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:30:33 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x4) 06:30:33 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0, 0x0], 0x0) 06:30:33 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap$perf(&(0x7f000085c000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x401) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:33 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @sliced={0xfff7, [0x8, 0x3, 0xfff7, 0x3, 0x40, 0x8001, 0x3f, 0x4, 0x1000, 0x3, 0xffff, 0x7fff, 0x4, 0xff, 0x698, 0x1, 0x28b, 0x3, 0x9, 0x98, 0x3, 0x8, 0x0, 0x7, 0x0, 0xffff, 0x8, 0xff, 0x6, 0x1, 0xbd5, 0xab2, 0x0, 0x6, 0x400, 0xfff8, 0x9, 0x0, 0x5, 0x6, 0x5, 0x3ff, 0x7, 0x800, 0x6, 0x8000, 0xf9d6, 0x7]}}) 06:30:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0xd8bd0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) [ 2609.292601] bond1234: Enslaving vlan1068 as an active interface with an up link 06:30:33 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x6) 06:30:33 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000100)={0x3, 0x200, 0x3aa, 0x80000}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{0x40000}, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1}}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x9}) 06:30:33 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0, 0x0], 0x0) [ 2609.414193] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:30:33 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x7) 06:30:33 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000100)={0x3, 0x200, 0x3aa, 0x80000}) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{0x40000}, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1}}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x9}) 06:30:33 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000695000/0x4000)=nil, 0x4000, 0x800000, 0x6, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)={0x0, r0}) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2609.574579] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2609.644636] device batadv1234 entered promiscuous mode [ 2609.668133] 8021q: adding VLAN 0 to HW filter on device batadv1234 [ 2609.712773] bond1235: vlan1069 is up - this may be due to an out of date ifenslave 06:30:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:30:33 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap$perf(&(0x7f000085c000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x401) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mmap$perf(&(0x7f000085c000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x401) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) 06:30:33 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x8) 06:30:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0xd9bd0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:30:33 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000695000/0x4000)=nil, 0x4000, 0x800000, 0x6, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)={0x0, r0}) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000695000/0x4000)=nil, 0x4000, 0x800000, 0x6, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)={0x0, r0}) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) 06:30:33 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000100)={0x3, 0x200, 0x3aa, 0x80000}) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{0x40000}, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1}}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x9}) 06:30:34 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f00000002c0)={0x1, 0x8, @start={0x0, 0x0, "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", "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"}, [0xff, 0xa5, 0x7, 0x1ff, 0xa000000000, 0xdb, 0x44, 0x2, 0x2, 0x265, 0xfffffffffffffff7, 0x101, 0x4, 0x10001, 0x2, 0xb1ab, 0x9, 0x8000000000000000, 0x6, 0x171, 0xf5, 0x5, 0x5, 0x1, 0x2, 0x7, 0xffffffffffffce30, 0x3, 0x8000000000000001, 0x1, 0x2, 0xaf, 0x3127, 0x7, 0x3, 0x100, 0x4, 0x80000001, 0xe3c, 0x0, 0x81, 0x5, 0xbf, 0x2, 0x400, 0x9, 0x1, 0x2, 0xffff, 0x5, 0xcd, 0xa65, 0x330d, 0x3ff, 0xbf, 0x4bf1, 0xee9, 0x213f, 0x4, 0x67, 0x9c, 0x7fff, 0xae]}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:30:34 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000695000/0x4000)=nil, 0x4000, 0x800000, 0x6, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async, rerun: 64) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)={0x0, r0}) (async, rerun: 64) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:34 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x9) 06:30:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0xdabd0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:30:34 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:34 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xc) [ 2609.910682] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2610.085846] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2610.113370] device batadv1235 entered promiscuous mode [ 2610.124486] 8021q: adding VLAN 0 to HW filter on device batadv1235 [ 2610.199148] bond1236: making interface vlan1069 the new active one [ 2610.215123] bond1236: Enslaving vlan1069 as an active interface with an up link 06:30:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:30:34 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mmap$perf(&(0x7f000085c000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x401) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:34 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xe) 06:30:34 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) 06:30:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0xdbbd0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:30:34 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f00000002c0)={0x1, 0x8, @start={0x0, 0x0, "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", "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"}, [0xff, 0xa5, 0x7, 0x1ff, 0xa000000000, 0xdb, 0x44, 0x2, 0x2, 0x265, 0xfffffffffffffff7, 0x101, 0x4, 0x10001, 0x2, 0xb1ab, 0x9, 0x8000000000000000, 0x6, 0x171, 0xf5, 0x5, 0x5, 0x1, 0x2, 0x7, 0xffffffffffffce30, 0x3, 0x8000000000000001, 0x1, 0x2, 0xaf, 0x3127, 0x7, 0x3, 0x100, 0x4, 0x80000001, 0xe3c, 0x0, 0x81, 0x5, 0xbf, 0x2, 0x400, 0x9, 0x1, 0x2, 0xffff, 0x5, 0xcd, 0xa65, 0x330d, 0x3ff, 0xbf, 0x4bf1, 0xee9, 0x213f, 0x4, 0x67, 0x9c, 0x7fff, 0xae]}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 2610.244267] FAT-fs (loop2): Directory bread(block 6) failed 06:30:34 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xf) [ 2610.286631] FAT-fs (loop2): Directory bread(block 6) failed [ 2610.315189] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:30:34 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:34 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f00000002c0)={0x1, 0x8, @start={0x0, 0x0, "eb79a789ed32376e9c6d6a4b385ae0c7e39c6a1bbe0baa62fce517fb4e68b341ce103b76e1733da862cd358835a76ea4d8bb4a640ec55f2a988c2aceea05e6b8f74aa0760913de9ef0e134e1a16448b32ac061bed6c33a2e84371616e90f24453bb444154ea38e7b3681f63547d56afb1925e2ee7d5188a691f7f7e6bd60eaaa27cdb965f45929e448b1b38d3aaf81bcaf57b28916b4fdc41b20f9369495ab52c257b73377f4d2ff1c38155109416d41bc4d8535a487b89e2b2d7966ab0b5f57a85853d52926812f84c4318d826cc8a89bba358f0449bbae567e716b778143cddb3be93fb08ee70b0f6e53f1dc94d0f1370406a5d6deff88351890ff2929abdc2a5a35689bce9415e5d85ab5666e457d8523f9a21425dc3db6373661424ba4470bb2a220b666e3d391223c75dd724cdd976bc848cd123538cf66c61489bca9cf35fe991861f134b41e3d8bc9ec8a24fbe273e49f70185e061f19bfed5def8c2903f4f2023855479bc25d95cafcfb7f159ef0d9f779629495f43dc21e992c5314c4b7b5429ab15616c93b3097305698d004b96d5b2188ad3907c6a12b02418d2191594e26c4436aabd2765223b2505612e2f562d4e380a3e54488482267a5a5da5175d05d0cb2e50fa0c1879794b0ecbb0608a9c0c2cd5c7ff5d2d84f39f093c0345204e65c5ac2c96f5a6a0ebd15721f081313270ade80b54d74614056b1c09eeaeb7d029da6b2caff5d534da4a9a326afe3cbc11c629699f735615298ceea6715da91e53d89829514fd28f65a73e40a1a663b7111ba47fc7397ffa767f4612cd663fc26231e168e7deb1b76db71a36032b4f006199bbbff5b0b97440bcce1107489fdd2d1a887fb748a65f7483eb66fc66d0fb00de2b84380d958e333b03d4e25d966ba6ab70bf66229c5f7c608d12ccf0f1cc307f9dcefa2f3091a9d170e901aa52f766eff269e1a3ca8438f4af4b8e2f31825e9fe71efe2e88d3c32d79691c7260bb07771fcda673bbe90f7d2a1be0034644eae9558770798a845f87e5b1388bf6d9e1aebb1a530a85f12ffbbad4217e6dc1a9a5a1edee96990ffa469673577c0468b1cdcdd9dee62c66a81c4f37cec6f2121895644def779c3fe5903014b7e03b9f5e89d921b5d29c3e3be607686214b6a952ff937d91385699f779e41bf4603a6ecfff9c5576bc689dc3c37e59830dc09d20423a74ca60deb449f874dcebb671c8cd5adb1a1d7b6c1fdb2504a67336e2b11f7aee63d33abeca743ec85c222688ec617f1b64966bc4e3555808dd4b9ee2133cd9fefda5d293e4eb46fd7062a69287db53caefa2d2ebcf6a5c112f004ff44a08fcc0646b8d92a05321b74f7acd4f5507a3199344c78b38937b2ed3481a01d84130c07f0172a5a57bd4be66675b576fe0005ac22b2372fd99b914f60ccf51a8e26c724b96bd2d361538cdc3e9c", "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"}, [0xff, 0xa5, 0x7, 0x1ff, 0xa000000000, 0xdb, 0x44, 0x2, 0x2, 0x265, 0xfffffffffffffff7, 0x101, 0x4, 0x10001, 0x2, 0xb1ab, 0x9, 0x8000000000000000, 0x6, 0x171, 0xf5, 0x5, 0x5, 0x1, 0x2, 0x7, 0xffffffffffffce30, 0x3, 0x8000000000000001, 0x1, 0x2, 0xaf, 0x3127, 0x7, 0x3, 0x100, 0x4, 0x80000001, 0xe3c, 0x0, 0x81, 0x5, 0xbf, 0x2, 0x400, 0x9, 0x1, 0x2, 0xffff, 0x5, 0xcd, 0xa65, 0x330d, 0x3ff, 0xbf, 0x4bf1, 0xee9, 0x213f, 0x4, 0x67, 0x9c, 0x7fff, 0xae]}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f00000002c0)={0x1, 0x8, @start={0x0, 0x0, "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", "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"}, [0xff, 0xa5, 0x7, 0x1ff, 0xa000000000, 0xdb, 0x44, 0x2, 0x2, 0x265, 0xfffffffffffffff7, 0x101, 0x4, 0x10001, 0x2, 0xb1ab, 0x9, 0x8000000000000000, 0x6, 0x171, 0xf5, 0x5, 0x5, 0x1, 0x2, 0x7, 0xffffffffffffce30, 0x3, 0x8000000000000001, 0x1, 0x2, 0xaf, 0x3127, 0x7, 0x3, 0x100, 0x4, 0x80000001, 0xe3c, 0x0, 0x81, 0x5, 0xbf, 0x2, 0x400, 0x9, 0x1, 0x2, 0xffff, 0x5, 0xcd, 0xa65, 0x330d, 0x3ff, 0xbf, 0x4bf1, 0xee9, 0x213f, 0x4, 0x67, 0x9c, 0x7fff, 0xae]}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) 06:30:34 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x12) [ 2610.440464] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2610.488757] device batadv1236 entered promiscuous mode 06:30:34 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = gettid() move_pages(r0, 0x6, &(0x7f0000000100)=[&(0x7f00006ea000/0x2000)=nil, &(0x7f00004ef000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000020b000/0x1000)=nil, &(0x7f00001d5000/0xc000)=nil, &(0x7f0000ffc000/0x3000)=nil], &(0x7f0000000140)=[0xba15, 0x1, 0x80, 0x2], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00008c0000/0x1000)=nil, 0x1000, 0x64) r1 = gettid() process_vm_writev(r1, &(0x7f0000000100), 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/231, 0xe7}], 0x1, 0x0) move_pages(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000336000/0x1000)=nil], &(0x7f0000000200)=[0x102, 0x2073, 0x2], &(0x7f00000001c0)=[0x0], 0x0) 06:30:34 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x1e) [ 2610.585125] 8021q: adding VLAN 0 to HW filter on device batadv1236 [ 2610.678507] bond1237: making interface vlan1070 the new active one [ 2610.694077] bond1237: Enslaving vlan1070 as an active interface with an up link 06:30:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:30:34 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = gettid() move_pages(r0, 0x6, &(0x7f0000000100)=[&(0x7f00006ea000/0x2000)=nil, &(0x7f00004ef000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000020b000/0x1000)=nil, &(0x7f00001d5000/0xc000)=nil, &(0x7f0000ffc000/0x3000)=nil], &(0x7f0000000140)=[0xba15, 0x1, 0x80, 0x2], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00008c0000/0x1000)=nil, 0x1000, 0x64) r1 = gettid() process_vm_writev(r1, &(0x7f0000000100), 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/231, 0xe7}], 0x1, 0x0) move_pages(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000336000/0x1000)=nil], &(0x7f0000000200)=[0x102, 0x2073, 0x2], &(0x7f00000001c0)=[0x0], 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) gettid() (async) move_pages(r0, 0x6, &(0x7f0000000100)=[&(0x7f00006ea000/0x2000)=nil, &(0x7f00004ef000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000020b000/0x1000)=nil, &(0x7f00001d5000/0xc000)=nil, &(0x7f0000ffc000/0x3000)=nil], &(0x7f0000000140)=[0xba15, 0x1, 0x80, 0x2], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) madvise(&(0x7f00008c0000/0x1000)=nil, 0x1000, 0x64) (async) gettid() (async) process_vm_writev(r1, &(0x7f0000000100), 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000336000/0x1000)=nil], &(0x7f0000000200)=[0x102, 0x2073, 0x2], &(0x7f00000001c0)=[0x0], 0x0) (async) 06:30:34 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x21) 06:30:34 executing program 3: madvise(&(0x7f0000491000/0x1000)=nil, 0x1000, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() shmat(0x0, &(0x7f000031a000/0x2000)=nil, 0x7000) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x3c7324a8, 0x1, {r0}, {0xee00}, 0x15ff, 0x8000000000000001}) getpgid(r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x3, 0xa) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05120400002e00000008000300", @ANYRES32, @ANYRES64, @ANYBLOB="ab4921a5ca6c6827d083b439ab6cf5b1f4f9a3475f8bb19a6762c57c21f715011826eb2a8c8dbcc04e8a96c6a07429077da8c0dabc8459fa28896ee9eb25523ebb7fa0d878b724dd7bb1499c46f33f5f7b16990ca83b40e6a93513f741d4c8e09a115a54f13c3bd593eb6972308b69d008a8b4ef1f3cd255f41c5e3093cd733828e3c0b2309cbcee3b904556684e2a817918f28bb8e0489a3bfac1ff8f353456a39c063cd979e1c2", @ANYRES32, @ANYRESHEX=r2], 0x28}, 0x1, 0x0, 0x0, 0x80b0}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x44040011) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00037000fddbdf25200000000c009900060000006e0000000000a9f89831ca48cfcb44a06ae52356d9dcd34152c9fdd02d6b10934f48ed5a31175b5a2cfbf4f00049b00778ef7bfeb6086c3e29280a54881e15b586fd28d6c5693eb74cb73fc1f072b318829f9895796422ed4ee34ff4d9783f829a26603741361b68a328e1d65e2c0eab0238122039afb97f9f3ded7989231a7023b6b92489eead420cf76d2e3641f21b93c5e1e05a3b0c1664184a11dd3200b95e85121387535560628aec255c6ba1e0dbef1e735134dc7219f4925073ec1fc5fa955117e1738c08488ec71fc9dba935e8df5911c00ad999"], 0x20}, 0x1, 0x0, 0x0, 0x1400c480}, 0x4004) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180018400000000000000000000000049500000000000000", @ANYRES16], &(0x7f0000000480)='syzkaller\x00', 0x7, 0xec, &(0x7f00000004c0)=""/236, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000240)="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") shmctl$IPC_RMID(0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0xdcbd0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) [ 2610.741617] FAT-fs (loop2): Directory bread(block 6) failed 06:30:35 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x35) 06:30:35 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = gettid() move_pages(r0, 0x6, &(0x7f0000000100)=[&(0x7f00006ea000/0x2000)=nil, &(0x7f00004ef000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000020b000/0x1000)=nil, &(0x7f00001d5000/0xc000)=nil, &(0x7f0000ffc000/0x3000)=nil], &(0x7f0000000140)=[0xba15, 0x1, 0x80, 0x2], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00008c0000/0x1000)=nil, 0x1000, 0x64) (async) r1 = gettid() process_vm_writev(r1, &(0x7f0000000100), 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/231, 0xe7}], 0x1, 0x0) move_pages(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000336000/0x1000)=nil], &(0x7f0000000200)=[0x102, 0x2073, 0x2], &(0x7f00000001c0)=[0x0], 0x0) [ 2610.798847] FAT-fs (loop2): Directory bread(block 6) failed [ 2610.816600] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:30:35 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x87) 06:30:35 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = getpgid(0x0) move_pages(r0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r2 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r2, &(0x7f0000000980)='ns/pid\x00') r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000c00)={0x1, 0x80, 0xff, 0x2, 0x7a, 0x2, 0x0, 0x77d9, 0x10000, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffffffff, 0x1, @perf_config_ext={0xcc, 0x4}, 0x40000, 0x9, 0x9, 0x9, 0x9, 0x7fffffff, 0x1ff, 0x0, 0xffffffff, 0x0, 0x6}, 0xffffffffffffffff, 0xa, r3, 0x1) r4 = getpgid(0x0) capget(&(0x7f00000003c0)={0x20080522, r4}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) process_vm_writev(r4, &(0x7f0000000600)=[{&(0x7f0000000280)=""/81, 0x51}, {&(0x7f00000001c0)=""/28, 0x1c}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/177, 0xb1}, {&(0x7f0000000440)=""/63, 0x3f}, {&(0x7f0000000480)=""/223, 0xdf}, {&(0x7f0000000580)=""/106, 0x6a}], 0x7, &(0x7f0000000940)=[{&(0x7f0000000680)=""/98, 0x62}, {&(0x7f0000000700)=""/179, 0xb3}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000880)=""/134, 0x86}], 0x4, 0x0) move_pages(r1, 0x7, &(0x7f0000000140)=[&(0x7f0000ffa000/0x3000)=nil, &(0x7f00002a2000/0x3000)=nil, &(0x7f0000af0000/0x3000)=nil, &(0x7f000048b000/0x4000)=nil, &(0x7f00003fe000/0xc00000)=nil, &(0x7f0000754000/0x9000)=nil, &(0x7f0000f04000/0x3000)=nil], &(0x7f00000001c0), &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x2) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0x4, 0x20, 0x7, 0x9, 0x0, 0x80000000, 0x40000, 0xd, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f0000000ac0), 0xa}, 0x1d508, 0x1, 0x7fff, 0x6, 0x7, 0x2d0f4766, 0x7f, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) move_pages(r4, 0x9, &(0x7f00000009c0)=[&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000d01000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f000076b000/0x3000)=nil, &(0x7f0000b9c000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000d15000/0x3000)=nil, &(0x7f000048e000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000a40)=[0x9, 0x4, 0x3, 0x7], &(0x7f0000000a80)=[0x0, 0x0, 0x0], 0x0) [ 2610.937641] bond0: enslaved VLAN challenged slave lo. Adding VLANs will be blocked as long as lo is part of bond bond0 [ 2610.958032] bond0: lo is up - this may be due to an out of date ifenslave 06:30:35 executing program 3: madvise(&(0x7f0000491000/0x1000)=nil, 0x1000, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() shmat(0x0, &(0x7f000031a000/0x2000)=nil, 0x7000) (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x3c7324a8, 0x1, {r0}, {0xee00}, 0x15ff, 0x8000000000000001}) getpgid(r1) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = socket$inet6(0xa, 0x3, 0xa) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) (async, rerun: 64) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05120400002e00000008000300", @ANYRES32, @ANYRES64, @ANYBLOB="ab4921a5ca6c6827d083b439ab6cf5b1f4f9a3475f8bb19a6762c57c21f715011826eb2a8c8dbcc04e8a96c6a07429077da8c0dabc8459fa28896ee9eb25523ebb7fa0d878b724dd7bb1499c46f33f5f7b16990ca83b40e6a93513f741d4c8e09a115a54f13c3bd593eb6972308b69d008a8b4ef1f3cd255f41c5e3093cd733828e3c0b2309cbcee3b904556684e2a817918f28bb8e0489a3bfac1ff8f353456a39c063cd979e1c2", @ANYRES32, @ANYRESHEX=r2], 0x28}, 0x1, 0x0, 0x0, 0x80b0}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x44040011) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00037000fddbdf25200000000c009900060000006e0000000000a9f89831ca48cfcb44a06ae52356d9dcd34152c9fdd02d6b10934f48ed5a31175b5a2cfbf4f00049b00778ef7bfeb6086c3e29280a54881e15b586fd28d6c5693eb74cb73fc1f072b318829f9895796422ed4ee34ff4d9783f829a26603741361b68a328e1d65e2c0eab0238122039afb97f9f3ded7989231a7023b6b92489eead420cf76d2e3641f21b93c5e1e05a3b0c1664184a11dd3200b95e85121387535560628aec255c6ba1e0dbef1e735134dc7219f4925073ec1fc5fa955117e1738c08488ec71fc9dba935e8df5911c00ad999"], 0x20}, 0x1, 0x0, 0x0, 0x1400c480}, 0x4004) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180018400000000000000000000000049500000000000000", @ANYRES16], &(0x7f0000000480)='syzkaller\x00', 0x7, 0xec, &(0x7f00000004c0)=""/236, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000240)="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") (async) shmctl$IPC_RMID(0x0, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:35 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x89) [ 2610.996112] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:30:35 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x680000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x18, r2, 0xcaeb4a6f53a0d0cb, 0x0, 0x0, {0x1e}, [@ETHTOOL_A_PAUSE_HEADER={0x4}]}, 0x18}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}]}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'geneve1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x50, r2, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x65}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xff}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xa5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x44010) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r8, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f00000002c0)={0x2, @pix_mp={0x3, 0x0, 0x1a7d6a35, 0x1, 0x0, [{0x7, 0x4}, {0x401, 0x69b}, {0x9, 0x3f}, {0x8, 0x1}, {0x20, 0xffffffff}, {0x4e72cd3b, 0x400}, {0x3ff, 0x8000}, {0x6, 0x5}], 0x34, 0xc7, 0x1, 0x1, 0x6}}) [ 2611.084400] device batadv1237 entered promiscuous mode [ 2611.110738] 8021q: adding VLAN 0 to HW filter on device batadv1237 [ 2611.163177] bond1238: making interface vlan1071 the new active one [ 2611.186132] bond1238: Enslaving vlan1071 as an active interface with an up link [ 2611.195242] bond0: enslaved VLAN challenged slave lo. Adding VLANs will be blocked as long as lo is part of bond bond0 06:30:35 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xac) 06:30:35 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) r0 = getpgid(0x0) move_pages(r0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r2 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r2, &(0x7f0000000980)='ns/pid\x00') (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000c00)={0x1, 0x80, 0xff, 0x2, 0x7a, 0x2, 0x0, 0x77d9, 0x10000, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffffffff, 0x1, @perf_config_ext={0xcc, 0x4}, 0x40000, 0x9, 0x9, 0x9, 0x9, 0x7fffffff, 0x1ff, 0x0, 0xffffffff, 0x0, 0x6}, 0xffffffffffffffff, 0xa, r3, 0x1) r4 = getpgid(0x0) capget(&(0x7f00000003c0)={0x20080522, r4}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) (async) process_vm_writev(r4, &(0x7f0000000600)=[{&(0x7f0000000280)=""/81, 0x51}, {&(0x7f00000001c0)=""/28, 0x1c}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/177, 0xb1}, {&(0x7f0000000440)=""/63, 0x3f}, {&(0x7f0000000480)=""/223, 0xdf}, {&(0x7f0000000580)=""/106, 0x6a}], 0x7, &(0x7f0000000940)=[{&(0x7f0000000680)=""/98, 0x62}, {&(0x7f0000000700)=""/179, 0xb3}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000880)=""/134, 0x86}], 0x4, 0x0) (async) move_pages(r1, 0x7, &(0x7f0000000140)=[&(0x7f0000ffa000/0x3000)=nil, &(0x7f00002a2000/0x3000)=nil, &(0x7f0000af0000/0x3000)=nil, &(0x7f000048b000/0x4000)=nil, &(0x7f00003fe000/0xc00000)=nil, &(0x7f0000754000/0x9000)=nil, &(0x7f0000f04000/0x3000)=nil], &(0x7f00000001c0), &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x2) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0x4, 0x20, 0x7, 0x9, 0x0, 0x80000000, 0x40000, 0xd, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f0000000ac0), 0xa}, 0x1d508, 0x1, 0x7fff, 0x6, 0x7, 0x2d0f4766, 0x7f, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) move_pages(r4, 0x9, &(0x7f00000009c0)=[&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000d01000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f000076b000/0x3000)=nil, &(0x7f0000b9c000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000d15000/0x3000)=nil, &(0x7f000048e000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000a40)=[0x9, 0x4, 0x3, 0x7], &(0x7f0000000a80)=[0x0, 0x0, 0x0], 0x0) 06:30:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:30:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0xddbd0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) [ 2611.221976] FAT-fs (loop2): Directory bread(block 6) failed [ 2611.240614] bond0: lo is up - this may be due to an out of date ifenslave [ 2611.254572] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2611.287690] FAT-fs (loop2): Directory bread(block 6) failed 06:30:35 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x680000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x18, r2, 0xcaeb4a6f53a0d0cb, 0x0, 0x0, {0x1e}, [@ETHTOOL_A_PAUSE_HEADER={0x4}]}, 0x18}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}]}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'geneve1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x50, r2, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x65}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xff}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xa5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x44010) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r8, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f00000002c0)={0x2, @pix_mp={0x3, 0x0, 0x1a7d6a35, 0x1, 0x0, [{0x7, 0x4}, {0x401, 0x69b}, {0x9, 0x3f}, {0x8, 0x1}, {0x20, 0xffffffff}, {0x4e72cd3b, 0x400}, {0x3ff, 0x8000}, {0x6, 0x5}], 0x34, 0xc7, 0x1, 0x1, 0x6}}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x680000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x18, r2, 0xcaeb4a6f53a0d0cb, 0x0, 0x0, {0x1e}, [@ETHTOOL_A_PAUSE_HEADER={0x4}]}, 0x18}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}]}}]}, 0x48}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'geneve1\x00'}) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x50, r2, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x65}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xff}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xa5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x44010) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) (async) openat$cgroup_ro(r8, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f00000002c0)={0x2, @pix_mp={0x3, 0x0, 0x1a7d6a35, 0x1, 0x0, [{0x7, 0x4}, {0x401, 0x69b}, {0x9, 0x3f}, {0x8, 0x1}, {0x20, 0xffffffff}, {0x4e72cd3b, 0x400}, {0x3ff, 0x8000}, {0x6, 0x5}], 0x34, 0xc7, 0x1, 0x1, 0x6}}) (async) 06:30:35 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xad) 06:30:35 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) r0 = getpgid(0x0) move_pages(r0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) r2 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r2, &(0x7f0000000980)='ns/pid\x00') r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000c00)={0x1, 0x80, 0xff, 0x2, 0x7a, 0x2, 0x0, 0x77d9, 0x10000, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffffffff, 0x1, @perf_config_ext={0xcc, 0x4}, 0x40000, 0x9, 0x9, 0x9, 0x9, 0x7fffffff, 0x1ff, 0x0, 0xffffffff, 0x0, 0x6}, 0xffffffffffffffff, 0xa, r3, 0x1) (async) r4 = getpgid(0x0) capget(&(0x7f00000003c0)={0x20080522, r4}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) process_vm_writev(r4, &(0x7f0000000600)=[{&(0x7f0000000280)=""/81, 0x51}, {&(0x7f00000001c0)=""/28, 0x1c}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/177, 0xb1}, {&(0x7f0000000440)=""/63, 0x3f}, {&(0x7f0000000480)=""/223, 0xdf}, {&(0x7f0000000580)=""/106, 0x6a}], 0x7, &(0x7f0000000940)=[{&(0x7f0000000680)=""/98, 0x62}, {&(0x7f0000000700)=""/179, 0xb3}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000880)=""/134, 0x86}], 0x4, 0x0) (async) move_pages(r1, 0x7, &(0x7f0000000140)=[&(0x7f0000ffa000/0x3000)=nil, &(0x7f00002a2000/0x3000)=nil, &(0x7f0000af0000/0x3000)=nil, &(0x7f000048b000/0x4000)=nil, &(0x7f00003fe000/0xc00000)=nil, &(0x7f0000754000/0x9000)=nil, &(0x7f0000f04000/0x3000)=nil], &(0x7f00000001c0), &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x2) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0x4, 0x20, 0x7, 0x9, 0x0, 0x80000000, 0x40000, 0xd, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f0000000ac0), 0xa}, 0x1d508, 0x1, 0x7fff, 0x6, 0x7, 0x2d0f4766, 0x7f, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) move_pages(r4, 0x9, &(0x7f00000009c0)=[&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000d01000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f000076b000/0x3000)=nil, &(0x7f0000b9c000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000d15000/0x3000)=nil, &(0x7f000048e000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000a40)=[0x9, 0x4, 0x3, 0x7], &(0x7f0000000a80)=[0x0, 0x0, 0x0], 0x0) [ 2611.328260] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:30:35 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xfe) 06:30:35 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x300) [ 2611.500952] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2611.563296] device batadv1238 entered promiscuous mode [ 2611.584485] 8021q: adding VLAN 0 to HW filter on device batadv1238 [ 2611.595570] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2611.655122] bond1239: making interface vlan1072 the new active one [ 2611.670508] bond1239: Enslaving vlan1072 as an active interface with an up link [ 2611.708312] FAT-fs (loop2): Directory bread(block 6) failed 06:30:36 executing program 3: madvise(&(0x7f0000491000/0x1000)=nil, 0x1000, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() shmat(0x0, &(0x7f000031a000/0x2000)=nil, 0x7000) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x3c7324a8, 0x1, {r0}, {0xee00}, 0x15ff, 0x8000000000000001}) getpgid(r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x3, 0xa) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05120400002e00000008000300", @ANYRES32, @ANYRES64, @ANYBLOB="ab4921a5ca6c6827d083b439ab6cf5b1f4f9a3475f8bb19a6762c57c21f715011826eb2a8c8dbcc04e8a96c6a07429077da8c0dabc8459fa28896ee9eb25523ebb7fa0d878b724dd7bb1499c46f33f5f7b16990ca83b40e6a93513f741d4c8e09a115a54f13c3bd593eb6972308b69d008a8b4ef1f3cd255f41c5e3093cd733828e3c0b2309cbcee3b904556684e2a817918f28bb8e0489a3bfac1ff8f353456a39c063cd979e1c2", @ANYRES32, @ANYRESHEX=r2], 0x28}, 0x1, 0x0, 0x0, 0x80b0}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x44040011) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00037000fddbdf25200000000c009900060000006e0000000000a9f89831ca48cfcb44a06ae52356d9dcd34152c9fdd02d6b10934f48ed5a31175b5a2cfbf4f00049b00778ef7bfeb6086c3e29280a54881e15b586fd28d6c5693eb74cb73fc1f072b318829f9895796422ed4ee34ff4d9783f829a26603741361b68a328e1d65e2c0eab0238122039afb97f9f3ded7989231a7023b6b92489eead420cf76d2e3641f21b93c5e1e05a3b0c1664184a11dd3200b95e85121387535560628aec255c6ba1e0dbef1e735134dc7219f4925073ec1fc5fa955117e1738c08488ec71fc9dba935e8df5911c00ad999"], 0x20}, 0x1, 0x0, 0x0, 0x1400c480}, 0x4004) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180018400000000000000000000000049500000000000000", @ANYRES16], &(0x7f0000000480)='syzkaller\x00', 0x7, 0xec, &(0x7f00000004c0)=""/236, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000240)="eeb63a1e3cd106e4ad4f6db22aceecbe0dff5f809d11fb49bf5ddd889e6cd383b48fa4b7bbfd094918bf206e79d238e5856164ece061e3397de8920ef54604f1923db7acf149a639359e71ce50173ecf1448e25c92f2b39c01ff915661b1d8cf9b7ec55caeaf489817dc6d2d2db91461ca5161717f76b04f4c7fbf9cb35bc2cea99d53882e122105fd69ae503c8bfce12f08a3e8ef2efb107c102294854cc2ed481f920f293e8c4e7c55f3001a5a7aded380d426836a72ed3bb1d04dbd068d13cb4d9985909ff339ab9ac808fb4004bb01ac956fffe73b77ee77a86a1e9e3d9fef6f6a87cbfbf79d176f220f1fb25eedc86530d0c59f768fc225c2f3e2c13720") shmctl$IPC_RMID(0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) madvise(&(0x7f0000491000/0x1000)=nil, 0x1000, 0x10) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) shmat(0x0, &(0x7f000031a000/0x2000)=nil, 0x7000) (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x3c7324a8, 0x1, {r0}, {0xee00}, 0x15ff, 0x8000000000000001}) (async) getpgid(r1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$inet6(0xa, 0x3, 0xa) (async) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000009000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="aa19b3a3", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001800018014000200697036677265746170300000000000003400018008000300000000001400020073797a5f74756e0000000000000000001400020067656e65766531000000000000000000", @ANYRES8], 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05120400002e00000008000300", @ANYRES32, @ANYRES64, @ANYBLOB="ab4921a5ca6c6827d083b439ab6cf5b1f4f9a3475f8bb19a6762c57c21f715011826eb2a8c8dbcc04e8a96c6a07429077da8c0dabc8459fa28896ee9eb25523ebb7fa0d878b724dd7bb1499c46f33f5f7b16990ca83b40e6a93513f741d4c8e09a115a54f13c3bd593eb6972308b69d008a8b4ef1f3cd255f41c5e3093cd733828e3c0b2309cbcee3b904556684e2a817918f28bb8e0489a3bfac1ff8f353456a39c063cd979e1c2", @ANYRES32, @ANYRESHEX=r2], 0x28}, 0x1, 0x0, 0x0, 0x80b0}, 0x0) (async) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x44040011) (async) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00037000fddbdf25200000000c009900060000006e0000000000a9f89831ca48cfcb44a06ae52356d9dcd34152c9fdd02d6b10934f48ed5a31175b5a2cfbf4f00049b00778ef7bfeb6086c3e29280a54881e15b586fd28d6c5693eb74cb73fc1f072b318829f9895796422ed4ee34ff4d9783f829a26603741361b68a328e1d65e2c0eab0238122039afb97f9f3ded7989231a7023b6b92489eead420cf76d2e3641f21b93c5e1e05a3b0c1664184a11dd3200b95e85121387535560628aec255c6ba1e0dbef1e735134dc7219f4925073ec1fc5fa955117e1738c08488ec71fc9dba935e8df5911c00ad999"], 0x20}, 0x1, 0x0, 0x0, 0x1400c480}, 0x4004) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180018400000000000000000000000049500000000000000", @ANYRES16], &(0x7f0000000480)='syzkaller\x00', 0x7, 0xec, &(0x7f00000004c0)=""/236, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000240)="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") (async) shmctl$IPC_RMID(0x0, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) 06:30:36 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) mmap$binder(&(0x7f00004f2000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x50) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:36 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x600) 06:30:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:30:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0xdebd0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:30:36 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x680000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x18, r2, 0xcaeb4a6f53a0d0cb, 0x0, 0x0, {0x1e}, [@ETHTOOL_A_PAUSE_HEADER={0x4}]}, 0x18}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}]}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'geneve1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x50, r2, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x65}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xff}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xa5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x44010) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r8, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f00000002c0)={0x2, @pix_mp={0x3, 0x0, 0x1a7d6a35, 0x1, 0x0, [{0x7, 0x4}, {0x401, 0x69b}, {0x9, 0x3f}, {0x8, 0x1}, {0x20, 0xffffffff}, {0x4e72cd3b, 0x400}, {0x3ff, 0x8000}, {0x6, 0x5}], 0x34, 0xc7, 0x1, 0x1, 0x6}}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x680000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x18, r2, 0xcaeb4a6f53a0d0cb, 0x0, 0x0, {0x1e}, [@ETHTOOL_A_PAUSE_HEADER={0x4}]}, 0x18}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}]}}]}, 0x48}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'geneve1\x00'}) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x50, r2, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x65}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xff}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xa5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x44010) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) (async) openat$cgroup_ro(r8, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f00000002c0)={0x2, @pix_mp={0x3, 0x0, 0x1a7d6a35, 0x1, 0x0, [{0x7, 0x4}, {0x401, 0x69b}, {0x9, 0x3f}, {0x8, 0x1}, {0x20, 0xffffffff}, {0x4e72cd3b, 0x400}, {0x3ff, 0x8000}, {0x6, 0x5}], 0x34, 0xc7, 0x1, 0x1, 0x6}}) (async) [ 2611.902172] FAT-fs (loop2): Directory bread(block 6) failed [ 2611.927664] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:30:36 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x700) 06:30:36 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x900) 06:30:36 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xc00) [ 2612.083322] bond0: enslaved VLAN challenged slave lo. Adding VLANs will be blocked as long as lo is part of bond bond0 [ 2612.120478] bond0: lo is up - this may be due to an out of date ifenslave 06:30:36 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f00004f2000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x50) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:36 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000144000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) syz_clone(0x80820400, &(0x7f0000000240)="0b46cf31fc46433d39f2d1f75d9d7adb3553c4f17c2a7b0054c072f525a4bfa0bd4549fb825abd5ead6b6631c0272eaa441c4e211d69e7cc64b50ac9c17e81006f0d367bd86dcf", 0x47, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f00000002c0)="8e9505b7c9810df28ae91ff2ce1522f0ebd03fe804d341cade53e118bd409a8c1ee7ac3b2f959be9f078109833eda260b976d7507e73b8bb818bd506b280992bcdef4e34ff918efd609fc56832d1e94dcfe5e453dcceb6f4130309c8bd22c0cad0c3136c7ad7085397") mremap(&(0x7f000057c000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f000055a000/0x3000)=nil) [ 2612.137875] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:30:36 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xe00) 06:30:36 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xf00) [ 2612.225681] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:30:36 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async, rerun: 64) mmap$binder(&(0x7f00004f2000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x50) (rerun: 64) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2612.294477] device batadv1239 entered promiscuous mode 06:30:36 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x1200) [ 2612.338253] 8021q: adding VLAN 0 to HW filter on device batadv1239 [ 2612.487573] bond1240: making interface vlan1073 the new active one [ 2612.531908] bond1240: Enslaving vlan1073 as an active interface with an up link 06:30:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:30:36 executing program 1: connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1}, 0x3}}, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:30:36 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000144000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) syz_clone(0x80820400, &(0x7f0000000240)="0b46cf31fc46433d39f2d1f75d9d7adb3553c4f17c2a7b0054c072f525a4bfa0bd4549fb825abd5ead6b6631c0272eaa441c4e211d69e7cc64b50ac9c17e81006f0d367bd86dcf", 0x47, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f00000002c0)="8e9505b7c9810df28ae91ff2ce1522f0ebd03fe804d341cade53e118bd409a8c1ee7ac3b2f959be9f078109833eda260b976d7507e73b8bb818bd506b280992bcdef4e34ff918efd609fc56832d1e94dcfe5e453dcceb6f4130309c8bd22c0cad0c3136c7ad7085397") mremap(&(0x7f000057c000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f000055a000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000144000/0x2000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) syz_clone(0x80820400, &(0x7f0000000240)="0b46cf31fc46433d39f2d1f75d9d7adb3553c4f17c2a7b0054c072f525a4bfa0bd4549fb825abd5ead6b6631c0272eaa441c4e211d69e7cc64b50ac9c17e81006f0d367bd86dcf", 0x47, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f00000002c0)="8e9505b7c9810df28ae91ff2ce1522f0ebd03fe804d341cade53e118bd409a8c1ee7ac3b2f959be9f078109833eda260b976d7507e73b8bb818bd506b280992bcdef4e34ff918efd609fc56832d1e94dcfe5e453dcceb6f4130309c8bd22c0cad0c3136c7ad7085397") (async) mremap(&(0x7f000057c000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f000055a000/0x3000)=nil) (async) 06:30:36 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x1e00) 06:30:36 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x7f, 0xfe, 0x0, 0x20, 0x0, 0x6d4b, 0x4180, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x50, 0x2, @perf_bp={&(0x7f0000000140), 0x2}, 0x2000, 0x5, 0xfffffffe, 0x1, 0x3, 0x1, 0x81, 0x0, 0x7fff, 0x0, 0x1}, 0x0, 0x4, r1, 0x1) 06:30:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0xdfbd0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:30:36 executing program 1: connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1}, 0x3}}, 0x10) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 2612.575114] FAT-fs (loop2): Directory bread(block 6) failed 06:30:36 executing program 1: connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1}, 0x3}}, 0x10) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 2612.631007] FAT-fs (loop2): Directory bread(block 6) failed [ 2612.654574] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:30:36 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x2000) 06:30:37 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x2100) 06:30:37 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000144000/0x2000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) syz_clone(0x80820400, &(0x7f0000000240)="0b46cf31fc46433d39f2d1f75d9d7adb3553c4f17c2a7b0054c072f525a4bfa0bd4549fb825abd5ead6b6631c0272eaa441c4e211d69e7cc64b50ac9c17e81006f0d367bd86dcf", 0x47, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f00000002c0)="8e9505b7c9810df28ae91ff2ce1522f0ebd03fe804d341cade53e118bd409a8c1ee7ac3b2f959be9f078109833eda260b976d7507e73b8bb818bd506b280992bcdef4e34ff918efd609fc56832d1e94dcfe5e453dcceb6f4130309c8bd22c0cad0c3136c7ad7085397") (async) mremap(&(0x7f000057c000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f000055a000/0x3000)=nil) 06:30:37 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc7, 0xfe, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1ff, 0x7}, 0x482, 0x100000000, 0x1, 0x4, 0x0, 0x48f800, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 2612.933254] device batadv1240 entered promiscuous mode [ 2612.951388] 8021q: adding VLAN 0 to HW filter on device batadv1240 [ 2613.013733] bond1241: making interface vlan1074 the new active one [ 2613.048459] bond1241: Enslaving vlan1074 as an active interface with an up link 06:30:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x68}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:30:37 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 32) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async, rerun: 64) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (rerun: 64) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x7f, 0xfe, 0x0, 0x20, 0x0, 0x6d4b, 0x4180, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x50, 0x2, @perf_bp={&(0x7f0000000140), 0x2}, 0x2000, 0x5, 0xfffffffe, 0x1, 0x3, 0x1, 0x81, 0x0, 0x7fff, 0x0, 0x1}, 0x0, 0x4, r1, 0x1) 06:30:37 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x3500) 06:30:37 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000140)={0x6}) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:37 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc7, 0xfe, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1ff, 0x7}, 0x482, 0x100000000, 0x1, 0x4, 0x0, 0x48f800, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:30:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0xe0bd0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:30:37 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc7, 0xfe, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1ff, 0x7}, 0x482, 0x100000000, 0x1, 0x4, 0x0, 0x48f800, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc7, 0xfe, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1ff, 0x7}, 0x482, 0x100000000, 0x1, 0x4, 0x0, 0x48f800, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) 06:30:37 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 64) r0 = gettid() (rerun: 64) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x7f, 0xfe, 0x0, 0x20, 0x0, 0x6d4b, 0x4180, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x50, 0x2, @perf_bp={&(0x7f0000000140), 0x2}, 0x2000, 0x5, 0xfffffffe, 0x1, 0x3, 0x1, 0x81, 0x0, 0x7fff, 0x0, 0x1}, 0x0, 0x4, r1, 0x1) 06:30:37 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x3f00) [ 2613.173412] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:30:37 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7}, 0x100, 0x4, 0x0, 0x7, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x3, @pix_mp={0x4, 0x2, 0x47504a4d, 0x3, 0xc, [{0xffff, 0x7fffffff}, {0x9, 0x10000}, {0x7, 0x3}, {0x3d2, 0x3d1}, {0x7, 0x4}, {0x9, 0x2}, {0x9, 0x79}, {0x1, 0x2}], 0x2a, 0x8, 0x4, 0x0, 0x1}}) 06:30:37 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f00000002c0), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000140)=[0x2b200da1, 0xfffffe00, 0x80000001, 0x0, 0x5, 0x6], 0x6, 0x0, 0xffffffe0, 0x2, 0x6, 0xcba0, 0x20, {0x5, 0x1, 0x400, 0x28, 0x7, 0x7, 0x0, 0x6, 0x1, 0x2, 0x5f16, 0xff, 0x3, 0x80f, "73a04ab5b269f5cdb048126e056a9701809abb6e1b50e507f9fd77275d92d7d9"}}) 06:30:37 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x8700) [ 2613.353030] device batadv1241 entered promiscuous mode [ 2613.430983] 8021q: adding VLAN 0 to HW filter on device batadv1241 06:30:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6c}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:30:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0xe1bd0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:30:37 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000140)={0x6}) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:37 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7}, 0x100, 0x4, 0x0, 0x7, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x3, @pix_mp={0x4, 0x2, 0x47504a4d, 0x3, 0xc, [{0xffff, 0x7fffffff}, {0x9, 0x10000}, {0x7, 0x3}, {0x3d2, 0x3d1}, {0x7, 0x4}, {0x9, 0x2}, {0x9, 0x79}, {0x1, 0x2}], 0x2a, 0x8, 0x4, 0x0, 0x1}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7}, 0x100, 0x4, 0x0, 0x7, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x3, @pix_mp={0x4, 0x2, 0x47504a4d, 0x3, 0xc, [{0xffff, 0x7fffffff}, {0x9, 0x10000}, {0x7, 0x3}, {0x3d2, 0x3d1}, {0x7, 0x4}, {0x9, 0x2}, {0x9, 0x79}, {0x1, 0x2}], 0x2a, 0x8, 0x4, 0x0, 0x1}}) (async) 06:30:37 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x8900) 06:30:37 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f00000002c0), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000140)=[0x2b200da1, 0xfffffe00, 0x80000001, 0x0, 0x5, 0x6], 0x6, 0x0, 0xffffffe0, 0x2, 0x6, 0xcba0, 0x20, {0x5, 0x1, 0x400, 0x28, 0x7, 0x7, 0x0, 0x6, 0x1, 0x2, 0x5f16, 0xff, 0x3, 0x80f, "73a04ab5b269f5cdb048126e056a9701809abb6e1b50e507f9fd77275d92d7d9"}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f00000002c0), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000140)=[0x2b200da1, 0xfffffe00, 0x80000001, 0x0, 0x5, 0x6], 0x6, 0x0, 0xffffffe0, 0x2, 0x6, 0xcba0, 0x20, {0x5, 0x1, 0x400, 0x28, 0x7, 0x7, 0x0, 0x6, 0x1, 0x2, 0x5f16, 0xff, 0x3, 0x80f, "73a04ab5b269f5cdb048126e056a9701809abb6e1b50e507f9fd77275d92d7d9"}}) (async) [ 2613.532682] bond1242: making interface vlan1075 the new active one [ 2613.547034] bond1242: Enslaving vlan1075 as an active interface with an up link 06:30:37 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xac00) 06:30:37 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000140)={0x6}) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:37 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xad00) 06:30:37 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7}, 0x100, 0x4, 0x0, 0x7, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x3, @pix_mp={0x4, 0x2, 0x47504a4d, 0x3, 0xc, [{0xffff, 0x7fffffff}, {0x9, 0x10000}, {0x7, 0x3}, {0x3d2, 0x3d1}, {0x7, 0x4}, {0x9, 0x2}, {0x9, 0x79}, {0x1, 0x2}], 0x2a, 0x8, 0x4, 0x0, 0x1}}) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7}, 0x100, 0x4, 0x0, 0x7, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x3, @pix_mp={0x4, 0x2, 0x47504a4d, 0x3, 0xc, [{0xffff, 0x7fffffff}, {0x9, 0x10000}, {0x7, 0x3}, {0x3d2, 0x3d1}, {0x7, 0x4}, {0x9, 0x2}, {0x9, 0x79}, {0x1, 0x2}], 0x2a, 0x8, 0x4, 0x0, 0x1}}) (async) [ 2613.643434] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:30:37 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f00000002c0), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000140)=[0x2b200da1, 0xfffffe00, 0x80000001, 0x0, 0x5, 0x6], 0x6, 0x0, 0xffffffe0, 0x2, 0x6, 0xcba0, 0x20, {0x5, 0x1, 0x400, 0x28, 0x7, 0x7, 0x0, 0x6, 0x1, 0x2, 0x5f16, 0xff, 0x3, 0x80f, "73a04ab5b269f5cdb048126e056a9701809abb6e1b50e507f9fd77275d92d7d9"}}) 06:30:37 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xfeff) [ 2613.879261] device batadv1242 entered promiscuous mode [ 2613.911501] 8021q: adding VLAN 0 to HW filter on device batadv1242 06:30:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:30:38 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000002c0)={0x3, @sdr={0x34324d59, 0x1}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000003c0)={0x1, @sdr={0x50323234, 0xabd3}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f00000007c0)=""/4096) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{0x0, 0x9}, 0x2, 0xfff, 0x0, 0x0, 0x0}}) 06:30:38 executing program 4: madvise(&(0x7f0000153000/0x3000)=nil, 0x3000, 0x65) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00005ea000/0x3000)=nil, 0x3000, 0x14000, 0x2, &(0x7f0000fea000/0x14000)=nil) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r0 = gettid() madvise(&(0x7f00008a7000/0x4000)=nil, 0x4000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:38 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xfffe) 06:30:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0xe2bd0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:30:38 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) r1 = dup(r0) sendmsg$can_bcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x5, 0x0, 0x0, {}, {0x77359400}, {0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75fc20a3f4ecf7c0"}}, 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x6, 0x0, 0x0, {}, {0x77359400}, {0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6492cdcab3ddce3d"}}, 0x48}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() move_pages(r2, 0x5, &(0x7f0000000140)=[&(0x7f00002cf000/0x2000)=nil, &(0x7f0000779000/0x1000)=nil, &(0x7f00007d9000/0x4000)=nil, &(0x7f00002cb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil], &(0x7f00000001c0)=[0x1, 0x7, 0x5, 0xfffffff8, 0xfffffffe, 0x8, 0x1, 0x80], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) [ 2613.975437] bond1243: making interface vlan1076 the new active one [ 2614.001482] bond1243: Enslaving vlan1076 as an active interface with an up link 06:30:38 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000002c0)={0x3, @sdr={0x34324d59, 0x1}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000003c0)={0x1, @sdr={0x50323234, 0xabd3}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f00000007c0)=""/4096) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{0x0, 0x9}, 0x2, 0xfff, 0x0, 0x0, 0x0}}) 06:30:38 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x40000) 06:30:38 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x1000000) 06:30:38 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x2000000) 06:30:38 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x3000000) 06:30:38 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x4000000) [ 2614.907159] nla_parse: 3 callbacks suppressed [ 2614.907194] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2615.001776] device batadv1243 entered promiscuous mode [ 2615.024574] 8021q: adding VLAN 0 to HW filter on device batadv1243 06:30:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:30:39 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x6000000) 06:30:39 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff7ff, 0x2) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000002c0)={0x3, @sdr={0x34324d59, 0x1}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000003c0)={0x1, @sdr={0x50323234, 0xabd3}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f00000007c0)=""/4096) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{0x0, 0x9}, 0x2, 0xfff, 0x0, 0x0, 0x0}}) 06:30:39 executing program 4: madvise(&(0x7f0000153000/0x3000)=nil, 0x3000, 0x65) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mremap(&(0x7f00005ea000/0x3000)=nil, 0x3000, 0x14000, 0x2, &(0x7f0000fea000/0x14000)=nil) (async) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) (async) r0 = gettid() (async) madvise(&(0x7f00008a7000/0x4000)=nil, 0x4000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:39 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) r1 = dup(r0) sendmsg$can_bcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x5, 0x0, 0x0, {}, {0x77359400}, {0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75fc20a3f4ecf7c0"}}, 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x6, 0x0, 0x0, {}, {0x77359400}, {0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6492cdcab3ddce3d"}}, 0x48}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() move_pages(r2, 0x5, &(0x7f0000000140)=[&(0x7f00002cf000/0x2000)=nil, &(0x7f0000779000/0x1000)=nil, &(0x7f00007d9000/0x4000)=nil, &(0x7f00002cb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil], &(0x7f00000001c0)=[0x1, 0x7, 0x5, 0xfffffff8, 0xfffffffe, 0x8, 0x1, 0x80], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r0, &(0x7f0000000440), 0x10) (async) dup(r0) (async) sendmsg$can_bcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x5, 0x0, 0x0, {}, {0x77359400}, {0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75fc20a3f4ecf7c0"}}, 0x48}}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x6, 0x0, 0x0, {}, {0x77359400}, {0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6492cdcab3ddce3d"}}, 0x48}}, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) move_pages(r2, 0x5, &(0x7f0000000140)=[&(0x7f00002cf000/0x2000)=nil, &(0x7f0000779000/0x1000)=nil, &(0x7f00007d9000/0x4000)=nil, &(0x7f00002cb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil], &(0x7f00000001c0)=[0x1, 0x7, 0x5, 0xfffffff8, 0xfffffffe, 0x8, 0x1, 0x80], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) (async) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) 06:30:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0xe3bd0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:30:39 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x7000000) [ 2615.233987] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:30:39 executing program 4: madvise(&(0x7f0000153000/0x3000)=nil, 0x3000, 0x65) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mremap(&(0x7f00005ea000/0x3000)=nil, 0x3000, 0x14000, 0x2, &(0x7f0000fea000/0x14000)=nil) (async) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r0 = gettid() (async) madvise(&(0x7f00008a7000/0x4000)=nil, 0x4000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) 06:30:39 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff803, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x1, @vbi={0xffff, 0x80, 0x80000000, 0x47425247, [0x1, 0x3], [0x80000000, 0x5476], 0x108}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x7) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x3, 0x4, 0x0, 0x81}) 06:30:39 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x8000000) 06:30:39 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() r0 = getpgid(0x0) capget(&(0x7f00000003c0)={0x20080522, r0}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f0000019280)=""/259, 0x103}, {&(0x7f0000000140)}, {&(0x7f0000000280)=""/102400, 0x19000}], 0x3, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) mremap(&(0x7f0000144000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000032c000/0x4000)=nil) msync(&(0x7f0000686000/0x3000)=nil, 0x3000, 0x5) 06:30:39 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff803, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x1, @vbi={0xffff, 0x80, 0x80000000, 0x47425247, [0x1, 0x3], [0x80000000, 0x5476], 0x108}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x7) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x3, 0x4, 0x0, 0x81}) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff803, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x1, @vbi={0xffff, 0x80, 0x80000000, 0x47425247, [0x1, 0x3], [0x80000000, 0x5476], 0x108}}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x7) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x3, 0x4, 0x0, 0x81}) (async) [ 2615.552002] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2615.702357] device batadv1244 entered promiscuous mode [ 2615.775511] 8021q: adding VLAN 0 to HW filter on device batadv1244 [ 2615.905591] bond1244: making interface vlan1077 the new active one [ 2615.952057] bond1244: Enslaving vlan1077 as an active interface with an up link 06:30:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) 06:30:40 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x9000000) 06:30:40 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() r0 = getpgid(0x0) capget(&(0x7f00000003c0)={0x20080522, r0}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f0000019280)=""/259, 0x103}, {&(0x7f0000000140)}, {&(0x7f0000000280)=""/102400, 0x19000}], 0x3, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) mremap(&(0x7f0000144000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000032c000/0x4000)=nil) msync(&(0x7f0000686000/0x3000)=nil, 0x3000, 0x5) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) getpgid(0x0) (async) capget(&(0x7f00000003c0)={0x20080522, r0}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) (async) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f0000019280)=""/259, 0x103}, {&(0x7f0000000140)}, {&(0x7f0000000280)=""/102400, 0x19000}], 0x3, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x0, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) mremap(&(0x7f0000144000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000032c000/0x4000)=nil) (async) msync(&(0x7f0000686000/0x3000)=nil, 0x3000, 0x5) (async) 06:30:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0xe4bd0a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) [ 2616.107066] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2616.265530] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2616.313294] device batadv1245 entered promiscuous mode [ 2616.338011] 8021q: adding VLAN 0 to HW filter on device batadv1245 [ 2616.406667] bond1245: making interface vlan1078 the new active one 06:30:40 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) r1 = dup(r0) sendmsg$can_bcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x5, 0x0, 0x0, {}, {0x77359400}, {0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75fc20a3f4ecf7c0"}}, 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x6, 0x0, 0x0, {}, {0x77359400}, {0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6492cdcab3ddce3d"}}, 0x48}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() move_pages(r2, 0x5, &(0x7f0000000140)=[&(0x7f00002cf000/0x2000)=nil, &(0x7f0000779000/0x1000)=nil, &(0x7f00007d9000/0x4000)=nil, &(0x7f00002cb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil], &(0x7f00000001c0)=[0x1, 0x7, 0x5, 0xfffffff8, 0xfffffffe, 0x8, 0x1, 0x80], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r0, &(0x7f0000000440), 0x10) (async) dup(r0) (async) sendmsg$can_bcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x5, 0x0, 0x0, {}, {0x77359400}, {0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75fc20a3f4ecf7c0"}}, 0x48}}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x6, 0x0, 0x0, {}, {0x77359400}, {0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6492cdcab3ddce3d"}}, 0x48}}, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) move_pages(r2, 0x5, &(0x7f0000000140)=[&(0x7f00002cf000/0x2000)=nil, &(0x7f0000779000/0x1000)=nil, &(0x7f00007d9000/0x4000)=nil, &(0x7f00002cb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil], &(0x7f00000001c0)=[0x1, 0x7, 0x5, 0xfffffff8, 0xfffffffe, 0x8, 0x1, 0x80], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) (async) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) 06:30:40 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff803, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x1, @vbi={0xffff, 0x80, 0x80000000, 0x47425247, [0x1, 0x3], [0x80000000, 0x5476], 0x108}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x7) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x3, 0x4, 0x0, 0x81}) syz_open_dev$vim2m(&(0x7f0000000180), 0x80fffff803, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x1, @vbi={0xffff, 0x80, 0x80000000, 0x47425247, [0x1, 0x3], [0x80000000, 0x5476], 0x108}}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x7) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x3, 0x4, 0x0, 0x81}) (async) 06:30:40 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xc000000) 06:30:40 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() r0 = getpgid(0x0) capget(&(0x7f00000003c0)={0x20080522, r0}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f0000019280)=""/259, 0x103}, {&(0x7f0000000140)}, {&(0x7f0000000280)=""/102400, 0x19000}], 0x3, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) mremap(&(0x7f0000144000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000032c000/0x4000)=nil) msync(&(0x7f0000686000/0x3000)=nil, 0x3000, 0x5) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) getpgid(0x0) (async) capget(&(0x7f00000003c0)={0x20080522, r0}, &(0x7f0000000400)={0x7, 0x3, 0x16f9, 0x5, 0x9, 0x1ff}) (async) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f0000019280)=""/259, 0x103}, {&(0x7f0000000140)}, {&(0x7f0000000280)=""/102400, 0x19000}], 0x3, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x0, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) (async) mremap(&(0x7f0000144000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000032c000/0x4000)=nil) (async) msync(&(0x7f0000686000/0x3000)=nil, 0x3000, 0x5) (async) 06:30:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0xe4ffffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 06:30:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000012a00)=ANY=[@ANYBLOB="340000001000010400000000000000000000d996", @ANYRES32=r7, @ANYBLOB="4907060000000000140012800b000100626174616476"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2f5}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40008100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xbc}}, 0x0) [ 2616.464248] bond1245: Enslaving vlan1078 as an active interface with an up link [ 2616.524814] fat__get_entry: 8 callbacks suppressed [ 2616.524825] FAT-fs (loop2): Directory bread(block 6) failed [ 2616.565348] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:30:41 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x0) mremap(&(0x7f000044c000/0x2000)=nil, 0x2000, 0x4000, 0x6, &(0x7f0000268000/0x4000)=nil) 06:30:41 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xe000000) 06:30:41 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0xf000000) 06:30:41 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x12000000) 06:30:41 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x1e000000) 06:30:41 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140), 0x20000000) [ 2618.780876] device vcan3 entered promiscuous mode [ 2618.797705] IPv6: ADDRCONF(NETDEV_CHANGE): vcan3: link becomes ready [ 2619.636096] FAT-fs (loop2): Directory bread(block 6) failed [ 2621.490624] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2621.531611] device batadv1246 entered promiscuous mode [ 2621.553158] 8021q: adding VLAN 0 to HW filter on device batadv1246 [ 2636.285275] FAT-fs (loop2): Directory bread(block 6) failed [ 2652.716517] aoe: packet could not be sent on wpan0. consider increasing tx_queue_len [ 2652.725332] ieee802154 phy1 wpan1: encryption failed: -22 [ 2658.749871] watchdog: BUG: soft lockup - CPU#1 stuck for 23s! [syz-executor.3:25754] [ 2658.757783] Modules linked in: [ 2658.760976] irq event stamp: 5514811 [ 2658.764708] hardirqs last enabled at (5514810): [] _raw_spin_unlock_irq+0x24/0x80 [ 2658.773984] hardirqs last disabled at (5514811): [] trace_hardirqs_off_thunk+0x1a/0x1c [ 2658.783603] softirqs last enabled at (5415214): [] __do_softirq+0x678/0x980 [ 2658.792367] softirqs last disabled at (5415217): [] irq_exit+0x215/0x260 [ 2658.801473] CPU: 1 PID: 25754 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2658.809366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2658.818742] RIP: 0010:_raw_spin_unlock_irq+0x50/0x80 [ 2658.823859] Code: c0 98 82 f1 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 31 48 83 3d 01 31 d8 01 00 74 25 fb 66 0f 1f 44 00 00 01 00 00 00 e8 26 1b 28 f9 65 8b 05 9f 8d e8 77 85 c0 74 02 5d [ 2658.842764] RSP: 0018:ffff8880ba107de0 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 2658.850476] RAX: 1ffffffff13e3053 RBX: dffffc0000000000 RCX: 1ffff110042dc985 [ 2658.857754] RDX: dffffc0000000000 RSI: ffff8880216e4c30 RDI: ffff8880216e4c04 [ 2658.865023] RBP: ffff8880ba122b40 R08: 0000000000000000 R09: 0000000000000000 [ 2658.872292] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8688f6d0 [ 2658.879562] R13: ffff8880ba122b40 R14: ffff8880ba107e78 R15: 0000000000000000 [ 2658.886838] FS: 00007f5809867700(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 2658.895059] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2658.900937] CR2: 00007f4275e85058 CR3: 000000009a65f000 CR4: 00000000003406e0 [ 2658.908209] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2658.915479] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2658.922749] Call Trace: [ 2658.925329] [ 2658.927486] expire_timers+0x238/0x4e0 [ 2658.931381] run_timer_softirq+0x21c/0x670 [ 2658.935623] ? expire_timers+0x4e0/0x4e0 [ 2658.939695] ? check_preemption_disabled+0x41/0x280 [ 2658.944726] __do_softirq+0x265/0x980 [ 2658.948540] irq_exit+0x215/0x260 [ 2658.951997] smp_apic_timer_interrupt+0x136/0x550 [ 2658.956851] apic_timer_interrupt+0xf/0x20 [ 2658.961078] [ 2658.963314] RIP: 0010:page_remove_file_rmap+0x99/0xa30 [ 2658.968590] Code: c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f e9 e0 14 0f 00 e8 3b d4 d2 ff 49 8d 7e 30 be 04 00 00 00 e8 ad 9d 08 00 f0 41 83 46 30 ff <0f> 98 c3 31 ff 89 de e8 4b d5 d2 ff 84 db 74 bc 41 bd ff ff ff ff [ 2658.987499] RSP: 0018:ffff88821d30f700 EFLAGS: 00000213 ORIG_RAX: ffffffffffffff13 [ 2658.995218] RAX: fffff940004a9977 RBX: 0000000000000000 RCX: ffffffff818fb143 [ 2659.002503] RDX: fffff940004a9977 RSI: 0000000000000004 RDI: ffffea000254cbb0 [ 2659.009779] RBP: ffffea000254cb80 R08: 0000000000000001 R09: fffff940004a9976 [ 2659.017051] R10: ffffea000254cbb3 R11: 0000000000000000 R12: 0000000000000000 [ 2659.024325] R13: 0000000000000000 R14: ffffea000254cb80 R15: 00007f580a318000 [ 2659.031622] ? page_remove_file_rmap+0x93/0xa30 [ 2659.036306] page_remove_rmap+0xe5/0x120 [ 2659.040382] unmap_page_range+0x147d/0x2c50 [ 2659.044730] ? vm_normal_page_pmd+0x4c0/0x4c0 [ 2659.049229] ? uprobe_munmap+0x2d/0x4d0 [ 2659.053210] unmap_single_vma+0x198/0x300 [ 2659.057368] unmap_vmas+0xa9/0x180 [ 2659.060913] exit_mmap+0x2b9/0x530 [ 2659.064454] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 2659.069727] ? rcu_nmi_exit+0xb3/0x180 [ 2659.073633] ? __khugepaged_exit+0x2a6/0x3e0 [ 2659.078042] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2659.083060] ? kmem_cache_free+0x226/0x260 [ 2659.087297] ? __khugepaged_exit+0x2c7/0x3e0 [ 2659.091710] mmput+0x14e/0x4a0 [ 2659.094908] do_exit+0xaec/0x2be0 [ 2659.098367] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2659.102950] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2659.107713] ? mm_update_next_owner+0x650/0x650 [ 2659.112383] ? rcu_nmi_exit+0xb3/0x180 [ 2659.116275] ? retint_kernel+0x2d/0x2d [ 2659.120170] do_group_exit+0x125/0x310 [ 2659.124063] get_signal+0x3f2/0x1f70 [ 2659.127786] ? compat_process_vm_rw+0x250/0x250 [ 2659.132467] do_signal+0x8f/0x1670 [ 2659.136016] ? security_capable+0x8f/0xc0 [ 2659.140166] ? setup_sigcontext+0x820/0x820 [ 2659.144489] ? capable+0x8a/0x100 [ 2659.147943] ? kernel_move_pages+0x250/0x1820 [ 2659.152450] ? HARDIRQ_verbose+0x10/0x10 [ 2659.156522] ? __se_sys_futex+0x28f/0x3b0 [ 2659.160668] ? __se_sys_futex+0x298/0x3b0 [ 2659.164818] ? do_futex+0x1880/0x1880 [ 2659.168627] ? exit_to_usermode_loop+0x36/0x2a0 [ 2659.173298] exit_to_usermode_loop+0x204/0x2a0 [ 2659.177879] do_syscall_64+0x538/0x620 [ 2659.181771] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2659.186970] RIP: 0033:0x7f580aef2279 [ 2659.190694] Code: Bad RIP value. [ 2659.194066] RSP: 002b:00007f5809867168 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2659.201783] RAX: fffffffffffffff2 RBX: 00007f580b004f80 RCX: 00007f580aef2279 [ 2659.209059] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000004dd2 [ 2659.216330] RBP: 00007f580af4c189 R08: 0000000000000001 R09: 0000000000000000 [ 2659.223600] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000000 [ 2659.230869] R13: 00007ffc1eaf53ff R14: 00007f5809867300 R15: 0000000000022000 [ 2659.238157] Sending NMI from CPU 1 to CPUs 0: [ 2659.243024] NMI backtrace for cpu 0 [ 2659.243031] CPU: 0 PID: 11767 Comm: kworker/u4:3 Not tainted 4.19.211-syzkaller #0 [ 2659.243037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2659.243042] Workqueue: bat_events batadv_purge_orig [ 2659.243049] RIP: 0010:perf_trace_lock_acquire+0x161/0x530 [ 2659.243059] Code: 02 00 0f 85 ea 02 00 00 49 8b 84 24 80 00 00 00 48 85 c0 75 27 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 <0f> 85 16 03 00 00 48 8b 03 48 85 c0 0f 84 fa 01 00 00 8b 85 50 ff [ 2659.243063] RSP: 0018:ffff88802fe27ab8 EFLAGS: 00000046 [ 2659.243071] RAX: dffffc0000000000 RBX: ffffe8ffffcc7000 RCX: 1ffffffff139f5e0 [ 2659.243076] RDX: 1ffffd1ffff98e00 RSI: ffffffff83771e31 RDI: ffffffff89f6d4a0 [ 2659.243081] RBP: ffff88802fe27ba0 R08: 0000000000000000 R09: 0000000000000000 [ 2659.243086] R10: 0000000000000005 R11: 0000000000000000 R12: ffffffff89f6d420 [ 2659.243091] R13: ffff888222d07dd8 R14: 0000000000000000 R15: ffff88802fe27b78 [ 2659.243097] FS: 0000000000000000(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 2659.243101] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2659.243107] CR2: 00007fa67fe4f000 CR3: 000000009a65f000 CR4: 00000000003406f0 [ 2659.243112] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2659.243117] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2659.243120] Call Trace: [ 2659.243124] ? perf_trace_lock_acquire+0x530/0x530 [ 2659.243128] ? HARDIRQ_verbose+0x10/0x10 [ 2659.243132] ? batadv_purge_orig_ref+0xa2c/0x1110 [ 2659.243135] lock_acquire+0x298/0x3c0 [ 2659.243139] ? batadv_purge_orig_ref+0x16d/0x1110 [ 2659.243143] _raw_spin_lock_bh+0x2f/0x40 [ 2659.243147] ? batadv_purge_orig_ref+0x16d/0x1110 [ 2659.243151] batadv_purge_orig_ref+0x16d/0x1110 [ 2659.243154] ? HARDIRQ_verbose+0x10/0x10 [ 2659.243158] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2659.243162] ? batadv_orig_node_new+0x7a0/0x7a0 [ 2659.243167] ? check_preemption_disabled+0x41/0x280 [ 2659.243170] batadv_purge_orig+0x17/0x60 [ 2659.243174] process_one_work+0x864/0x1570 [ 2659.243178] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 2659.243181] worker_thread+0x64c/0x1130 [ 2659.243185] ? __kthread_parkme+0x133/0x1e0 [ 2659.243189] ? process_one_work+0x1570/0x1570 [ 2659.243192] kthread+0x33f/0x460 [ 2659.243196] ? kthread_park+0x180/0x180 [ 2659.243200] ret_from_fork+0x24/0x30 [ 2659.243675] Kernel panic - not syncing: softlockup: hung tasks [ 2659.471368] CPU: 1 PID: 25754 Comm: syz-executor.3 Tainted: G L 4.19.211-syzkaller #0 [ 2659.480644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2659.489995] Call Trace: [ 2659.492575] [ 2659.494732] dump_stack+0x1fc/0x2ef [ 2659.498363] panic+0x26a/0x50e [ 2659.501558] ? __warn_printk+0xf3/0xf3 [ 2659.505460] ? cpumask_next+0x3c/0x40 [ 2659.509264] ? printk_safe_flush+0xd6/0x120 [ 2659.513590] ? watchdog_timer_fn.cold+0x5/0x25 [ 2659.518174] ? watchdog_timer_fn+0x53e/0x580 [ 2659.522587] watchdog_timer_fn.cold+0x16/0x25 [ 2659.527096] __hrtimer_run_queues+0x3f6/0xe60 [ 2659.531601] ? softlockup_fn+0xb0/0xb0 [ 2659.535501] ? hrtimer_fixup_free+0xa0/0xa0 [ 2659.539823] ? kvm_clock_get_cycles+0x14/0x30 [ 2659.544331] ? ktime_get_update_offsets_now+0x2ec/0x460 [ 2659.549705] hrtimer_interrupt+0x326/0x9e0 [ 2659.553958] smp_apic_timer_interrupt+0x10c/0x550 [ 2659.558806] apic_timer_interrupt+0xf/0x20 [ 2659.563041] RIP: 0010:_raw_spin_unlock_irq+0x50/0x80 [ 2659.568146] Code: c0 98 82 f1 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 31 48 83 3d 01 31 d8 01 00 74 25 fb 66 0f 1f 44 00 00 01 00 00 00 e8 26 1b 28 f9 65 8b 05 9f 8d e8 77 85 c0 74 02 5d [ 2659.587198] RSP: 0018:ffff8880ba107de0 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 2659.594920] RAX: 1ffffffff13e3053 RBX: dffffc0000000000 RCX: 1ffff110042dc985 [ 2659.602200] RDX: dffffc0000000000 RSI: ffff8880216e4c30 RDI: ffff8880216e4c04 [ 2659.609569] RBP: ffff8880ba122b40 R08: 0000000000000000 R09: 0000000000000000 [ 2659.616841] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8688f6d0 [ 2659.624111] R13: ffff8880ba122b40 R14: ffff8880ba107e78 R15: 0000000000000000 [ 2659.631405] ? apic_timer_interrupt+0xa/0x20 [ 2659.635817] ? garp_pdu_rcv+0xc00/0xc00 [ 2659.639808] expire_timers+0x238/0x4e0 [ 2659.643702] run_timer_softirq+0x21c/0x670 [ 2659.647943] ? expire_timers+0x4e0/0x4e0 [ 2659.652010] ? check_preemption_disabled+0x41/0x280 [ 2659.657039] __do_softirq+0x265/0x980 [ 2659.660850] irq_exit+0x215/0x260 [ 2659.664309] smp_apic_timer_interrupt+0x136/0x550 [ 2659.669159] apic_timer_interrupt+0xf/0x20 [ 2659.673388] [ 2659.675666] RIP: 0010:page_remove_file_rmap+0x99/0xa30 [ 2659.680942] Code: c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f e9 e0 14 0f 00 e8 3b d4 d2 ff 49 8d 7e 30 be 04 00 00 00 e8 ad 9d 08 00 f0 41 83 46 30 ff <0f> 98 c3 31 ff 89 de e8 4b d5 d2 ff 84 db 74 bc 41 bd ff ff ff ff [ 2659.699855] RSP: 0018:ffff88821d30f700 EFLAGS: 00000213 ORIG_RAX: ffffffffffffff13 [ 2659.707668] RAX: fffff940004a9977 RBX: 0000000000000000 RCX: ffffffff818fb143 [ 2659.714947] RDX: fffff940004a9977 RSI: 0000000000000004 RDI: ffffea000254cbb0 [ 2659.722224] RBP: ffffea000254cb80 R08: 0000000000000001 R09: fffff940004a9976 [ 2659.729687] R10: ffffea000254cbb3 R11: 0000000000000000 R12: 0000000000000000 [ 2659.736960] R13: 0000000000000000 R14: ffffea000254cb80 R15: 00007f580a318000 [ 2659.744248] ? page_remove_file_rmap+0x93/0xa30 [ 2659.748932] page_remove_rmap+0xe5/0x120 [ 2659.753005] unmap_page_range+0x147d/0x2c50 [ 2659.757352] ? vm_normal_page_pmd+0x4c0/0x4c0 [ 2659.761851] ? uprobe_munmap+0x2d/0x4d0 [ 2659.765843] unmap_single_vma+0x198/0x300 [ 2659.770011] unmap_vmas+0xa9/0x180 [ 2659.773562] exit_mmap+0x2b9/0x530 [ 2659.777113] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 2659.782398] ? rcu_nmi_exit+0xb3/0x180 [ 2659.786315] ? __khugepaged_exit+0x2a6/0x3e0 [ 2659.790725] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2659.795748] ? kmem_cache_free+0x226/0x260 [ 2659.799992] ? __khugepaged_exit+0x2c7/0x3e0 [ 2659.804408] mmput+0x14e/0x4a0 [ 2659.807607] do_exit+0xaec/0x2be0 [ 2659.811070] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2659.815652] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2659.820411] ? mm_update_next_owner+0x650/0x650 [ 2659.825080] ? rcu_nmi_exit+0xb3/0x180 [ 2659.828973] ? retint_kernel+0x2d/0x2d [ 2659.832868] do_group_exit+0x125/0x310 [ 2659.836765] get_signal+0x3f2/0x1f70 [ 2659.840490] ? compat_process_vm_rw+0x250/0x250 [ 2659.845179] do_signal+0x8f/0x1670 [ 2659.848723] ? security_capable+0x8f/0xc0 [ 2659.852878] ? setup_sigcontext+0x820/0x820 [ 2659.857211] ? capable+0x8a/0x100 [ 2659.860665] ? kernel_move_pages+0x250/0x1820 [ 2659.865165] ? HARDIRQ_verbose+0x10/0x10 [ 2659.869232] ? __se_sys_futex+0x28f/0x3b0 [ 2659.873376] ? __se_sys_futex+0x298/0x3b0 [ 2659.877524] ? do_futex+0x1880/0x1880 [ 2659.881328] ? exit_to_usermode_loop+0x36/0x2a0 [ 2659.885999] exit_to_usermode_loop+0x204/0x2a0 [ 2659.890587] do_syscall_64+0x538/0x620 [ 2659.894484] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2659.899673] RIP: 0033:0x7f580aef2279 [ 2659.903389] Code: Bad RIP value. [ 2659.906749] RSP: 002b:00007f5809867168 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2659.914462] RAX: fffffffffffffff2 RBX: 00007f580b004f80 RCX: 00007f580aef2279 [ 2659.921736] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000004dd2 [ 2659.929016] RBP: 00007f580af4c189 R08: 0000000000000001 R09: 0000000000000000 [ 2659.936291] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000000 [ 2659.943564] R13: 00007ffc1eaf53ff R14: 00007f5809867300 R15: 0000000000022000 [ 2659.951045] Kernel Offset: disabled [ 2659.954669] Rebooting in 86400 seconds..